Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
File:                     8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft (raw, json)
Hash identifier:          YRi40MgSVXY0ZDFnpKbaN1nOtNUiSdlmNhbeZx5atTQ=
Subject key identifier:   4B:19:F9:5A:E9:49:B6:CD:92:17:CD:A4:AB:3D:39:B7:26:97:BC:97
Authority key identifier: F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
Certificate issuer:       /CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Certificate serial:       019E1E6C1270686361312012587E2AC41323
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
Manifest number:          131A
Signing time:             Tue 12 May 2026 23:00:59 +0000
Manifest this update:     Tue 12 May 2026 23:00:59 +0000
Manifest next update:     Wed 13 May 2026 23:00:59 +0000
Files and hashes:         1: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl (hash: kFeb0mkdOOL2FPSHz7YhxPh3O7xePXSHPcgXr8hSL88=)
                          2: po4crTaA95m-lSpTh_du9PtU6gY.roa (hash: SJ7n/VopAoAzW1zSv/V6X7AVtWxebx5P9AXUE5osTUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:12:70:68:63:61:31:20:12:58:7e:2a:c4:13:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
        Validity
            Not Before: May 12 23:00:59 2026 GMT
            Not After : May 13 23:00:59 2026 GMT
        Subject: CN=4b19f95ae949b6cd9217cda4ab3d39b72697bc97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f3:28:8f:ac:14:9e:6d:eb:26:67:db:d6:6f:
                    53:b6:d0:d2:6a:ed:64:14:90:d3:81:bb:a1:97:de:
                    67:14:84:dc:2b:f4:82:29:ea:50:7f:60:07:f5:42:
                    69:ac:d7:d0:c7:1e:34:7b:ff:8f:e8:0c:d6:2e:4a:
                    d3:1f:4a:ef:38:4e:cb:53:2a:fd:42:2b:d5:16:2f:
                    aa:93:b1:90:66:7c:5d:ef:81:96:30:ac:3d:01:6f:
                    08:8a:5a:82:86:a2:1b:08:08:f5:17:33:5f:e9:94:
                    4e:3e:b7:12:3c:ff:bd:62:4c:3e:d9:57:4f:62:69:
                    8d:fc:fb:43:cf:73:2b:c7:df:82:87:b9:03:82:dc:
                    72:a9:48:c2:f4:fe:3f:c5:98:fb:a8:55:2b:3d:a1:
                    cc:4b:e4:9d:67:d7:66:e6:5d:a8:f9:ce:5e:1e:a3:
                    de:57:c4:ef:40:e6:60:a0:8f:9d:d2:cd:61:2e:45:
                    83:94:3f:91:9c:55:07:3c:e4:28:a5:fe:6b:c3:c9:
                    20:6f:77:69:c3:43:67:95:dc:bb:33:b0:95:f3:00:
                    c3:33:56:cb:83:e2:b1:26:5c:31:c4:56:cd:27:23:
                    5f:10:89:ef:b5:7a:7a:3c:d8:40:c3:cd:ab:41:30:
                    0d:e9:87:ae:8a:62:05:63:f7:84:4c:a8:54:da:a8:
                    85:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:19:F9:5A:E9:49:B6:CD:92:17:CD:A4:AB:3D:39:B7:26:97:BC:97
            X509v3 Authority Key Identifier:
                keyid:F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:9f:1c:f1:b6:11:7d:0c:45:b2:b7:16:38:ea:a5:48:e1:26:
         8a:db:78:e3:2f:25:9a:f9:76:7a:67:1e:ec:37:8f:96:53:3d:
         80:b2:8f:04:43:b4:c9:d9:2c:58:4c:0a:df:93:12:2d:b5:87:
         b4:d4:e7:bd:7e:fd:9e:be:36:2b:38:a8:af:74:47:ce:b1:af:
         d9:2f:2a:44:b0:63:e1:2a:32:95:2b:c0:f2:1e:b5:eb:45:e9:
         48:41:c9:86:0a:6e:6c:d3:29:b6:c7:e7:28:10:25:7d:f1:4f:
         b0:ac:df:7e:58:6d:83:52:24:25:31:a6:dc:d4:49:c6:0a:d5:
         f0:da:f7:0b:cf:18:96:53:c9:79:87:8b:37:f0:4d:87:d9:7a:
         c4:8d:8e:c3:b8:f6:cf:7c:2d:8c:f6:6c:2e:68:04:8c:9b:c3:
         9c:c7:7a:1e:62:4e:81:d6:19:a8:85:96:ad:8d:70:53:c1:92:
         00:04:2c:14:f6:d3:8d:17:01:5d:52:73:6a:22:98:cf:e4:b5:
         06:cf:00:b4:a9:f1:c3:be:f0:b6:e9:d4:70:ae:6f:73:5d:69:
         59:38:64:8a:ab:4f:a6:0d:24:5c:2d:0c:89:ca:dd:12:ff:b8:
         8f:4f:b0:4a:d3:98:aa:59:4c:b8:7c:79:b4:b6:b1:63:15:d0:
         f3:bc:43:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:18:09 2026 by rpki-client