Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
File:                     4oqGzL9We9migv3fdfC39VQiItI.mft (raw, json)
Hash identifier:          yU1t6WnjRqK0tFjhuWWXW4SEzABkZq91m83jLR3O9to=
Subject key identifier:   18:E2:0E:26:9B:52:29:B7:B3:63:D1:A2:54:FB:16:D3:DA:62:FF:E1
Authority key identifier: E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
Certificate issuer:       /CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Certificate serial:       019E2B1563CA243CE259FD19E2F0DCC1842C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
Manifest number:          08C3
Signing time:             Fri 15 May 2026 10:01:22 +0000
Manifest this update:     Fri 15 May 2026 10:01:22 +0000
Manifest next update:     Sat 16 May 2026 10:01:22 +0000
Files and hashes:         1: 4oqGzL9We9migv3fdfC39VQiItI.crl (hash: 54fqaFBAtmd2I315FPDldUU6TQA10+GQ3rmHZuj1T1Q=)
                          2: G2elpiRe3mLE21vYizlf0cxzEYA.roa (hash: Eg0ncyWZplHxiExP5Yc2JBQmHWqje615/1fpu2tFHEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 10:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2b:15:63:ca:24:3c:e2:59:fd:19:e2:f0:dc:c1:84:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
        Validity
            Not Before: May 15 10:01:22 2026 GMT
            Not After : May 16 10:01:22 2026 GMT
        Subject: CN=18e20e269b5229b7b363d1a254fb16d3da62ffe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b0:c8:90:64:1f:64:ff:24:93:b9:fa:87:22:
                    fb:f5:ea:4b:ce:4e:5d:38:1c:4a:66:11:dc:71:7a:
                    2d:9e:60:68:a4:13:34:db:0f:d7:39:17:37:58:29:
                    4f:fd:59:35:fe:d9:90:41:8a:d7:17:ab:3e:6d:d7:
                    6b:b7:1a:a6:61:0a:93:6c:5b:6d:f9:75:29:b1:e3:
                    34:e4:a5:9a:46:0c:cd:ab:9f:b3:72:fa:26:b8:94:
                    bc:90:82:aa:ba:a8:98:a8:39:f9:73:d7:2e:84:11:
                    8a:de:10:f4:0c:9a:c5:bb:47:c1:21:f6:0b:46:35:
                    11:1c:aa:a8:8a:ae:53:44:3c:83:60:4b:fc:73:17:
                    54:53:15:f2:e8:9e:1a:68:f2:ab:95:f6:34:db:b5:
                    72:2e:23:fb:5d:ca:b7:a7:ba:e9:cb:18:9d:d5:03:
                    b5:99:2e:c8:1b:6f:c2:b5:9b:6b:7a:c3:3d:60:c9:
                    37:e4:18:9f:61:74:10:50:d3:dd:57:99:b9:72:71:
                    fc:2a:2f:5c:57:00:61:7e:35:ad:d5:60:7a:16:33:
                    04:ce:d8:33:51:89:c8:3d:56:2b:a7:bc:ce:8d:dc:
                    0b:ff:37:79:64:60:36:01:0d:60:c2:af:e4:36:0a:
                    4a:74:c7:a6:12:31:37:0a:96:7c:29:01:20:26:3e:
                    c9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E2:0E:26:9B:52:29:B7:B3:63:D1:A2:54:FB:16:D3:DA:62:FF:E1
            X509v3 Authority Key Identifier:
                keyid:E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:59:bb:bb:14:84:6d:43:54:ee:ed:c6:a0:c4:ed:d6:5a:c6:
         c9:66:e3:72:24:b6:70:8f:cc:0c:0b:b6:7e:05:ba:fe:7b:fb:
         42:06:51:8f:3c:2d:b5:95:e5:49:24:13:dc:6c:33:cb:8a:04:
         8c:2b:0a:ed:f6:aa:4b:05:56:ab:d5:5d:90:63:77:6f:59:31:
         ee:6d:cc:68:2f:24:8b:6d:66:68:09:75:7c:e2:d6:0c:0a:7d:
         fb:bc:a4:06:4d:fb:0a:05:2c:3e:4c:c8:3e:47:f4:9a:8d:26:
         71:29:40:a7:2e:9f:28:56:82:85:4a:4a:d7:8c:0f:d3:fc:cb:
         26:7d:b0:20:8c:33:30:6e:0c:45:bf:f8:ef:ac:04:a7:50:e3:
         18:b5:0c:7f:77:04:67:b0:b9:52:eb:61:a3:b5:3f:c8:e4:93:
         bb:f7:24:82:38:e9:f2:08:f3:5e:f3:10:a4:b7:c9:56:f1:75:
         ca:6f:5e:8b:1e:47:ef:bb:eb:6d:96:9e:1f:e6:44:e5:6b:0b:
         42:e5:87:64:a2:f3:8b:7c:8a:b7:66:69:64:ac:af:0e:8c:0c:
         28:ed:04:bc:6b:70:ef:5d:46:d6:f9:3f:fc:e9:b3:0c:c9:37:
         44:d1:ef:c6:cf:37:9f:2f:2e:d7:54:12:8c:ff:12:c6:53:8f:
         ec:96:b1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 18:40:39 2026 by rpki-client