Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/9a39f4-f837-4c46-be6e-d93065bb2a6a/1/Sv9B3ejOR9Ry174skEhFBIwwqWA.mft
File:                     Sv9B3ejOR9Ry174skEhFBIwwqWA.mft (raw, json)
Hash identifier:          Nnr1a3PR+wK8HC6QNpEUPhWN7UBheI6KDFC+T9ne1zs=
Subject key identifier:   AE:45:70:5F:76:F7:F9:66:D8:8A:F0:1F:B6:36:28:BF:C3:F2:83:74
Authority key identifier: 4A:FF:41:DD:E8:CE:47:D4:72:D7:BE:2C:90:48:45:04:8C:30:A9:60
Certificate issuer:       /CN=4aff41dde8ce47d472d7be2c904845048c30a960
Certificate serial:       019E27381AEBDA52056F52051DB4676CACAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sv9B3ejOR9Ry174skEhFBIwwqWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/9a39f4-f837-4c46-be6e-d93065bb2a6a/1/Sv9B3ejOR9Ry174skEhFBIwwqWA.mft
Manifest number:          8A
Signing time:             Thu 14 May 2026 16:00:48 +0000
Manifest this update:     Thu 14 May 2026 16:00:48 +0000
Manifest next update:     Fri 15 May 2026 16:00:48 +0000
Files and hashes:         1: 64rZ1l1fxnqrXjonOeV1eeEvkjc.roa (hash: RKliE8vgwX94fwVvTWqD6n+wasJnNrBVuMdqT01fLuw=)
                          2: Sv9B3ejOR9Ry174skEhFBIwwqWA.crl (hash: KQXVBrGR6PMOFGjEjEdO+hwbquLAw/AI1+w16SvtFQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/9a39f4-f837-4c46-be6e-d93065bb2a6a/1/Sv9B3ejOR9Ry174skEhFBIwwqWA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/9a39f4-f837-4c46-be6e-d93065bb2a6a/1/Sv9B3ejOR9Ry174skEhFBIwwqWA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sv9B3ejOR9Ry174skEhFBIwwqWA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:27:38:1a:eb:da:52:05:6f:52:05:1d:b4:67:6c:ac:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aff41dde8ce47d472d7be2c904845048c30a960
        Validity
            Not Before: May 14 16:00:48 2026 GMT
            Not After : May 15 16:00:48 2026 GMT
        Subject: CN=ae45705f76f7f966d88af01fb63628bfc3f28374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:93:6f:bf:18:16:55:d0:21:44:3a:d3:5f:90:
                    24:f7:2f:13:40:b5:95:a4:e1:75:da:b4:47:a1:3a:
                    4a:a5:35:c4:5b:52:ab:4c:6e:7c:bb:83:27:f5:df:
                    fd:09:60:6b:9a:04:4a:98:7a:b7:dd:02:e0:4e:78:
                    f2:6a:99:06:69:c3:fc:20:b8:cc:d1:1f:ef:d2:fb:
                    5b:0b:a0:f4:1f:ea:81:7a:c7:2c:ae:9d:62:96:f7:
                    29:88:e2:49:63:03:33:f3:e4:c5:60:07:d3:e1:7c:
                    dc:39:bf:ee:c4:63:d3:c6:e3:fd:be:4b:55:c3:52:
                    29:20:f6:43:89:46:f5:62:45:c8:bc:9d:46:cd:f5:
                    1e:6a:28:aa:a2:05:2b:18:bb:41:bb:c7:2e:14:94:
                    a7:45:a1:bc:89:4b:af:20:14:83:92:21:d2:df:a9:
                    a5:db:68:b6:ba:02:1f:4e:40:2f:17:09:e1:1c:53:
                    53:6b:ef:22:0f:2c:72:cf:64:a2:18:c3:28:c6:71:
                    f3:5f:9f:2b:24:0d:fe:74:a8:c0:4a:32:f1:63:85:
                    74:a7:ab:bd:8a:e1:86:0b:34:78:dc:b7:33:cf:bf:
                    17:f3:c2:a3:89:ff:1e:32:0b:e5:51:13:7a:49:b4:
                    b7:4b:f4:21:aa:bf:61:5d:7b:68:82:84:be:ae:13:
                    ac:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:45:70:5F:76:F7:F9:66:D8:8A:F0:1F:B6:36:28:BF:C3:F2:83:74
            X509v3 Authority Key Identifier:
                keyid:4A:FF:41:DD:E8:CE:47:D4:72:D7:BE:2C:90:48:45:04:8C:30:A9:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sv9B3ejOR9Ry174skEhFBIwwqWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9a39f4-f837-4c46-be6e-d93065bb2a6a/1/Sv9B3ejOR9Ry174skEhFBIwwqWA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9a39f4-f837-4c46-be6e-d93065bb2a6a/1/Sv9B3ejOR9Ry174skEhFBIwwqWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:be:f5:63:03:17:47:a6:a7:ae:3a:da:dc:5d:b3:b4:31:7f:
         31:d8:f8:81:49:91:4f:5f:7e:f5:f0:3a:46:bd:3f:c0:fc:70:
         04:1c:0e:9f:04:e0:44:e4:ad:9d:8d:2c:72:1f:80:64:ee:35:
         60:95:43:a5:0a:46:94:4a:ce:61:e7:73:d8:2a:4c:d6:5e:04:
         c9:55:c5:5c:9a:43:67:cc:20:0f:99:d8:bc:c1:af:e8:a8:b5:
         f5:bd:af:1e:fd:0d:66:6b:20:35:9e:49:b9:51:9f:05:31:3d:
         d3:bf:ea:5f:a9:bc:73:7b:9f:98:77:ce:55:7c:4e:48:e4:ca:
         77:f5:62:84:42:81:6b:8d:95:10:d6:99:22:31:38:49:40:3f:
         82:69:0b:f5:6c:dc:ef:fa:b5:1b:1e:27:54:6e:d4:f0:c4:c5:
         12:ce:3c:5b:0d:db:71:63:93:e3:68:63:52:ae:55:1c:4b:ca:
         ff:68:6c:6c:66:37:cd:e3:59:5e:74:e3:ae:e6:9a:00:a2:1f:
         08:55:a8:70:83:01:11:5a:12:42:5d:1d:13:a7:7b:ab:93:ff:
         ab:51:cd:0e:ea:43:af:b5:f1:b6:3a:66:e4:24:a4:5c:01:fb:
         b2:b1:16:d4:55:f4:37:8b:a9:c5:7c:62:ac:f7:c7:b2:e3:d5:
         f2:ad:7e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 23:11:52 2026 by rpki-client