Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
File:                     8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft (raw, json)
Hash identifier:          5QLxgTCevcvt6mKMidW0cYYpreMdFMcBDIuxiCaMoXs=
Subject key identifier:   93:3B:E8:55:28:5C:80:F0:C4:EC:7F:00:71:31:F4:35:94:03:70:71
Authority key identifier: F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5
Certificate issuer:       /CN=f2262faf4376420024aad72983ac3e87944ea7a5
Certificate serial:       019DF870F04BB9838BD1F21E140E653AF8FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
Manifest number:          05D5
Signing time:             Tue 05 May 2026 14:00:44 +0000
Manifest this update:     Tue 05 May 2026 14:00:44 +0000
Manifest next update:     Wed 06 May 2026 14:00:44 +0000
Files and hashes:         1: 8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl (hash: Bspnmvwfzs3VbtgG1mJC5SD/M5RJ6SmrI0r1Q7Y4je4=)
                          2: L__0IImxx17mcLd4F54xkQpwTiA.roa (hash: qZizn0ANyVYa2kNvNDiG/vr4PQkqJyC3jj8cfvISE4A=)
                          3: dO7YsL4styJWkEbyYnxj7svPmxc.roa (hash: 9b8H/NqCmB/GoG5NnV1WxRB8lUCVU1Wvz4lOYigLXt8=)
                          4: iGPhaDb4xjM65dn-oJGw074wQpw.roa (hash: ig8b8ysSe/6l3MpyUlRkJNFNsW2Zyr5NYGbG0mVYDgk=)
                          5: odt_2E36HJJB984srGHjv6qER2U.asa (hash: R8X7F+f+3wADu+sKhSukvo7cCZr57RXUSRSmArsF1fg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 May 2026 14:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:f8:70:f0:4b:b9:83:8b:d1:f2:1e:14:0e:65:3a:f8:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2262faf4376420024aad72983ac3e87944ea7a5
        Validity
            Not Before: May  5 14:00:44 2026 GMT
            Not After : May  6 14:00:44 2026 GMT
        Subject: CN=933be855285c80f0c4ec7f007131f43594037071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:69:e8:15:ed:b7:9e:b9:32:26:76:2f:fc:fe:
                    f7:f7:a8:a5:21:d1:e4:fb:89:0b:59:f6:1a:f9:25:
                    98:95:35:fc:03:63:88:ae:e4:11:5a:b4:2c:08:d0:
                    06:ba:68:bd:3e:3b:12:48:2f:53:93:00:94:77:31:
                    ea:f5:fc:da:c3:b7:b5:62:d6:88:17:c3:a3:03:0f:
                    c7:fc:e0:97:7d:4a:6b:30:4d:5a:e1:51:b1:f5:0f:
                    e9:09:3f:04:d5:4e:ee:33:47:b3:31:b9:e2:46:a7:
                    d4:e3:0d:92:20:f6:d9:fe:a5:5d:9c:23:70:52:9f:
                    16:bc:93:da:db:4a:5a:26:c3:97:f5:b4:a2:17:97:
                    8f:56:fa:00:74:a4:9d:5e:28:d2:df:ca:b9:cd:5b:
                    86:2a:6c:2d:21:88:26:68:cb:17:b1:77:31:31:5f:
                    69:37:c7:8e:c9:04:91:fd:ec:22:98:e3:0a:73:25:
                    82:b6:cd:f7:9d:cf:3c:cb:2d:c4:70:e2:56:2a:2d:
                    35:9d:77:fb:58:9c:e9:9d:c9:fb:56:31:85:a3:49:
                    70:4b:e8:31:4b:57:77:d9:2c:f7:d9:86:43:bd:38:
                    a3:d1:ba:d5:fa:67:6a:e6:c3:da:d1:13:12:2b:30:
                    cf:0d:2b:0f:69:6c:39:07:4e:42:6e:de:e0:83:b6:
                    4e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:3B:E8:55:28:5C:80:F0:C4:EC:7F:00:71:31:F4:35:94:03:70:71
            X509v3 Authority Key Identifier:
                keyid:F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:d9:a7:9b:f5:7c:2f:ef:7b:03:ca:07:93:a8:21:9b:13:0c:
         4d:3a:82:75:2e:e8:31:b9:29:76:71:1b:45:87:4e:86:59:d5:
         a9:ce:49:0c:b2:1b:57:86:95:d3:57:81:cc:d9:6d:b4:0f:f8:
         3a:2d:d7:c1:2c:e9:3a:f0:b0:d3:bb:21:cc:8f:65:06:cd:f1:
         2b:c9:b5:49:fe:df:bb:3b:ee:76:16:c3:01:9e:79:79:9b:f5:
         0f:34:d5:e7:e4:f1:c8:aa:ff:9f:db:00:ac:20:50:74:62:ab:
         71:ee:28:a4:43:bd:2a:b9:39:49:ae:37:2e:56:64:1b:08:d0:
         13:4a:ff:3f:a8:46:53:05:35:74:bc:cd:e4:a3:ef:4f:aa:59:
         c7:89:b3:8e:98:5c:f4:08:a6:ff:fc:ed:30:cf:58:84:bc:87:
         bb:b3:37:00:10:d1:53:07:08:d6:3e:63:32:e2:51:4e:0e:8a:
         a3:b9:8e:4e:ad:40:de:4c:85:53:32:03:98:c2:e9:14:b4:5c:
         15:6d:35:2a:2d:12:11:ed:7e:15:cc:42:99:8f:ab:c1:af:c7:
         83:c6:e7:38:c1:60:06:58:d9:3a:1c:33:57:8d:9d:c7:dc:53:
         f9:b3:00:b7:16:a0:b5:d7:a2:ee:32:0e:11:c7:40:7a:70:bb:
         24:5a:d9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 00:20:25 2026 by rpki-client