Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
File:                     CIKLx914SFC4lu197ZSD218B4Fk.mft (raw, json)
Hash identifier:          oE/p6bwQVCzWSUQY8CbPB2C6ft+sGG7jnQiaavf3OdQ=
Subject key identifier:   FA:10:03:F5:0B:99:CB:64:77:7A:00:38:D6:E3:17:AC:72:09:B5:07
Authority key identifier: 08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
Certificate issuer:       /CN=08828bc7dd784850b896ed7ded9483db5f01e059
Certificate serial:       019E30DFFD0568888120FF7BE984299AC872
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
Manifest number:          075E
Signing time:             Sat 16 May 2026 13:00:46 +0000
Manifest this update:     Sat 16 May 2026 13:00:46 +0000
Manifest next update:     Sun 17 May 2026 13:00:46 +0000
Files and hashes:         1: CIKLx914SFC4lu197ZSD218B4Fk.crl (hash: +2ujwCKnh+Y5MEa4YowSDPFeHqXb3ngLXMaWZDpwwEc=)
                          2: GWKGsKkyqPgCVhvEekAbAJHoccI.roa (hash: 8o24uGrSYeShVoT2bRrTtvlPBWg6y1jvlCLfv0jLDVc=)
                          3: oMGIzpCIk1MpYh7JUJDeE6V61o8.roa (hash: UWABj3txYPzJG90mw1O5Kxp8Tsmo7+bGd8ThwRqlhzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:df:fd:05:68:88:81:20:ff:7b:e9:84:29:9a:c8:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08828bc7dd784850b896ed7ded9483db5f01e059
        Validity
            Not Before: May 16 13:00:46 2026 GMT
            Not After : May 17 13:00:46 2026 GMT
        Subject: CN=fa1003f50b99cb64777a0038d6e317ac7209b507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:83:62:1d:73:86:ea:30:2a:9b:22:65:8e:83:
                    c2:ce:7e:d6:36:d9:45:7e:6d:26:12:88:8a:42:c5:
                    3f:90:2d:29:bd:42:4a:82:68:18:80:31:ee:56:40:
                    9e:fe:30:1b:bf:62:08:10:b2:2b:41:37:88:f6:a0:
                    8f:02:5b:96:6c:4c:ab:60:00:90:c3:5b:b4:9d:28:
                    1c:00:23:e5:f5:0e:d3:09:6f:a8:2b:74:cb:1d:72:
                    77:67:39:d8:16:9e:79:85:e9:7a:97:a1:e5:e0:00:
                    d2:f5:eb:99:f3:37:e2:67:9b:aa:de:de:36:d0:b1:
                    b0:f2:24:cd:79:be:0e:c2:78:f3:71:99:c3:28:d9:
                    68:c8:d0:53:3c:bc:58:69:6a:1a:b4:54:14:18:88:
                    7b:c1:e3:9c:92:25:4a:ce:f4:32:34:69:ce:29:26:
                    11:5f:1d:c2:33:0b:3d:e5:40:30:f7:ac:9b:8c:1f:
                    83:6a:b0:55:5b:4f:ea:20:a2:c1:66:4a:7b:85:43:
                    91:a1:80:33:1e:c9:89:32:c4:ee:0c:d6:a9:9d:ae:
                    ed:55:86:1f:a0:2c:b7:8c:05:e1:91:34:f8:a0:b4:
                    fd:da:d1:2b:77:31:de:28:44:be:49:e9:cc:bc:24:
                    4f:14:c5:fc:93:d8:3b:67:e8:00:12:eb:8d:39:6d:
                    7a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:10:03:F5:0B:99:CB:64:77:7A:00:38:D6:E3:17:AC:72:09:B5:07
            X509v3 Authority Key Identifier:
                keyid:08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:b6:2d:eb:95:23:4a:88:a9:bf:95:ec:a3:5c:06:65:c9:e2:
         09:7a:80:7a:b9:8c:b4:bc:a5:6b:32:af:61:38:72:1d:d6:61:
         10:5a:f2:06:6e:39:9a:d2:84:56:21:b4:5d:fc:36:a5:ca:47:
         fd:75:f9:00:9b:cf:d3:0d:f5:db:c9:c6:34:d2:69:81:46:0b:
         86:95:49:38:1d:d4:65:a1:7e:d2:61:a0:15:77:15:40:ff:08:
         7e:16:aa:9c:51:e4:6a:94:2b:9e:6e:80:8f:ec:9b:2f:f8:8c:
         95:29:07:8b:85:b4:a4:26:13:70:11:3d:61:2c:f4:26:dd:1e:
         78:1f:ba:10:bd:49:ac:34:28:aa:73:1d:e1:ce:6f:3d:77:65:
         e4:ca:8d:28:c7:ee:3d:c3:25:ca:a8:7e:7c:f4:fb:02:a2:65:
         6b:63:73:92:c4:61:03:4c:ed:52:44:2e:33:bb:7d:c6:54:c1:
         b1:b5:32:02:3d:d9:17:30:c4:2f:75:81:53:38:39:3e:37:a4:
         99:83:b4:56:ff:e8:c2:65:d0:7b:0a:27:43:e3:0f:00:ab:59:
         6e:b2:e9:66:9b:b6:f5:4a:f2:9a:14:8f:38:14:66:c8:42:57:
         27:45:2b:c3:4c:25:c6:13:37:b9:51:07:87:b4:53:5e:11:98:
         2d:47:1d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:14:06 2026 by rpki-client