Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
File:                     SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft (raw, json)
Hash identifier:          hlN2a/gk9fJhbP2LDml/otf8+CPKWltiBMFi0uaYjAA=
Subject key identifier:   FD:E4:3D:3F:82:0C:53:52:58:D5:49:F7:30:6E:C9:3E:D2:54:3E:68
Authority key identifier: 48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD
Certificate issuer:       /CN=48113c916a59da4d43b8efa7739ad1167ace59fd
Certificate serial:       019E1EA3A1FD2B47769DF11281765B7871FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
Manifest number:          14C9
Signing time:             Wed 13 May 2026 00:01:40 +0000
Manifest this update:     Wed 13 May 2026 00:01:40 +0000
Manifest next update:     Thu 14 May 2026 00:01:40 +0000
Files and hashes:         1: SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl (hash: ExhZUCIpt33i1/w/2IW6Szvytct7gQjhW90/NTiNpGU=)
                          2: wOjdRDY4rMDU4XDk35HoLt7uT2M.roa (hash: 7YjJqmLdz1HfJE+GpOkltOPkNzD9vAKu54sBhDV3osE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:a1:fd:2b:47:76:9d:f1:12:81:76:5b:78:71:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48113c916a59da4d43b8efa7739ad1167ace59fd
        Validity
            Not Before: May 13 00:01:40 2026 GMT
            Not After : May 14 00:01:40 2026 GMT
        Subject: CN=fde43d3f820c535258d549f7306ec93ed2543e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fa:08:a6:da:78:00:fa:46:a0:e0:c0:d8:1a:
                    35:3c:eb:03:0b:89:69:19:f4:4b:76:f3:64:a9:f1:
                    82:4f:65:74:8f:39:5f:35:b5:32:85:3c:24:94:0e:
                    a8:e3:81:01:c2:04:00:85:f5:b1:f9:fb:4b:4b:51:
                    b0:e1:e5:a9:b7:c3:e5:42:e9:2e:21:7a:79:5d:f4:
                    f2:c2:da:2d:ed:45:7b:7a:27:63:d9:4a:35:37:30:
                    12:df:b8:95:87:c1:7a:37:94:ab:34:0f:bb:57:ee:
                    d0:a6:85:1f:b4:fd:f0:61:01:74:c9:3f:8b:3e:94:
                    af:f9:90:0f:a9:c5:51:90:ce:d9:f3:aa:15:81:06:
                    c5:20:dd:db:03:17:0e:b4:fc:18:62:47:4d:4d:38:
                    19:99:de:01:89:06:d1:0c:7e:28:0b:6c:b1:89:a2:
                    e1:ea:7c:6a:85:c4:c6:da:c3:b3:6e:5c:a7:13:b5:
                    19:a2:53:85:f4:43:3a:3d:47:d1:40:b0:0e:28:26:
                    77:86:09:5c:e1:f6:bd:62:53:2b:3d:ed:1f:90:84:
                    f2:00:a1:00:c9:73:74:24:0b:9c:e5:fc:44:1f:55:
                    fe:50:4e:3f:07:ca:d0:14:ba:a1:bf:7b:b4:4c:ca:
                    79:e1:31:2e:25:ff:22:07:43:5d:b0:f7:84:fe:11:
                    e8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E4:3D:3F:82:0C:53:52:58:D5:49:F7:30:6E:C9:3E:D2:54:3E:68
            X509v3 Authority Key Identifier:
                keyid:48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:e5:d6:36:1c:9c:13:45:84:66:b0:13:0e:ee:d5:b0:91:f5:
         31:1b:32:59:2a:63:8b:43:ea:6f:8c:c1:2f:67:08:18:e0:15:
         9e:ca:b4:3b:bf:21:6a:c7:fb:65:24:a9:bb:d2:09:0c:4f:07:
         03:aa:22:46:6f:74:7e:43:59:27:da:1b:07:13:00:e9:b7:dc:
         44:da:40:0d:c2:d5:73:57:6a:60:a8:47:45:19:ca:a3:d4:f5:
         5d:f0:61:86:b4:45:d8:e8:1c:ed:13:b2:a5:18:c2:4e:0f:6f:
         48:5b:ed:dd:e3:3b:6b:a8:57:59:e5:d6:92:30:df:98:f4:94:
         c7:37:78:74:36:55:5e:f4:a3:1f:44:62:b2:41:70:de:3d:42:
         20:83:6d:61:de:c8:31:f0:71:8d:ea:5d:d6:d5:f6:73:f1:3c:
         52:f8:2c:3f:3e:54:ef:c5:a8:c4:4e:9e:b7:08:5e:d0:da:0d:
         83:3e:68:48:df:16:52:ea:b2:bd:73:9d:fd:e4:d3:a5:7a:8c:
         c4:b9:e6:5f:16:bb:98:84:ce:79:19:f8:89:96:11:ad:d4:2c:
         f2:e1:c5:ce:94:24:b4:cf:ec:af:cd:2c:0c:4f:bd:d4:93:ff:
         d5:04:6a:d1:b2:93:52:23:59:a7:9a:d8:3b:08:1f:03:b5:8b:
         01:c9:83:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:14:19 2026 by rpki-client