Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
File:                     pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft (raw, json)
Hash identifier:          r1JbWQ4O7woQlq8rtT4261PtRznxndV8w2aknaOU+Mk=
Subject key identifier:   8B:90:E6:D5:AB:40:85:B2:7A:5D:3C:FC:94:FD:6A:4C:61:3E:22:43
Authority key identifier: A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37
Certificate issuer:       /CN=a67f1cf27426070aeda7b26053453c283fdf7537
Certificate serial:       019E2BB9E9B4CB5AAF43E0782D20C0646146
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
Manifest number:          0B9A
Signing time:             Fri 15 May 2026 13:01:04 +0000
Manifest this update:     Fri 15 May 2026 13:01:04 +0000
Manifest next update:     Sat 16 May 2026 13:01:04 +0000
Files and hashes:         1: XxeNNCKdsKtsWJE0Iy3TYGX5MOE.roa (hash: wAuwL6Iz2Pwm9WGIInMjcsxZMvhkc1vHutS+nMnQpa8=)
                          2: pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl (hash: 8aWbZ9DQGxZ31RO6MQyHp77ujL4sQ43z4RnOuX8QZj8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2b:b9:e9:b4:cb:5a:af:43:e0:78:2d:20:c0:64:61:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a67f1cf27426070aeda7b26053453c283fdf7537
        Validity
            Not Before: May 15 13:01:04 2026 GMT
            Not After : May 16 13:01:04 2026 GMT
        Subject: CN=8b90e6d5ab4085b27a5d3cfc94fd6a4c613e2243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c1:9c:83:f2:2f:b4:6d:b0:12:aa:3d:2b:4d:
                    ce:27:74:d8:8e:83:c8:d5:dc:3e:57:af:97:39:d9:
                    8d:b3:8d:43:e3:d4:b2:4e:8d:fe:40:65:65:5c:d7:
                    a9:58:b4:89:e8:22:fb:2b:0e:bb:d7:10:de:9f:77:
                    d1:a8:04:9c:98:62:bf:66:f9:d3:91:ec:57:4e:15:
                    c3:37:18:cc:0d:a2:87:84:51:21:f2:b5:9e:9a:17:
                    52:2f:ee:99:c1:df:b4:37:a7:0b:07:ea:93:f8:ac:
                    1c:0d:cd:94:f0:13:0f:d8:44:43:fb:76:07:14:e7:
                    c6:a6:b0:fc:45:ce:2c:35:86:00:dc:e6:a2:44:f1:
                    74:87:c4:5e:7e:28:45:31:18:52:7f:f7:c4:8a:88:
                    89:ca:18:b1:00:fb:63:92:67:b8:a4:78:4e:55:cb:
                    0b:68:ab:04:b3:b8:e1:a0:cc:29:a4:4a:b8:c1:d5:
                    b8:5f:9c:45:d0:aa:20:9e:03:b6:e7:7b:27:57:da:
                    fc:76:03:0e:25:bc:5d:7b:60:8c:72:db:db:2a:e3:
                    5c:bf:60:f6:2c:0a:c0:8d:f6:0e:ae:c9:e0:7a:d2:
                    7f:cd:1e:8f:43:07:ce:8f:48:ef:1d:df:77:b1:32:
                    bf:44:d7:05:82:5b:0d:41:ee:11:47:10:d3:93:94:
                    96:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:90:E6:D5:AB:40:85:B2:7A:5D:3C:FC:94:FD:6A:4C:61:3E:22:43
            X509v3 Authority Key Identifier:
                keyid:A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:33:59:7b:d1:fe:fa:ea:14:3a:26:ed:22:10:0b:c4:36:20:
         f5:c4:e1:48:dc:d7:8f:17:e7:6e:9d:f0:9d:a5:46:fc:77:d8:
         0d:33:59:b0:45:3c:f3:31:22:ee:31:15:cd:e2:e9:aa:2b:be:
         ac:0b:71:f2:22:e3:3e:d3:92:bf:9c:39:e3:b0:88:4e:8f:98:
         81:53:2c:37:27:1e:44:10:ec:c9:7c:e9:22:8f:df:5d:31:18:
         8f:5b:03:bb:b0:4c:67:71:e9:e1:fb:ca:fd:7b:af:d4:fd:e6:
         0c:da:e7:82:98:c1:d6:62:ca:80:4f:65:43:a0:87:ee:9a:af:
         e9:0b:bd:b4:14:c4:c4:e9:cc:e4:85:cc:6c:80:2b:e8:b8:2c:
         c4:55:a2:c7:68:67:d6:db:4a:5b:0b:35:ef:fa:ec:a6:ed:ca:
         30:09:bb:22:1c:84:f3:79:06:31:a9:e3:e3:6a:93:4a:0a:e6:
         66:48:1a:85:16:cb:ea:52:8d:68:b5:01:02:1c:cb:71:a9:cf:
         65:00:b8:f1:2f:8d:ca:36:8b:0d:a5:aa:45:48:39:a4:23:94:
         1e:14:23:2e:46:55:47:fa:cf:86:c0:6c:65:71:c5:6b:be:f0:
         24:b7:da:f4:51:24:d1:bb:e4:94:de:46:08:8f:d7:91:b1:87:
         25:2e:0e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:46:16 2026 by rpki-client