Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
File:                     AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft (raw, json)
Hash identifier:          fu7Xq6KjT9q3g0A+78zHswFqHDtReRhwPEoGpruXZIM=
Subject key identifier:   8F:14:22:48:D9:92:8F:8F:A5:E6:F9:2C:BC:B7:BE:19:12:DA:46:05
Authority key identifier: 03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2
Certificate issuer:       /CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
Certificate serial:       019E1E355D01761994F908400542D2FDB90C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
Manifest number:          0885
Signing time:             Tue 12 May 2026 22:01:14 +0000
Manifest this update:     Tue 12 May 2026 22:01:14 +0000
Manifest next update:     Wed 13 May 2026 22:01:14 +0000
Files and hashes:         1: AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl (hash: 41U615QhNCpU6kl6ywp4bG1/7uP0wfaI7GwdqUvx5QI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:5d:01:76:19:94:f9:08:40:05:42:d2:fd:b9:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
        Validity
            Not Before: May 12 22:01:14 2026 GMT
            Not After : May 13 22:01:14 2026 GMT
        Subject: CN=8f142248d9928f8fa5e6f92cbcb7be1912da4605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:90:32:6b:db:b9:99:16:0a:75:8c:39:f4:ee:
                    a3:ec:c4:93:00:66:95:54:36:9d:17:1f:ee:46:3c:
                    ea:d4:fc:3f:20:49:30:d8:3d:79:76:a2:57:69:59:
                    4d:8b:2c:87:67:45:15:d4:5c:3d:87:6f:2c:48:2b:
                    a2:02:9f:53:89:3a:89:b9:d4:3d:d0:3f:ed:6b:5a:
                    05:e5:86:d5:b0:bf:b3:44:b0:ec:75:d6:87:f7:20:
                    6b:92:e6:72:75:80:ed:d3:1e:a0:fe:08:6f:1b:61:
                    75:dd:27:5d:a1:81:d7:cc:15:41:1d:6f:31:4a:9c:
                    d4:34:25:a3:d9:94:36:a5:17:f2:94:1a:b9:4a:50:
                    1c:0c:87:36:ff:4e:37:24:40:26:d3:1b:11:13:3b:
                    91:88:81:a5:6f:ab:43:08:ba:4a:0b:ed:7c:79:30:
                    a6:44:1c:a3:f7:e8:49:6a:35:f5:b7:91:d8:85:4b:
                    48:7b:40:e6:ca:99:bf:80:23:dd:c9:c9:9d:44:67:
                    fc:72:c9:4a:76:49:9f:42:4c:5b:11:8c:0c:0a:d9:
                    d9:06:6f:93:01:ca:30:6b:48:b3:fc:c3:1a:9a:3a:
                    40:e3:54:21:8b:db:f0:91:13:29:3b:75:cf:61:52:
                    90:33:24:f1:a6:fb:9b:32:f4:c5:cf:b4:3e:c9:f0:
                    ef:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:14:22:48:D9:92:8F:8F:A5:E6:F9:2C:BC:B7:BE:19:12:DA:46:05
            X509v3 Authority Key Identifier:
                keyid:03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:6a:af:3c:d0:75:55:61:c2:79:1e:7b:3e:1e:ae:a7:25:2d:
         38:74:2c:e4:3d:95:3d:12:40:71:43:18:f6:d2:df:6d:41:bd:
         b7:79:77:50:c6:a7:a4:65:b7:9b:01:8a:1f:53:92:a6:b3:85:
         5a:bc:7e:80:46:8a:63:04:0c:47:fb:2b:d7:0a:4e:63:82:c3:
         7a:1e:b9:68:29:6d:36:2b:11:3e:74:82:20:8c:5c:9f:88:f2:
         8e:5d:ac:cc:36:91:14:4e:ba:4b:d7:aa:5f:04:77:c3:9c:b3:
         a7:48:f0:e5:34:2e:3f:da:dc:06:41:42:01:e9:6b:a8:73:a3:
         ae:22:1b:9c:60:aa:db:46:41:fe:49:ce:b7:5c:54:2a:e9:08:
         93:4b:07:fa:11:49:fa:db:0f:91:f5:6c:5b:6e:94:cf:88:7b:
         df:89:20:b6:2c:24:25:39:56:64:ae:4e:d1:a2:46:37:89:80:
         f1:de:2f:c3:0b:d2:ea:0b:21:0d:e3:e6:72:36:26:48:fc:79:
         d5:04:0f:e6:77:14:94:8a:86:e2:a6:88:39:2f:a0:0a:27:22:
         4d:ca:41:1d:c4:05:2b:e3:07:8a:be:10:8b:dd:b5:a1:0c:0b:
         9c:b0:4d:9a:28:25:f8:b9:68:60:f1:b9:9e:1f:db:05:cd:d5:
         b1:25:f7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:08:11 2026 by rpki-client