Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
File:                     ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft (raw, json)
Hash identifier:          dxFjOXKV8rGInb3c4HklAAVVWoXdZbMEgPFrENcxHAk=
Subject key identifier:   D2:2D:65:11:1D:8A:00:10:C1:2A:AB:AF:35:05:8A:73:01:88:2D:A6
Authority key identifier: 8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3
Certificate issuer:       /CN=8b1edf526b1ca5ff0e682ff48aece121d27bc0c3
Certificate serial:       019E20C8596EA99EF0C2B85D5F4AD45D812F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
Manifest number:          0857
Signing time:             Wed 13 May 2026 10:01:01 +0000
Manifest this update:     Wed 13 May 2026 10:01:01 +0000
Manifest next update:     Thu 14 May 2026 10:01:01 +0000
Files and hashes:         1: ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl (hash: eynPjphEN+SYkeh5AtSxKxj/o7wsalY2ZJ0zg6xDlcI=)
                          2: pld-KrrSH2O3PZyUQtP_Kuvp-2s.roa (hash: JZBBxha8VilEBln8tqWZaEhgr9V20qoqkX6/Lbo7/s8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 10:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:c8:59:6e:a9:9e:f0:c2:b8:5d:5f:4a:d4:5d:81:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b1edf526b1ca5ff0e682ff48aece121d27bc0c3
        Validity
            Not Before: May 13 10:01:01 2026 GMT
            Not After : May 14 10:01:01 2026 GMT
        Subject: CN=d22d65111d8a0010c12aabaf35058a7301882da6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:97:a0:32:26:ba:64:ce:1c:72:64:6d:45:c6:
                    99:5d:40:80:e9:6a:4e:59:67:8c:34:93:ec:41:c0:
                    fc:0a:51:23:16:dd:15:f6:d3:ad:0e:f5:ec:d1:25:
                    f7:60:fb:25:f9:b8:ac:7c:0d:69:31:04:44:b0:4f:
                    33:c5:2a:75:72:d2:8e:a3:4d:af:32:57:81:88:84:
                    b9:32:00:37:8f:f2:59:ca:34:87:c1:7a:74:c2:8a:
                    f4:c1:38:04:03:d1:3c:b4:14:2a:40:fa:4d:0d:68:
                    e2:fd:14:10:c3:bc:3a:3b:33:87:49:1c:1c:3c:7b:
                    81:0d:13:3a:ab:c4:85:38:bd:3e:25:e8:88:6d:df:
                    e7:56:86:78:a2:5a:fc:1d:0c:98:14:3d:59:54:2f:
                    fd:2a:f8:71:18:21:10:92:76:73:7d:01:ac:fd:2b:
                    45:13:f3:da:e6:7f:dc:fe:9b:1e:4f:f7:8b:f9:eb:
                    60:46:d3:52:ed:c4:fa:ae:0b:09:59:ee:c3:a5:04:
                    dc:6a:db:93:29:ba:3f:80:49:21:1d:26:49:d5:1c:
                    2e:a5:a7:55:26:2b:bd:91:be:75:5d:88:c8:db:25:
                    c1:8a:0b:eb:79:b4:15:de:d1:79:68:1e:d7:b0:12:
                    b9:a5:26:40:34:ad:88:8a:3c:2e:a6:b5:83:c4:bd:
                    63:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:2D:65:11:1D:8A:00:10:C1:2A:AB:AF:35:05:8A:73:01:88:2D:A6
            X509v3 Authority Key Identifier:
                keyid:8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:42:67:ba:34:37:1b:5e:9c:8f:77:b9:40:df:cd:9a:a7:90:
         c8:42:88:1b:6f:9b:20:86:45:a0:06:35:17:aa:37:38:76:af:
         3b:f5:03:c1:bd:db:fa:f2:f8:92:5e:30:bc:02:d0:89:f1:b4:
         5f:a2:3f:fc:97:9f:c8:3f:85:ab:66:8e:d8:b1:2f:80:6c:f8:
         77:81:7d:10:48:a0:4a:ef:7a:b8:2b:c8:0b:e1:8d:2d:61:88:
         13:3a:39:1c:fb:68:8a:2b:1b:23:29:66:2b:7a:e9:73:77:13:
         16:5d:ae:05:e5:a4:71:76:df:81:e6:04:70:81:da:37:15:96:
         ae:31:06:7c:7e:2c:0b:fa:d7:ac:41:e5:5d:da:6a:3e:96:fd:
         80:a3:d1:8c:ca:cb:12:88:8e:47:7d:ed:92:5f:88:b0:fb:6a:
         8d:4b:a2:40:31:9b:2e:27:1f:6f:df:46:13:bf:92:aa:2f:d7:
         dd:c5:8e:e2:fd:95:34:c3:4d:51:1c:cc:63:45:99:7b:4e:e2:
         3c:0b:c2:ae:0b:39:d4:dd:ce:51:7f:e2:12:d4:de:5f:ee:e9:
         f6:f2:3c:44:b8:4e:38:d1:c2:d0:3d:b3:7f:c0:28:31:64:d7:
         68:d1:ba:a9:19:05:27:50:1c:59:62:01:a9:15:a6:91:83:3e:
         1a:f7:73:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:49:02 2026 by rpki-client