Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
File:                     9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft (raw, json)
Hash identifier:          NreH8xYhunteo3bYeEy88ewNbGR/69Pmgm76rfXpfCc=
Subject key identifier:   DC:CE:70:40:BB:A9:4E:C0:A0:2B:21:1F:7B:A7:14:2B:7E:A4:76:56
Authority key identifier: F7:FF:3E:7D:86:59:E8:AE:9F:6F:4F:31:D3:F2:4F:DB:3C:6D:F5:27
Certificate issuer:       /CN=f7ff3e7d8659e8ae9f6f4f31d3f24fdb3c6df527
Certificate serial:       019E1C471343F8AC1AFA1CC1B08385A5A491
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
Manifest number:          04C0
Signing time:             Tue 12 May 2026 13:01:20 +0000
Manifest this update:     Tue 12 May 2026 13:01:20 +0000
Manifest next update:     Wed 13 May 2026 13:01:20 +0000
Files and hashes:         1: 9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl (hash: A+KVO7HOSffcuyFD07RXSESy1Jjm9QmijvYeioP6/Dk=)
                          2: cfgUMJjPHo2HMTWogKTOZFoNb44.roa (hash: 6T+E0hhZ0PL+MJOi66ClH6FGS34xdrKxtztKFTXuFcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:47:13:43:f8:ac:1a:fa:1c:c1:b0:83:85:a5:a4:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7ff3e7d8659e8ae9f6f4f31d3f24fdb3c6df527
        Validity
            Not Before: May 12 13:01:20 2026 GMT
            Not After : May 13 13:01:20 2026 GMT
        Subject: CN=dcce7040bba94ec0a02b211f7ba7142b7ea47656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:eb:0a:40:3e:6b:ba:a8:ca:95:2c:61:11:0f:
                    65:7c:45:ff:6f:7d:d8:d8:e1:c8:52:f6:ac:f4:28:
                    72:94:a7:2a:2d:3f:92:87:66:92:81:0b:71:90:aa:
                    06:d8:e4:07:ac:8d:21:95:d1:71:fb:15:69:19:1b:
                    61:6f:af:84:f1:4a:23:fa:5f:a4:57:5d:5f:da:0f:
                    05:63:49:d1:7a:f2:4d:e7:fb:d3:7f:e0:7f:89:37:
                    b4:3f:e3:8f:fe:6d:8d:88:65:30:21:e0:9e:81:37:
                    8c:78:d0:99:a3:90:93:f5:93:05:09:a7:47:6c:b2:
                    a0:dd:54:ac:3e:7f:78:25:db:ce:9f:b8:4b:a1:6c:
                    f8:d7:42:38:55:d8:91:df:47:d7:ad:54:32:e4:d5:
                    97:4b:ca:6a:5b:0c:3d:7c:57:e4:33:04:d7:c2:4a:
                    d9:a7:9d:2e:b0:5c:4f:65:9f:12:d4:39:18:f1:f1:
                    5a:ea:3d:8f:46:5b:47:bf:da:9e:18:c7:fb:45:0d:
                    a2:b3:59:60:76:f4:78:12:58:cb:49:c8:5c:12:1a:
                    1c:0a:77:f0:5e:62:53:be:d7:1d:b9:6a:d6:5f:64:
                    9d:ac:f4:1c:49:ad:6c:f1:1d:3c:88:f7:00:08:ac:
                    60:75:c4:e1:4f:6a:07:e0:f5:3f:28:1e:15:f0:8f:
                    de:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:CE:70:40:BB:A9:4E:C0:A0:2B:21:1F:7B:A7:14:2B:7E:A4:76:56
            X509v3 Authority Key Identifier:
                keyid:F7:FF:3E:7D:86:59:E8:AE:9F:6F:4F:31:D3:F2:4F:DB:3C:6D:F5:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:18:88:9d:63:c5:fb:31:5c:6b:c5:a4:01:cc:12:0a:cb:7e:
         67:d7:27:a8:1e:5a:52:48:a7:d1:82:ab:f3:d2:73:f8:f0:57:
         9f:62:7c:f5:3d:ef:ab:29:84:f2:a1:20:40:bc:60:e6:85:0f:
         eb:ee:ed:24:db:42:20:82:ab:b8:b4:db:85:bc:9c:14:8f:37:
         04:0d:cb:c8:a3:f6:f1:18:73:86:ee:ec:09:23:f1:d3:09:7c:
         29:2e:5f:6b:f4:94:7d:56:62:da:25:58:58:af:d1:27:fc:88:
         40:ed:65:c9:8d:01:f5:98:40:40:07:57:e3:aa:82:21:54:f0:
         46:1c:7f:be:5d:39:31:76:db:69:04:35:ef:b8:a0:85:a4:f6:
         25:5b:ac:c3:7c:8c:3c:54:16:f8:79:60:d3:3c:8a:8e:a6:eb:
         75:e7:62:e2:a4:04:1c:18:00:3f:16:bf:7e:d2:29:ec:f8:94:
         dd:cb:d2:8b:8c:b0:c9:e4:f5:e4:cc:45:6c:b7:2a:9d:ab:b8:
         f8:28:32:38:47:15:55:2a:c5:de:35:e2:5f:69:a9:53:6c:2c:
         f9:05:49:b1:a7:fd:fb:57:d7:82:cf:46:1b:e6:1f:29:ea:81:
         91:f7:10:55:8c:de:b0:3c:c2:0b:da:7f:90:57:89:43:45:3b:
         9e:27:8a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:52 2026 by rpki-client