Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
File:                     8JLOTWiFNFSE6Zp312Fm_HICIDM.mft (raw, json)
Hash identifier:          0tkfhDiCxiruGzRpw8lCZBY4KOdvEMWiV541CjwQla4=
Subject key identifier:   57:54:3C:03:36:EA:B8:54:C5:1C:78:C0:A6:7E:38:61:33:3E:B3:29
Authority key identifier: F0:92:CE:4D:68:85:34:54:84:E9:9A:77:D7:61:66:FC:72:02:20:33
Certificate issuer:       /CN=f092ce4d6885345484e99a77d76166fc72022033
Certificate serial:       019E3072F64DE68C3D5606D81F20200E149D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
Manifest number:          190E
Signing time:             Sat 16 May 2026 11:01:40 +0000
Manifest this update:     Sat 16 May 2026 11:01:40 +0000
Manifest next update:     Sun 17 May 2026 11:01:40 +0000
Files and hashes:         1: 8JLOTWiFNFSE6Zp312Fm_HICIDM.crl (hash: Mim3+bgwnyPSisD+36YOTUdV6r9BD27wCHZOMmQgrYs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:f6:4d:e6:8c:3d:56:06:d8:1f:20:20:0e:14:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f092ce4d6885345484e99a77d76166fc72022033
        Validity
            Not Before: May 16 11:01:40 2026 GMT
            Not After : May 17 11:01:40 2026 GMT
        Subject: CN=57543c0336eab854c51c78c0a67e3861333eb329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:df:69:cb:79:12:82:09:51:1e:97:d9:34:d8:
                    b6:15:16:54:e5:de:0e:cd:1b:c6:c2:72:86:ce:6f:
                    a5:0a:99:8e:ef:e0:d4:de:c3:0d:bd:f8:28:47:ab:
                    d2:a8:d4:8b:15:ee:e9:8f:ce:43:1f:14:cd:b7:c5:
                    50:55:2a:2d:b0:ae:f8:b8:d5:10:1c:7c:23:e3:81:
                    f0:5a:a7:63:a4:72:67:d0:c9:87:f4:da:21:b6:fc:
                    5e:c4:f9:53:fe:32:87:97:e1:bc:73:9c:26:e1:03:
                    a4:fb:19:63:87:44:54:a6:ad:7a:56:a1:49:6c:3b:
                    44:d1:be:a8:0d:90:0e:6a:11:0d:01:7f:f8:91:2e:
                    70:de:ea:0d:bf:13:dc:49:0a:76:a0:0e:82:fd:29:
                    18:f2:4b:13:18:02:47:a2:b2:8d:0a:4a:96:20:86:
                    1e:97:48:9b:40:50:ef:ba:b0:d9:86:41:aa:24:11:
                    f3:93:f9:bc:3a:55:7c:3e:84:86:91:c5:b9:58:b5:
                    63:0c:d3:36:d9:82:f4:f9:13:14:11:ca:3b:21:95:
                    77:c2:f4:0c:ec:4a:eb:21:8e:53:48:9d:49:f5:cd:
                    c9:05:d4:62:c2:5d:a2:b0:15:32:72:66:74:08:f8:
                    89:d7:5b:1f:9f:3e:4d:98:f4:5b:1c:14:a5:a3:fa:
                    90:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:54:3C:03:36:EA:B8:54:C5:1C:78:C0:A6:7E:38:61:33:3E:B3:29
            X509v3 Authority Key Identifier:
