Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
File:                     8dK6iiqWoHtbZMr4cykOIHjZZKY.mft (raw, json)
Hash identifier:          9ysFNJmg9vhhiNya90YLOECHznXfJAEKp8WoAT5yYWQ=
Subject key identifier:   56:3C:C8:3A:CE:A2:65:EB:84:58:20:F6:36:9B:F1:64:65:98:05:24
Authority key identifier: F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
Certificate issuer:       /CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Certificate serial:       019E1D90EBD50EBE2F52D262DB1064D39A77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
Manifest number:          0886
Signing time:             Tue 12 May 2026 19:01:37 +0000
Manifest this update:     Tue 12 May 2026 19:01:37 +0000
Manifest next update:     Wed 13 May 2026 19:01:37 +0000
Files and hashes:         1: 8dK6iiqWoHtbZMr4cykOIHjZZKY.crl (hash: Ai+MAUMQ4uM2gqLTPnfMc2CBG4+Y5CyCfAgDpcYDe2E=)
                          2: wn5elTtGmUxo3vgmfjZchTK_VTo.roa (hash: fkotHNjPjFd/IcwShz9KIRbGoJkmT3yrX5z9oh73hjU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:eb:d5:0e:be:2f:52:d2:62:db:10:64:d3:9a:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
        Validity
            Not Before: May 12 19:01:37 2026 GMT
            Not After : May 13 19:01:37 2026 GMT
        Subject: CN=563cc83acea265eb845820f6369bf16465980524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:db:39:2d:6a:cb:b7:6f:e5:30:59:66:35:ea:
                    de:e2:15:0d:93:52:96:ba:80:d5:36:27:87:3c:40:
                    c4:a7:a6:7c:a3:48:90:61:ea:90:40:4e:89:1f:c4:
                    f7:4e:12:7a:62:3c:25:14:d2:be:91:8d:1c:ee:bc:
                    75:c9:83:96:49:33:64:a2:27:ba:74:47:88:ea:59:
                    1b:0a:48:d7:fc:12:ad:bb:53:85:00:47:17:30:a3:
                    2a:f4:6b:2c:58:4c:57:fb:9e:3a:41:9c:d1:63:c7:
                    89:b9:6a:1e:29:7a:ef:2b:60:ff:93:b2:be:fd:c6:
                    20:c0:e2:b7:12:fe:2c:fb:47:64:5a:fc:20:25:90:
                    81:76:95:af:9f:8e:fa:22:82:35:53:b8:ca:5b:97:
                    8c:01:b4:f7:3c:75:2c:17:00:bb:9f:8e:87:c4:74:
                    53:8d:3a:14:70:1c:ac:08:b0:4e:c8:39:55:c7:8b:
                    a8:f0:9b:bb:07:6e:ad:5e:6a:a1:5b:5d:8c:db:c2:
                    f9:1a:88:1c:23:e3:fb:63:9c:4c:ca:98:0f:7e:0b:
                    88:13:4d:d0:50:c9:51:1d:fb:4a:fa:a0:ba:2e:d9:
                    f0:6a:25:61:45:d5:16:94:ff:a1:f0:c3:7a:ae:fa:
                    f0:bf:1f:10:ef:11:f4:2f:b5:d8:cc:cd:07:7f:3b:
                    04:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:3C:C8:3A:CE:A2:65:EB:84:58:20:F6:36:9B:F1:64:65:98:05:24
            X509v3 Authority Key Identifier:
                keyid:F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:6d:c4:43:35:8a:e9:b6:9c:db:95:0f:8b:95:7f:0e:0e:49:
         6d:49:c7:e7:69:ec:33:8b:9a:a3:c9:cf:43:b7:4a:49:f3:94:
         71:4b:91:81:e2:4b:8e:e0:79:59:65:13:e6:60:7e:97:c0:3a:
         d5:88:8d:6f:91:a3:ca:d2:a6:3b:e3:21:5d:9b:1a:1f:bc:36:
         98:42:bf:cb:cb:7a:17:ce:79:af:44:61:ff:a2:4d:2e:6b:33:
         11:18:9b:9c:ea:f5:88:a0:e4:a3:37:f2:54:d1:d7:68:a8:bf:
         ba:bd:e8:9f:d2:59:00:28:55:30:7b:12:2f:4b:ff:67:31:b3:
         97:01:9f:4e:af:35:39:2e:bf:c1:37:57:ec:d8:3e:a6:e4:7f:
         43:b6:37:a5:e1:05:e9:3c:91:d2:29:8f:f3:9f:20:83:f9:b8:
         a6:6a:b2:69:54:ab:ac:84:80:4c:ac:f2:f3:de:95:84:ba:a8:
         dc:52:55:35:b7:c7:9d:c3:fe:23:40:c8:30:14:23:71:ba:0b:
         48:e7:6f:a5:3c:c4:f4:9f:fc:23:29:cb:72:c4:18:5e:48:43:
         69:2d:fc:6b:a5:a2:a6:03:5c:ac:0c:fa:b5:57:ea:a9:dc:22:
         d3:9f:17:d2:5e:68:48:7b:01:89:35:3c:c7:b6:81:50:4f:2d:
         0a:55:ea:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:19 2026 by rpki-client