Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File:                     M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier:          tCbZgd1zN1p3RYHI44mSayPEl5wl0tac+wigQZXPH3o=
Subject key identifier:   1C:0C:6D:FD:72:C3:0A:6C:AE:EB:D1:1A:1D:E8:CE:3D:2B:B5:34:CC
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer:       /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial:       019E2136B9A3C4A1DBD312628500C7A4DAAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number:          08E2
Signing time:             Wed 13 May 2026 12:01:34 +0000
Manifest this update:     Wed 13 May 2026 12:01:34 +0000
Manifest next update:     Thu 14 May 2026 12:01:34 +0000
Files and hashes:         1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: yy0GvUYnIxVqsfTWhCOcHALQqdpHPwLUw4wfwYPC21Q=)
                          2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
                          3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 12:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:21:36:b9:a3:c4:a1:db:d3:12:62:85:00:c7:a4:da:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
        Validity
            Not Before: May 13 12:01:34 2026 GMT
            Not After : May 14 12:01:34 2026 GMT
        Subject: CN=1c0c6dfd72c30a6caeebd11a1de8ce3d2bb534cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:77:c1:1d:4d:35:97:6d:4e:8f:51:4a:f1:f5:
                    6f:fc:f7:48:19:ab:f1:20:9e:06:48:0f:6a:29:0a:
                    e0:5b:e6:46:09:cb:be:75:20:6f:d7:4a:76:f6:ce:
                    43:b0:b3:6e:ab:4c:c9:a5:59:05:b5:47:38:9b:9c:
                    dd:f5:d2:22:fb:2d:ed:72:9e:ef:bd:09:05:04:e4:
                    07:57:70:d1:b1:c1:c6:85:92:c9:b8:ba:4a:5d:e3:
                    af:73:fc:27:a1:7c:b2:26:31:dd:ae:73:ff:60:3f:
                    93:25:18:d7:90:4f:9a:2f:de:b9:18:4f:b0:dc:b6:
                    27:40:87:a0:5e:77:21:82:95:f1:f7:87:31:3d:33:
                    e5:2c:8c:b5:16:db:d4:e2:fd:3b:6e:0f:34:74:07:
                    9c:5a:ac:35:81:2e:a6:86:bc:0a:38:e7:9b:2d:d7:
                    58:78:43:7a:81:28:e8:c7:e0:df:ca:09:f7:44:06:
                    8a:a4:39:15:d6:be:70:94:61:e3:a1:0a:30:65:8d:
                    2d:aa:6f:65:42:a2:14:eb:81:92:6e:42:86:9e:70:
                    83:96:00:7c:bd:77:31:a8:f8:1c:ef:f1:ed:70:6e:
                    1f:39:fd:10:b9:99:51:06:e5:65:54:44:f2:d5:aa:
                    54:6d:2d:bf:c1:37:86:47:62:f9:f5:93:e9:40:cd:
                    33:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:0C:6D:FD:72:C3:0A:6C:AE:EB:D1:1A:1D:E8:CE:3D:2B:B5:34:CC
            X509v3 Authority Key Identifier:
                keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:27:37:e0:cf:7c:06:9d:0f:e4:7f:2b:0c:92:72:9c:7c:53:
         16:8d:0e:1c:2c:c7:aa:bc:28:82:c1:40:f8:bc:b4:17:92:35:
         52:38:0a:b5:d9:57:a3:93:cc:3a:93:4d:d8:00:cc:92:07:c3:
         b6:c8:0b:57:d0:f0:fe:39:67:26:ba:14:e8:07:01:a4:da:96:
         5f:bb:fb:18:db:3f:16:a8:81:e5:08:e5:5b:89:19:dd:50:1f:
         e4:48:00:c8:fc:12:c8:98:c1:3a:fc:91:12:d7:60:38:af:44:
         d5:31:ee:dc:26:05:66:7f:fb:74:91:2f:c9:9c:c1:da:cf:fe:
         5b:e1:94:f9:b2:b1:bd:36:d4:05:60:86:1d:e7:ec:c7:00:92:
         89:ed:3e:9f:4c:dc:0d:4f:c7:bd:5c:8e:84:c6:a9:12:fa:7c:
         74:76:8f:82:0d:3f:6d:b9:db:31:7a:07:b6:e7:bf:4e:fc:75:
         33:aa:82:be:b6:a7:b4:e2:70:21:7b:6a:aa:41:8d:64:b2:09:
         5d:b2:86:cc:be:f6:be:16:9a:7f:a7:5e:d9:ab:13:58:eb:5b:
         b1:c1:09:03:1b:97:e4:de:64:de:aa:b4:17:08:9e:d5:5b:de:
         d7:ad:d8:f9:11:83:8e:a2:95:a4:b0:4a:5b:7a:52:9e:d9:78:
         c9:3d:48:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:57:36 2026 by rpki-client