                keyid:F0:92:CE:4D:68:85:34:54:84:E9:9A:77:D7:61:66:FC:72:02:20:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:6f:b1:97:25:65:90:96:20:e8:69:1d:c4:a2:d4:2d:9d:26:
         e3:84:13:05:22:75:e9:69:2a:85:1f:8a:b3:ef:db:44:45:a0:
         39:37:58:0e:23:93:22:bd:bb:fe:47:2c:e4:ec:c6:40:99:13:
         85:a3:0e:7d:8e:e2:a8:9f:66:ab:b1:7e:52:f0:a0:99:6c:93:
         42:dd:7d:18:61:d4:96:34:37:38:1a:e7:31:d3:79:c7:14:2f:
         36:2b:ed:dc:db:9b:31:a5:b7:dc:71:77:7e:6d:2e:49:d1:cf:
         78:9a:0f:87:9c:fa:cb:d0:44:d7:91:92:27:1c:6d:50:50:90:
         88:8a:36:26:27:0d:6c:66:81:0e:f1:21:0a:ea:49:af:09:31:
         0e:70:44:d6:77:bd:fc:45:ef:ab:d4:29:75:8c:56:eb:46:00:
         1d:70:b9:eb:45:49:9c:31:1f:45:64:aa:02:fb:a2:4d:d9:21:
         36:c4:99:f0:5e:b8:d9:b3:9e:70:83:15:46:bb:80:65:dc:05:
         5c:77:b3:5d:2c:8b:dd:97:86:9a:fc:6e:ae:06:3d:62:2d:07:
         b3:e8:79:a8:78:b1:bc:2e:af:ff:01:d3:3b:23:da:5b:fe:8a:
         6c:9c:fb:ed:7f:a4:4e:1b:9a:f3:3e:d2:88:b7:b7:c8:73:14:
         54:c8:d9:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wcvZN5ow9VgbYHyAgDhSdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwOTJjZTRkNjg4NTM0NTQ4NGU5OWE3N2Q3NjE2NmZjNzIw
MjIwMzMwHhcNMjYwNTE2MTEwMTQwWhcNMjYwNTE3MTEwMTQwWjAzMTEwLwYDVQQD
Eyg1NzU0M2MwMzM2ZWFiODU0YzUxYzc4YzBhNjdlMzg2MTMzM2ViMzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz99py3kSgglRHpfZNNi2FRZU5d4O
zRvGwnKGzm+lCpmO7+DU3sMNvfgoR6vSqNSLFe7pj85DHxTNt8VQVSotsK74uNUQ
HHwj44HwWqdjpHJn0MmH9NohtvxexPlT/jKHl+G8c5wm4QOk+xljh0RUpq16VqFJ
bDtE0b6oDZAOahENAX/4kS5w3uoNvxPcSQp2oA6C/SkY8ksTGAJHorKNCkqWIIYe
l0ibQFDvurDZhkGqJBHzk/m8OlV8PoSGkcW5WLVjDNM22YL0+RMUEco7IZV3wvQM
7ErrIY5TSJ1J9c3JBdRiwl2isBUycmZ0CPiJ11sfnz5NmPRbHBSlo/qQrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdUPAM26rhUxRx4wKZ+OGEzPrMpMB8GA1UdIwQY
MBaAFPCSzk1ohTRUhOmad9dhZvxyAiAzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEpMT1RXaUZORlNFNlpwMzEyRm1fSElDSURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kMDIyMTgtNWRmOS00M2ZkLWJlZWMt
MDMxNTk2MTEyNDgwLzEvOEpMT1RXaUZORlNFNlpwMzEyRm1fSElDSURNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9kMDIyMTgtNWRmOS00M2ZkLWJlZWMtMDMxNTk2MTEyNDgw
LzEvOEpMT1RXaUZORlNFNlpwMzEyRm1fSElDSURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApG+xlyVl
kJYg6GkdxKLULZ0m44QTBSJ16WkqhR+Ks+/bREWgOTdYDiOTIr27/kcs5OzGQJkT
haMOfY7iqJ9mq7F+UvCgmWyTQt19GGHUljQ3OBrnMdN5xxQvNivt3NubMaW33HF3
fm0uSdHPeJoPh5z6y9BE15GSJxxtUFCQiIo2JicNbGaBDvEhCupJrwkxDnBE1ne9
/EXvq9QpdYxW60YAHXC560VJnDEfRWSqAvuiTdkhNsSZ8F642bOecIMVRruAZdwF
XHezXSyL3ZeGmvxurgY9Yi0Hs+h5qHixvC6v/wHTOyPaW/6KbJz77X+kThua8z7S
iLe3yHMUVMjZMA==
-----END CERTIFICATE-----
Generated at Sat May 16 17:12:20 2026 by rpki-client