Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
File:                     8v_48bgcLGFPw-lOsXy6CUAhGgE.mft (raw, json)
Hash identifier:          oZBtTe0QL4ih6oOBbqMA1yIPxDTyjpFr0kCdfWLwWLY=
Subject key identifier:   77:25:33:9D:A8:1C:BB:7F:07:5F:8D:1F:20:89:1B:DA:CB:7A:C3:FF
Authority key identifier: F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01
Certificate issuer:       /CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
Certificate serial:       019E3117254CB4D25475BC34B889453845A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
Manifest number:          190F
Signing time:             Sat 16 May 2026 14:01:00 +0000
Manifest this update:     Sat 16 May 2026 14:01:00 +0000
Manifest next update:     Sun 17 May 2026 14:01:00 +0000
Files and hashes:         1: 8v_48bgcLGFPw-lOsXy6CUAhGgE.crl (hash: EGJJQ+K9CsJMjBBcqnH+78Ji3BW/BvmMZXGiOMEB8Go=)
                          2: jRpXU9eqysmsAJR80B3Aax6y_BQ.roa (hash: XRM8W3BWblehC6PY0lBpqApKx5419cv1D4/Jksn00jI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:25:4c:b4:d2:54:75:bc:34:b8:89:45:38:45:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
        Validity
            Not Before: May 16 14:01:00 2026 GMT
            Not After : May 17 14:01:00 2026 GMT
        Subject: CN=7725339da81cbb7f075f8d1f20891bdacb7ac3ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:eb:ad:14:27:7f:1d:2a:d5:8b:f1:7f:af:97:
                    f9:10:39:50:06:99:b8:73:a2:d9:e7:e5:a6:1e:10:
                    b1:67:61:23:37:4a:81:ef:19:3a:88:8e:79:49:db:
                    75:5a:d6:d9:e1:d0:f3:78:a3:c1:e4:8c:d0:72:90:
                    ef:9e:39:7c:a4:fd:b9:4f:6f:cb:87:95:11:9a:cb:
                    09:47:06:d9:47:cb:2d:29:4b:82:e5:83:ec:94:ec:
                    02:35:f1:52:fe:5f:cd:70:a7:92:f6:06:83:79:78:
                    62:89:b1:6f:cd:4e:68:85:1a:d5:49:06:af:bc:e1:
                    a0:ae:b3:47:be:b3:04:f4:ad:bb:9c:83:c1:94:4a:
                    53:43:4c:07:e8:67:7d:fb:2d:ea:1e:81:27:bd:4c:
                    1d:bb:01:ae:59:7d:ab:8a:4b:3b:5f:44:21:72:fc:
                    0f:2b:65:35:b6:c5:9e:49:2f:05:ff:51:1e:ab:1c:
                    38:7a:0f:fb:3d:b8:0b:4f:57:17:9c:02:3b:ce:1c:
                    a1:92:bf:9c:02:79:cf:c4:b3:bd:29:6e:3f:fc:b1:
                    6d:33:5d:a6:a2:78:f3:da:59:4a:d1:99:73:66:4e:
                    b0:cd:c4:01:af:79:0c:4e:bd:d8:70:41:6f:a9:16:
                    24:20:a4:11:05:f0:2c:b9:30:f9:76:b8:31:ee:08:
                    0a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:25:33:9D:A8:1C:BB:7F:07:5F:8D:1F:20:89:1B:DA:CB:7A:C3:FF
            X509v3 Authority Key Identifier:
                keyid:F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:42:ef:53:73:a9:65:fa:bc:84:00:14:cc:d7:c8:11:14:d5:
         2b:07:f1:c9:a3:86:18:4c:a6:33:db:68:8e:b9:b5:84:f1:93:
         12:1f:7a:5c:af:4c:87:51:2a:2b:2f:1c:91:a5:9b:4d:19:05:
         10:5b:5e:eb:b1:9f:81:f2:c8:00:d2:96:c0:2d:9b:d7:3b:4b:
         7b:25:16:41:37:9b:11:e9:9d:ec:8e:be:e3:f8:9a:5c:2d:c0:
         92:3a:81:b1:1c:9b:ca:bb:82:ca:a7:63:ba:dc:bb:00:d0:34:
         26:2c:78:19:56:db:24:84:27:0d:01:9e:80:fc:88:3a:7d:b2:
         d8:9f:a9:93:17:fd:8e:9c:b3:f4:5d:6b:2b:17:ab:d0:72:5f:
         ce:56:b8:30:83:74:51:56:04:0f:c0:86:f1:16:97:c4:ca:49:
         90:ed:44:4e:fb:d2:96:75:42:ea:6e:c5:9b:d5:af:46:34:2f:
         d1:dc:f5:50:79:3d:3c:b0:55:09:46:de:34:64:4b:10:7a:fc:
         c6:50:2d:ed:af:fb:8a:ef:a4:97:54:b1:9c:dd:d2:1e:df:a4:
         5e:2d:14:9d:28:16:ba:08:ab:eb:a7:e7:4e:49:11:27:39:6b:
         c9:ff:0a:54:85:08:62:f8:3d:9d:85:ba:1b:9b:1b:4b:6f:0e:
         a7:25:8d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:39:36 2026 by rpki-client