Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
File:                     8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft (raw, json)
Hash identifier:          mCvhfcR4mTnJTPB8BRG+EPZo2sKxpPI6fFwhCsmZrck=
Subject key identifier:   EF:D2:93:E0:08:D8:3A:F7:2D:7C:05:6D:9B:DC:7D:33:7A:88:A7:5E
Authority key identifier: F1:E6:F1:5E:F7:52:64:9F:3B:11:87:DE:68:3F:E8:3B:1C:E6:9F:03
Certificate issuer:       /CN=f1e6f15ef752649f3b1187de683fe83b1ce69f03
Certificate serial:       019E3072523D542ED7ADE1DB7ED184861FE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
Manifest number:          0FEF
Signing time:             Sat 16 May 2026 11:00:58 +0000
Manifest this update:     Sat 16 May 2026 11:00:58 +0000
Manifest next update:     Sun 17 May 2026 11:00:58 +0000
Files and hashes:         1: 8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl (hash: FAfT++eJMiE+8Zp2DFlXZaqNR6BaRC1EwPyexpyqsZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:52:3d:54:2e:d7:ad:e1:db:7e:d1:84:86:1f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1e6f15ef752649f3b1187de683fe83b1ce69f03
        Validity
            Not Before: May 16 11:00:58 2026 GMT
            Not After : May 17 11:00:58 2026 GMT
        Subject: CN=efd293e008d83af72d7c056d9bdc7d337a88a75e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d7:71:42:7f:5d:8b:8c:bd:cc:c1:e1:29:d6:
                    07:24:0a:c5:31:06:62:9f:79:4e:c6:15:39:90:64:
                    56:c5:d2:df:f6:36:71:d8:1e:8a:5c:38:d3:8c:af:
                    76:40:ec:9f:79:e2:cd:51:17:36:8c:cc:be:32:2b:
                    59:e5:fb:66:9e:17:fd:72:5b:c4:25:b8:7e:38:c8:
                    bf:f2:7a:de:63:04:37:ed:24:bc:b2:e7:42:05:b9:
                    67:7f:d4:c6:96:81:7d:9a:fe:52:05:a8:8d:25:41:
                    e6:5a:a2:f7:06:4e:9e:e1:62:97:d6:b5:4f:ec:f6:
                    f3:a0:4e:e5:00:b9:9a:79:25:ca:cb:04:fd:2f:b1:
                    18:a2:8e:47:39:0f:64:91:88:d8:9d:f4:e1:ee:d7:
                    b6:f2:11:4e:55:9a:7d:c7:60:61:ba:a9:ce:10:04:
                    f5:5f:05:3e:fe:5a:ca:7d:1c:82:68:d1:45:4d:1a:
                    ce:a6:3c:d8:5a:42:73:bc:a6:4a:31:54:0e:f6:f0:
                    fc:88:7d:66:b6:e4:50:6e:fe:29:90:c1:5f:51:2a:
                    ee:ae:16:f4:d3:17:ef:67:82:74:a5:0b:d7:8e:29:
                    25:1e:16:3f:fc:aa:a7:db:f4:55:3f:1e:3a:59:01:
                    b5:16:f7:43:3e:f3:da:6c:f3:c5:03:15:35:49:ea:
                    18:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D2:93:E0:08:D8:3A:F7:2D:7C:05:6D:9B:DC:7D:33:7A:88:A7:5E
            X509v3 Authority Key Identifier:
                keyid:F1:E6:F1:5E:F7:52:64:9F:3B:11:87:DE:68:3F:E8:3B:1C:E6:9F:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:ac:f1:d1:02:59:e7:ad:a2:74:1a:8d:74:e9:51:8e:c4:80:
         b5:9d:ad:e9:5d:22:71:d1:12:68:60:79:56:45:d3:42:b8:af:
         20:b0:59:6b:13:2d:4c:76:61:59:46:ed:22:a1:bc:c9:73:2f:
         81:06:1a:6f:be:d8:e2:1c:43:40:14:51:dc:4d:1b:61:50:bc:
         64:2b:05:a7:95:ed:72:f5:17:e6:2b:66:1f:90:07:a5:1f:ef:
         73:00:2a:02:35:cd:31:bc:dc:26:60:39:b0:0e:5e:13:fa:27:
         41:4d:25:99:f6:8d:ce:f4:e3:cb:a7:e0:90:5f:3c:8d:54:de:
         79:77:72:03:db:f6:42:e3:36:a4:79:0d:2f:97:60:68:f2:da:
         42:00:b3:8f:6c:3a:ec:75:ce:47:c4:05:58:03:02:f4:c9:0e:
         e5:12:5b:6b:bf:8f:14:f6:91:97:bc:e4:1b:4b:6a:87:08:4d:
         14:ce:d2:6b:a2:8a:0f:7e:f2:8e:92:d6:e8:da:b9:ed:33:fd:
         30:4a:a4:f7:e5:20:54:52:c0:c4:47:82:bd:3c:0b:9b:76:6e:
         2f:a3:b0:9f:ac:4e:ec:64:f8:8a:c6:a2:48:f8:fb:13:61:51:
         69:ab:dd:da:46:7b:4d:5d:12:66:69:c8:07:cd:71:1a:e2:85:
         aa:99:52:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:56 2026 by rpki-client