Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
File:                     8LKNasbsQN-yL5b3tVYWnASZATc.mft (raw, json)
Hash identifier:          fxiLC+Df/E9Me+vnK7Yv/PVtBictAabIeeGvS0sVpcA=
Subject key identifier:   61:67:41:C8:77:92:70:E6:56:9F:17:0E:31:DE:BE:02:22:F3:51:C6
Authority key identifier: F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
Certificate issuer:       /CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Certificate serial:       019E2F970D73D33DFE8BB7C3D2FED74C1E47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
Manifest number:          1450
Signing time:             Sat 16 May 2026 07:01:28 +0000
Manifest this update:     Sat 16 May 2026 07:01:28 +0000
Manifest next update:     Sun 17 May 2026 07:01:28 +0000
Files and hashes:         1: 8LKNasbsQN-yL5b3tVYWnASZATc.crl (hash: dNzHR3V6L4/etKyCeID4mLkF/pRMFb9rVVLNXNEsO3E=)
                          2: EMaV_sDtEC3ONnRr_ZacRZkjYek.roa (hash: uEhrTJgtxikjiJZwpMeYSv1aaXx9clVq4b4CFPBvQgI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:97:0d:73:d3:3d:fe:8b:b7:c3:d2:fe:d7:4c:1e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
        Validity
            Not Before: May 16 07:01:28 2026 GMT
            Not After : May 17 07:01:28 2026 GMT
        Subject: CN=616741c8779270e6569f170e31debe0222f351c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c9:e3:c4:2e:1f:3f:41:a9:d9:4a:85:e2:ce:
                    7c:35:64:d7:b9:94:60:ec:52:11:46:43:ba:b7:3e:
                    5a:fd:9f:c8:ae:40:3e:81:dd:dd:19:41:87:ee:3b:
                    39:7b:4e:a2:47:1f:e6:cf:74:20:ad:02:f2:9f:a7:
                    8a:a2:83:1b:c7:29:e9:4c:01:3d:20:fa:2f:94:ef:
                    29:40:15:12:f1:35:4e:49:db:be:ed:85:d5:cc:26:
                    24:8e:09:81:84:c0:49:a5:ff:43:95:49:e1:6c:c4:
                    92:2f:1d:18:7e:f9:68:3a:90:b0:76:e9:ca:32:1a:
                    bb:4e:35:4e:67:1d:23:b4:10:7a:ee:14:14:98:2d:
                    8b:b1:17:d2:13:53:82:91:68:29:dd:02:af:57:3e:
                    ae:39:8a:28:ae:ab:66:71:a9:64:2d:7d:c2:a1:7a:
                    61:cf:87:2e:1f:da:2a:c7:c7:1d:40:ab:b8:20:38:
                    55:38:52:a0:45:8c:17:1b:82:0e:ca:27:4e:5c:03:
                    4f:f3:ac:50:84:13:10:7f:ab:1b:ab:42:42:13:0a:
                    4d:dc:b0:2f:1f:05:89:64:d0:a9:88:09:13:ac:35:
                    c4:1a:57:84:bd:5e:82:cf:01:f1:52:35:77:46:8b:
                    54:cd:ee:fa:39:24:36:e6:ce:60:a9:9d:f5:4f:2a:
                    b7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:67:41:C8:77:92:70:E6:56:9F:17:0E:31:DE:BE:02:22:F3:51:C6
            X509v3 Authority Key Identifier:
                keyid:F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:ef:19:dc:ae:a5:27:26:64:6c:0f:b4:de:9a:1f:aa:a8:16:
         35:79:61:23:a5:ed:9f:20:6f:a6:79:94:ff:7e:18:a4:28:c7:
         af:0a:45:5b:ed:7c:5e:e1:09:f4:b2:5a:58:c5:a3:d7:bd:c3:
         aa:c2:37:00:14:7c:2f:06:07:eb:6f:32:00:2b:00:f0:41:c8:
         89:b1:6e:3b:b0:8c:db:1f:2d:5f:ba:48:eb:92:64:b1:00:85:
         11:6b:40:41:f4:08:0a:f8:38:83:f4:73:12:8e:c7:11:87:c9:
         8a:71:89:81:75:b4:1e:b0:1b:c0:3e:7f:d3:21:20:e1:3e:0b:
         12:b8:72:fd:99:92:d6:eb:b3:93:40:a4:10:ad:d5:5f:f0:05:
         76:54:41:68:eb:53:64:3c:48:86:26:99:25:9e:50:00:58:06:
         56:dc:b0:4b:92:00:c5:b3:ed:64:26:7b:69:f4:f3:f2:da:e1:
         1e:6d:8b:25:2a:5a:1d:6c:20:81:90:52:5c:16:1d:16:2b:89:
         2d:aa:7e:7d:e3:2a:cf:d7:c4:f2:3e:aa:db:08:58:33:cf:aa:
         d3:34:68:f6:cc:b4:8c:96:f6:db:07:e3:e5:ed:fd:5f:fc:ec:
         3f:79:b1:77:9d:d6:bf:c9:c2:2c:78:b7:0a:e6:76:71:e2:cc:
         23:27:f1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:12:24 2026 by rpki-client