Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
File:                     8XShpC1Ap_uCpsCM6XZRy2ar83A.mft (raw, json)
Hash identifier:          26LaomDJb+NRPch5erEifq6o6AMyzf2LaYPnx2CyLUM=
Subject key identifier:   5F:15:2F:B7:33:15:D7:49:73:C2:66:E7:C8:A4:FC:82:F2:2D:96:58
Authority key identifier: F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70
Certificate issuer:       /CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
Certificate serial:       019E1D90BBF9C121ADFB5CC763F7688A230C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
Manifest number:          0D06
Signing time:             Tue 12 May 2026 19:01:24 +0000
Manifest this update:     Tue 12 May 2026 19:01:24 +0000
Manifest next update:     Wed 13 May 2026 19:01:24 +0000
Files and hashes:         1: 8XShpC1Ap_uCpsCM6XZRy2ar83A.crl (hash: EyzIyUYXbf/kg0YRO8lVOqnEoOpMKpPpKQatva2UInM=)
                          2: uBozqFCRP6q6-fMqqEdxvia5s2w.roa (hash: 7my1TEAY49gz3OCc/3WBB7kXgHGx+R9z5VTiKjlGzfs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:bb:f9:c1:21:ad:fb:5c:c7:63:f7:68:8a:23:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
        Validity
            Not Before: May 12 19:01:24 2026 GMT
            Not After : May 13 19:01:24 2026 GMT
        Subject: CN=5f152fb73315d74973c266e7c8a4fc82f22d9658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:00:b8:45:18:91:0d:72:11:40:d4:06:da:e0:
                    a9:bf:60:34:ea:35:54:58:87:1f:88:18:40:85:73:
                    73:62:28:71:49:d6:5d:49:76:dc:56:d6:b7:89:31:
                    c4:5f:46:34:2c:6c:25:b7:cf:27:68:41:43:e5:7f:
                    ac:87:8e:37:c6:60:a9:67:75:cf:1b:5a:c9:4a:a8:
                    ed:a1:92:27:7e:03:02:77:7e:37:21:f4:0f:78:49:
                    41:d7:2d:fb:1d:da:db:77:d9:f5:73:26:07:53:57:
                    31:03:b4:0e:e8:5f:9d:a3:07:45:2f:bc:27:12:68:
                    d5:8b:ea:b3:49:23:f7:e6:02:ea:82:5d:39:45:64:
                    a2:ae:ed:e0:17:6b:0f:c7:c6:2c:fb:f2:91:47:d7:
                    e1:ad:14:6a:2e:1e:52:3a:8b:95:20:e7:2e:9d:81:
                    23:5f:66:e0:d0:64:0f:fa:a8:fb:80:16:95:77:4c:
                    3c:48:65:ba:99:cc:e4:66:2c:9e:d9:37:16:05:0d:
                    bf:9d:05:31:68:91:63:bb:cd:fc:c9:f1:52:66:34:
                    0b:d5:53:4c:8b:04:e8:70:6a:df:d2:e6:82:e4:01:
                    26:44:8f:28:7c:cf:59:98:af:27:bf:2b:3f:cb:c7:
                    c3:5c:20:6b:e8:8b:49:a2:37:6e:ce:d6:97:28:f6:
                    d9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:15:2F:B7:33:15:D7:49:73:C2:66:E7:C8:A4:FC:82:F2:2D:96:58
            X509v3 Authority Key Identifier:
                keyid:F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:e8:ac:be:3a:9c:3d:2c:2c:42:c2:c1:f0:c9:00:4b:53:87:
         8c:2d:cf:c9:8a:29:24:d5:ca:aa:5b:e2:47:4c:41:c2:fc:8a:
         a1:0e:64:1b:2d:2c:86:23:99:5c:57:ff:48:f2:8b:fe:4e:99:
         ef:ff:96:2a:2d:39:21:64:ef:89:94:f4:10:98:d3:11:95:8c:
         e0:7b:cc:9f:d1:25:b7:da:95:cd:49:91:2e:28:5d:a2:66:2a:
         83:c0:95:61:ec:58:5e:1f:e3:d7:97:bb:30:9f:68:6f:41:6d:
         7c:8a:1a:2c:6a:d9:d1:9e:a6:79:5e:01:65:a2:4a:45:df:a3:
         23:5c:a5:fe:18:95:58:9d:a6:74:b9:ce:fe:6d:bf:6b:d6:56:
         1c:aa:48:d1:83:95:87:f7:13:2d:ab:dc:96:6c:45:c7:91:0c:
         5d:dc:1f:31:96:dd:1e:2a:ec:21:9a:bf:f1:e6:ae:13:cf:80:
         8e:da:21:be:70:5e:d2:56:94:22:70:68:fa:98:18:15:5d:b2:
         82:08:ff:0e:e5:1f:f4:b3:27:83:b2:9c:99:22:10:74:58:e1:
         eb:86:55:cc:6b:bc:06:3e:e4:e5:b1:fb:16:49:15:21:57:b1:
         ff:4f:5d:48:1d:8e:97:39:da:c0:92:b0:c4:9b:ce:53:d8:d2:
         ee:fe:42:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:51 2026 by rpki-client