Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft
File:                     rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft (raw, json)
Hash identifier:          7NN/g2Wg16ox3s4HK8HwdNlHl/7yehT1/tSNTSB3NtI=
Subject key identifier:   B8:8A:E5:56:85:40:9E:2C:DE:E3:7C:AE:4C:2F:05:D3:86:0F:A3:8D
Authority key identifier: AC:82:C9:DD:9D:6C:CF:B3:8C:A1:16:40:E1:02:F7:51:AE:27:49:27
Certificate issuer:       /CN=ac82c9dd9d6ccfb38ca11640e102f751ae274927
Certificate serial:       019EB5B3633B915C16F784E684B82E8AC203
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft
Manifest number:          F8
Signing time:             Thu 11 Jun 2026 08:01:32 +0000
Manifest this update:     Thu 11 Jun 2026 08:01:32 +0000
Manifest next update:     Fri 12 Jun 2026 08:01:32 +0000
Files and hashes:         1: AsgCbpxXAfVEl8fMySxEMEBj3v0.roa (hash: 3DUclWrbvVnjRe22xwXjCYPITDFNxuR0Ynpweo6931E=)
                          2: rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.crl (hash: tuJo/JQVx+2HftKqDVI59DS5+50v2ei5d1rJuAgnzw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 08:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b5:b3:63:3b:91:5c:16:f7:84:e6:84:b8:2e:8a:c2:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac82c9dd9d6ccfb38ca11640e102f751ae274927
        Validity
            Not Before: Jun 11 08:01:32 2026 GMT
            Not After : Jun 12 08:01:32 2026 GMT
        Subject: CN=b88ae55685409e2cdee37cae4c2f05d3860fa38d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c4:02:be:6c:9a:4e:86:07:01:6b:48:c1:3d:
                    36:f8:c8:0e:88:65:b0:d1:0f:c9:14:df:e5:11:03:
                    5e:5d:b1:47:10:f6:92:3f:58:39:f8:f9:5b:95:b0:
                    70:63:8e:04:d2:ff:2a:f3:e6:85:5e:aa:e1:fb:e6:
                    4c:f5:fa:b0:bd:a9:2b:8f:2b:45:4f:84:da:17:97:
                    bb:58:99:56:ba:3b:07:33:8b:ef:bc:48:be:98:10:
                    0d:b0:9a:55:0f:f2:13:f0:d1:76:34:4c:fe:bb:84:
                    89:6f:69:c2:b8:1d:3c:d6:9d:62:ac:e7:e4:e7:e7:
                    1b:c9:7d:89:7f:f9:7a:02:19:80:53:f0:5f:51:f8:
                    77:71:2f:4e:d7:6d:9e:e7:40:32:d5:26:ca:12:d7:
                    a1:43:69:ec:46:7f:bc:ed:1f:7b:fc:f4:3e:ec:0e:
                    5a:1b:03:0a:d8:d7:ae:82:e0:53:17:f3:fb:a9:7a:
                    37:6b:28:2f:2c:eb:cb:e1:05:3c:1d:47:1c:e1:a2:
                    5a:85:56:90:b6:ec:fd:97:db:59:e4:9e:c1:40:68:
                    8c:c0:a6:ce:d3:14:67:49:d9:a6:3a:c7:a9:f1:1b:
                    75:cf:ba:58:76:08:50:cc:10:f7:66:94:25:74:38:
                    63:43:0e:4c:07:6c:7f:1b:c9:cd:c8:a6:32:f0:e6:
                    8d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:8A:E5:56:85:40:9E:2C:DE:E3:7C:AE:4C:2F:05:D3:86:0F:A3:8D
            X509v3 Authority Key Identifier:
                keyid:AC:82:C9:DD:9D:6C:CF:B3:8C:A1:16:40:E1:02:F7:51:AE:27:49:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:86:9d:73:e4:54:14:84:fb:06:c3:90:9e:e5:83:8d:3b:b6:
         4c:c4:60:a1:9b:22:50:28:3a:c1:13:a7:54:8e:9e:43:0c:39:
         7e:8e:42:dc:82:67:6c:5d:37:b0:d3:6e:53:9c:f1:bc:01:c1:
         a9:71:68:6e:dc:02:bd:b3:fb:c0:0b:6e:d5:03:44:60:8e:dd:
         88:54:8a:7a:7b:b1:98:14:69:9f:b2:5d:4d:c5:c5:7a:d4:ac:
         6b:d4:96:ee:3b:2e:57:a1:65:8c:0b:a1:6b:3b:db:33:c8:e3:
         8c:75:08:6f:7d:30:a6:ba:fb:33:a0:63:62:b1:c4:30:1c:35:
         5e:2d:9d:81:6a:c3:2d:b0:42:f0:23:25:04:e3:33:b7:81:bb:
         14:4a:60:4e:61:e2:b6:4c:58:b0:6a:4f:52:32:f3:0b:00:84:
         84:31:05:cd:1f:e4:fc:f9:26:4d:66:34:ba:f1:ce:7c:8e:2d:
         b7:3d:64:2f:ef:90:2b:65:fd:11:d4:c9:41:7a:a4:a7:e5:9c:
         97:fd:78:38:d3:49:d2:4f:37:7d:f4:ae:2f:7a:29:3a:97:99:
         dd:84:44:e9:a6:45:6a:4d:12:19:de:ca:b7:ed:33:38:8d:a3:
         12:fd:de:5d:d1:2d:9f:e2:bc:b1:fc:31:42:d7:a8:6a:f5:ad:
         e2:c0:19:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:19:23 2026 by rpki-client