Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
File:                     lzDCc6-etVZkMIjkO-86ahgch8I.mft (raw, json)
Hash identifier:          kBaQ+YnBlDXRMsb0FVxYrOzYIg2WHs98P/ZZuq/MDyI=
Subject key identifier:   DC:55:94:41:96:45:9C:D6:95:DC:83:A5:EE:7B:BC:73:8C:51:AC:81
Authority key identifier: 97:30:C2:73:AF:9E:B5:56:64:30:88:E4:3B:EF:3A:6A:18:1C:87:C2
Certificate issuer:       /CN=9730c273af9eb556643088e43bef3a6a181c87c2
Certificate serial:       019E1DFE8D536E7D97C702F94E8EBF57A2BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
Manifest number:          F8
Signing time:             Tue 12 May 2026 21:01:21 +0000
Manifest this update:     Tue 12 May 2026 21:01:21 +0000
Manifest next update:     Wed 13 May 2026 21:01:21 +0000
Files and hashes:         1: LftAIu9k2wnzZP9QfqBNpPsB7GA.asa (hash: oB3unSja7fyioWETroS2ws+p/jX5s1fLimygzH+96YE=)
                          2: lzDCc6-etVZkMIjkO-86ahgch8I.crl (hash: h7aPoZ//vWe1D6E3gjRYClQANhxP4hhAlOLYiPzAzWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:8d:53:6e:7d:97:c7:02:f9:4e:8e:bf:57:a2:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730c273af9eb556643088e43bef3a6a181c87c2
        Validity
            Not Before: May 12 21:01:21 2026 GMT
            Not After : May 13 21:01:21 2026 GMT
        Subject: CN=dc55944196459cd695dc83a5ee7bbc738c51ac81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bb:61:fd:44:d3:cb:aa:e3:41:f8:1f:4f:fb:
                    19:fb:9a:f3:c3:b8:3a:21:b4:99:06:5c:38:8c:22:
                    59:21:6d:b1:a5:05:c3:8a:cf:70:f2:2d:dd:6c:14:
                    eb:8d:f4:d2:36:a5:a7:a5:9f:de:5b:70:06:95:a4:
                    de:6e:b1:43:9c:69:a8:e5:09:6b:f9:6e:2c:3c:f8:
                    05:7c:90:bf:63:47:e2:10:b0:07:87:da:84:06:b7:
                    6a:48:a3:14:2a:d5:d6:51:7f:4e:9e:2a:f4:98:31:
                    a8:4d:a3:70:90:2f:ba:53:ab:a2:8b:c2:ba:1f:a7:
                    a5:d2:b7:1f:b2:06:1a:f7:6d:c8:32:0f:10:8f:02:
                    67:f7:b3:99:99:37:b2:cf:e6:8b:80:59:31:65:40:
                    6e:87:11:b2:8c:a7:51:c0:20:34:72:ee:9f:26:c3:
                    4b:32:25:26:db:4a:a2:ce:db:98:27:84:30:4b:55:
                    a2:b3:1b:e4:6e:3c:3e:11:e3:db:37:ca:2c:c2:a5:
                    45:f3:41:47:59:b7:51:96:db:93:8d:3e:8a:77:c1:
                    e5:72:39:79:5f:44:59:5f:92:6c:92:7b:63:6f:5f:
                    7e:74:2a:3b:c4:cd:68:c7:05:c6:76:17:00:4e:1f:
                    2c:84:33:b7:71:db:9d:9e:41:ce:6f:25:c1:aa:6e:
                    89:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:55:94:41:96:45:9C:D6:95:DC:83:A5:EE:7B:BC:73:8C:51:AC:81
            X509v3 Authority Key Identifier:
                keyid:97:30:C2:73:AF:9E:B5:56:64:30:88:E4:3B:EF:3A:6A:18:1C:87:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:67:07:4d:86:c6:ed:d3:1a:85:8c:92:63:9d:d5:0b:43:c7:
         17:83:76:04:c9:4b:80:5a:a5:60:fe:77:f0:59:ce:e7:a2:b4:
         26:d7:e4:ca:f6:9a:ff:e4:90:09:81:82:ac:b9:3a:91:8f:39:
         0c:38:a5:fc:56:80:77:9d:02:c2:ae:11:3b:12:e3:26:09:0f:
         27:77:86:db:f9:55:28:34:69:35:b4:e0:63:3d:94:b0:86:a9:
         bd:46:86:8a:63:4f:d6:b7:d8:e8:66:4b:32:81:03:70:7f:eb:
         a1:e3:15:e5:4b:45:a3:e8:87:10:28:2f:89:41:fd:19:c5:b2:
         e1:aa:62:27:ca:9c:37:f8:d2:a4:57:20:c1:94:15:ba:0a:e8:
         7b:5b:c4:e5:2a:18:1c:d5:ae:8e:da:4c:08:d9:83:81:1f:76:
         2e:a6:0c:bb:99:b8:57:a1:ec:d5:57:ef:64:0b:e0:25:c0:33:
         de:8c:f1:68:cb:5b:d5:b1:b2:d1:a5:90:d6:7d:d8:1a:4f:c7:
         ce:17:29:2a:dc:97:15:8d:ac:13:c6:93:96:08:c4:06:ec:79:
         e2:06:6b:7f:31:d0:00:8e:dd:8f:4e:59:a6:65:a3:cd:01:b1:
         33:b3:37:04:0e:16:9a:9f:db:e1:94:62:2c:6f:67:93:d4:e4:
         43:6b:da:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:59:37 2026 by rpki-client