Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft
File:                     8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft (raw, json)
Hash identifier:          SvhkVbQ3ALfGau2wmBOB8cnPCqojYKkAeXDvkiXfPxY=
Subject key identifier:   AD:AC:09:3E:1D:DC:B6:78:43:6B:57:8F:9F:32:28:B4:49:42:68:94
Authority key identifier: F1:46:66:FB:B6:4C:4D:A8:CB:89:92:BF:0D:A9:7B:8B:01:17:EA:C6
Certificate issuer:       /CN=f14666fbb64c4da8cb8992bf0da97b8b0117eac6
Certificate serial:       019E30A99FC579C02F1A5E091937C09227DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8UZm-7ZMTajLiZK_Dal7iwEX6sY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft
Manifest number:          1249
Signing time:             Sat 16 May 2026 12:01:23 +0000
Manifest this update:     Sat 16 May 2026 12:01:23 +0000
Manifest next update:     Sun 17 May 2026 12:01:23 +0000
Files and hashes:         1: 8UZm-7ZMTajLiZK_Dal7iwEX6sY.crl (hash: nlBgiT0xd/vrRzrBDNalJuXGDlmoSvTAeBiwHrdT4Eo=)
                          2: jNP4lkkfBvGwQninx6yZc-naqo8.roa (hash: sz5Qqi9rGFZNr7jIWcNDJD+aLk3iNQT71jM/j1utVDM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8UZm-7ZMTajLiZK_Dal7iwEX6sY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:9f:c5:79:c0:2f:1a:5e:09:19:37:c0:92:27:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f14666fbb64c4da8cb8992bf0da97b8b0117eac6
        Validity
            Not Before: May 16 12:01:23 2026 GMT
            Not After : May 17 12:01:23 2026 GMT
        Subject: CN=adac093e1ddcb678436b578f9f3228b449426894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:20:28:72:53:d0:e9:9e:3c:75:44:c7:3c:b8:
                    63:12:f7:07:c1:ab:87:55:a2:d8:30:16:2b:e8:cb:
                    c6:53:6d:65:c0:c9:43:ea:33:35:e4:cc:e8:68:ed:
                    ca:e7:d2:84:49:e4:00:ed:0b:4a:7c:8f:25:20:7c:
                    aa:33:9c:55:9d:07:08:77:92:dd:b2:61:c0:1b:a3:
                    81:77:7d:c3:83:ba:4e:59:a8:d8:cf:99:d5:1c:19:
                    93:3d:d9:51:18:68:8f:6a:41:cc:df:f1:87:fa:0d:
                    d6:3a:f2:66:58:9a:87:f2:c9:ca:57:fa:c5:ca:2d:
                    ca:bd:d6:fc:f4:8d:13:08:b3:50:89:5d:d5:c9:f8:
                    c9:c7:75:bb:b3:d9:a4:4c:fe:1d:b0:2d:5e:8c:38:
                    1f:2c:a7:71:fb:36:a0:e6:29:0a:85:3b:8e:94:6b:
                    ea:92:38:14:48:72:2e:6f:94:d4:c0:7e:64:5a:4e:
                    fb:20:15:ae:3d:f1:ec:08:37:ff:72:3c:39:ef:b2:
                    4c:c2:09:30:70:5e:73:f8:4c:da:7a:e7:11:0e:c8:
                    3a:d3:2e:cd:a9:7f:89:34:d7:d0:9c:55:c5:0c:fa:
                    9f:7a:da:37:d6:4a:3d:54:08:3d:2e:f2:ef:30:c7:
                    94:aa:d9:25:1d:7d:3c:4c:2c:f5:2d:f1:31:15:c3:
                    58:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:AC:09:3E:1D:DC:B6:78:43:6B:57:8F:9F:32:28:B4:49:42:68:94
            X509v3 Authority Key Identifier:
                keyid:F1:46:66:FB:B6:4C:4D:A8:CB:89:92:BF:0D:A9:7B:8B:01:17:EA:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UZm-7ZMTajLiZK_Dal7iwEX6sY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:0d:f6:d1:39:69:4c:53:06:ef:f2:ee:21:11:67:a1:cd:6e:
         01:d8:58:26:57:f1:66:48:b4:5d:15:57:5e:35:18:36:b2:d8:
         9e:f3:ba:b1:bf:5e:1e:86:81:8d:3d:96:e9:6c:36:56:ad:72:
         1e:9d:f3:82:ea:8c:73:a1:de:39:ba:77:6b:91:53:31:ab:87:
         f6:19:93:9b:da:61:98:34:a0:c0:31:73:7c:9a:1d:69:56:bc:
         be:38:24:1a:24:0a:d3:02:ea:d8:99:27:fa:8a:6f:f9:68:de:
         cc:18:df:00:19:4d:48:14:0a:ac:c5:77:38:cf:07:5a:df:96:
         0c:04:96:1b:41:0d:26:44:27:89:78:d8:99:bf:47:96:85:dd:
         a6:e8:6d:66:81:1a:a6:f5:90:8b:2e:03:f8:1e:e7:cd:dd:ac:
         4f:c8:74:7e:eb:d9:fb:a5:60:1e:0c:b8:61:49:2e:de:ad:34:
         82:e4:18:6c:77:2e:09:d5:cf:11:34:87:ab:63:11:72:52:ec:
         cb:35:8d:88:c8:2f:7c:93:8a:0e:32:24:f8:4e:a8:c7:8a:90:
         e5:a9:84:ad:2e:19:17:d7:6e:e3:08:10:25:40:2b:77:36:1b:
         80:fe:84:0c:4f:09:a8:10:7b:54:c2:4b:74:42:e1:56:b9:35:
         18:07:e5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:37 2026 by rpki-client