Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
File:                     CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft (raw, json)
Hash identifier:          IzP5atTThiodoUuv90ZGvLaTB0qKxtpl1V8KjTo154Q=
Subject key identifier:   89:FE:DB:FD:B1:6D:5D:15:6B:93:35:C4:79:37:BA:6D:2A:76:4E:79
Authority key identifier: 08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
Certificate issuer:       /CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Certificate serial:       019E1D592C939DD4B6D666EB44B536313EDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
Manifest number:          0830
Signing time:             Tue 12 May 2026 18:00:43 +0000
Manifest this update:     Tue 12 May 2026 18:00:43 +0000
Manifest next update:     Wed 13 May 2026 18:00:43 +0000
Files and hashes:         1: CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl (hash: 7i4VjRT0WWZBDa4tqRIFlWz1XIPXr6Eyip6ZCyOkkbs=)
                          2: wgz-8hglwHR911ob9HfwohhdtgQ.roa (hash: 55eAFlJ7cF1g7feIqiVvGyi7uRg+vi322ZgnDqKt9dM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:2c:93:9d:d4:b6:d6:66:eb:44:b5:36:31:3e:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
        Validity
            Not Before: May 12 18:00:43 2026 GMT
            Not After : May 13 18:00:43 2026 GMT
        Subject: CN=89fedbfdb16d5d156b9335c47937ba6d2a764e79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:92:70:aa:c5:2c:99:f9:e5:31:4c:60:14:f1:
                    0e:79:40:e9:07:e7:5f:03:48:5d:33:73:c8:ae:63:
                    80:ad:cc:0f:52:12:1c:f6:d2:87:dc:e1:35:75:25:
                    1f:a6:f6:ce:05:80:7c:3a:90:c2:59:3b:91:43:3c:
                    c8:da:e9:1d:87:4e:37:bd:e5:6c:71:d0:11:e7:4c:
                    81:9e:32:cd:7c:cf:8d:f7:7f:d6:40:cc:13:e3:07:
                    e7:a7:25:4b:ba:93:be:94:52:08:0c:8b:13:9a:22:
                    9c:a9:b5:1d:c3:eb:59:91:8a:c9:c8:22:5e:d1:99:
                    a0:7c:4a:3f:92:e0:7b:4d:e2:f2:10:9a:8f:2e:e0:
                    26:8a:7b:1c:a2:8f:74:88:8f:cf:0d:c3:7e:90:18:
                    88:53:ae:15:fa:f0:a4:9c:1b:b5:af:e8:6e:19:31:
                    73:78:19:08:51:22:7a:bb:6c:76:8f:0d:29:f9:c0:
                    82:80:b5:3e:b6:3d:d3:42:98:12:30:33:f0:1f:92:
                    8f:48:b6:ea:5e:c4:49:9c:db:56:63:71:4c:ab:6b:
                    5f:4f:f2:14:78:62:29:0c:f7:9b:eb:0e:ff:33:48:
                    5b:73:87:e9:e2:6e:25:85:94:77:77:9a:75:1c:30:
                    c5:ff:bb:b5:79:40:59:31:17:d2:1d:c6:3c:93:0f:
                    da:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:FE:DB:FD:B1:6D:5D:15:6B:93:35:C4:79:37:BA:6D:2A:76:4E:79
            X509v3 Authority Key Identifier:
                keyid:08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:ee:bf:f8:66:7f:11:54:8f:a5:c8:e0:6e:c5:fa:23:41:ad:
         4c:62:ec:c2:25:1e:ac:99:c0:f8:45:4b:a7:32:2c:f0:c4:40:
         bf:8b:e0:93:1f:f4:e3:c6:de:f6:8f:24:52:bb:19:7d:48:3b:
         7c:aa:d8:0b:43:7c:be:32:50:da:0b:a7:f5:94:b0:77:b4:1f:
         a7:78:7b:70:51:b5:e7:aa:0f:99:e4:5a:c1:18:89:77:a4:03:
         d6:b6:01:97:1b:81:50:a5:af:d3:a0:85:09:52:79:90:e8:96:
         6e:3f:e9:03:74:fc:df:d8:8a:fe:ef:23:7b:a9:9f:27:fd:67:
         78:9a:50:4e:ee:42:ea:ad:17:02:69:b1:22:16:f1:d5:b3:dd:
         f3:27:fe:3d:d2:48:e7:0f:32:e3:01:e3:ad:fa:68:be:65:f4:
         c8:71:a0:3c:af:23:b2:bd:4f:51:13:df:a9:4a:58:0a:ad:4c:
         a0:8c:70:a1:46:4e:3a:86:2b:3a:f4:86:51:7e:b9:32:06:ae:
         ad:98:cc:84:d7:25:b2:81:1d:71:f2:6f:74:45:5b:34:6b:94:
         2f:03:2c:6f:03:1b:07:60:bb:23:2e:60:8d:c0:e1:43:55:36:
         52:40:89:94:8f:5d:ef:11:45:bb:6d:de:86:b4:8d:70:50:7b:
         ca:41:48:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:22:51 2026 by rpki-client