Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
File:                     8RqaRFV9Rv8tgIiiKIha_wANwqI.mft (raw, json)
Hash identifier:          H3QdUI2glqqypAcASvwRhwYBJTJ+9cjZTEGyK8oxuEQ=
Subject key identifier:   F4:92:FB:86:70:B7:C1:08:95:5B:84:2F:73:29:FF:48:E6:1B:2D:0D
Authority key identifier: F1:1A:9A:44:55:7D:46:FF:2D:80:88:A2:28:88:5A:FF:00:0D:C2:A2
Certificate issuer:       /CN=f11a9a44557d46ff2d8088a228885aff000dc2a2
Certificate serial:       019E1DC761955FD782CCC3F09DB52D90AB6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
Manifest number:          0D52
Signing time:             Tue 12 May 2026 20:01:06 +0000
Manifest this update:     Tue 12 May 2026 20:01:06 +0000
Manifest next update:     Wed 13 May 2026 20:01:06 +0000
Files and hashes:         1: 8RqaRFV9Rv8tgIiiKIha_wANwqI.crl (hash: cBEAFnRxNR40jOvB8I2LIDGtS2w4SUSCWc+uY5gPnT4=)
                          2: z6n92NIP1tvVgc0euBLMnBtSoZk.roa (hash: Jjy7mkaYofsu+k30uI9CDy57tkSDpiXwny9UHpG3aJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:61:95:5f:d7:82:cc:c3:f0:9d:b5:2d:90:ab:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f11a9a44557d46ff2d8088a228885aff000dc2a2
        Validity
            Not Before: May 12 20:01:06 2026 GMT
            Not After : May 13 20:01:06 2026 GMT
        Subject: CN=f492fb8670b7c108955b842f7329ff48e61b2d0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:94:4f:2f:6a:66:76:32:43:d2:94:06:59:0d:
                    fe:7a:36:38:95:38:b4:d9:89:89:27:81:68:c2:5d:
                    7c:3e:f2:41:32:78:a3:1a:5f:a0:6a:13:60:7c:5e:
                    5a:dd:ce:d7:7b:bc:85:77:75:d0:3b:88:42:52:9a:
                    43:e5:e5:69:3d:79:25:0a:da:eb:d9:9b:41:02:4c:
                    fd:44:19:bc:e1:af:bb:ba:bf:61:b4:4f:1c:9a:26:
                    25:b0:8c:45:54:4f:b6:cc:31:27:75:15:af:2e:58:
                    8d:ed:ab:6e:8b:75:12:bb:af:22:68:c5:da:25:6c:
                    6f:1c:d8:0b:51:4b:bf:60:a4:bd:bf:64:b1:38:1c:
                    7a:87:af:0f:42:82:62:b1:03:64:31:fe:71:13:de:
                    76:3d:3d:57:34:26:83:01:af:c6:76:1b:23:a8:14:
                    4f:75:3c:ee:2e:21:e2:2c:3a:5a:74:4a:0f:14:94:
                    40:d8:14:19:25:89:26:50:b1:5f:58:35:c5:ad:a9:
                    7f:7f:9b:87:de:d8:cf:2f:a5:9b:2a:86:e6:68:9d:
                    0d:8d:36:c1:27:39:cb:33:ac:31:31:ff:fd:4c:57:
                    4d:bb:8e:8b:d0:1b:1e:e9:81:4c:2e:c4:27:5e:24:
                    8a:32:bf:7c:8c:09:d3:b8:c4:a0:38:2f:90:02:e0:
                    be:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:92:FB:86:70:B7:C1:08:95:5B:84:2F:73:29:FF:48:E6:1B:2D:0D
            X509v3 Authority Key Identifier:
                keyid:F1:1A:9A:44:55:7D:46:FF:2D:80:88:A2:28:88:5A:FF:00:0D:C2:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:34:0c:cf:bd:a2:70:55:a1:e6:46:04:3b:c6:b6:79:29:a5:
         5e:c7:40:1f:d2:64:f9:d1:e2:7b:73:92:0a:c9:b1:6d:8b:56:
         5f:66:5f:62:98:a0:3e:6f:7f:8b:05:6c:51:6c:f6:6c:16:e6:
         f4:2e:9d:d9:e8:d4:8f:22:7c:74:7f:91:5c:98:67:45:17:77:
         29:8f:3f:32:dd:30:e5:70:4e:56:f4:19:e3:a3:76:05:cf:01:
         12:f3:7a:fa:96:ad:0b:0d:d1:22:e2:75:6f:af:24:9b:73:3d:
         51:73:f6:c9:43:d9:0b:f9:8e:9d:61:75:9d:5a:d8:9e:73:f0:
         61:0c:a2:5d:cb:a7:a2:e3:0e:18:b2:30:fa:84:f2:8a:bd:1b:
         09:5e:cc:28:98:9c:79:de:ef:c3:c5:e4:60:2a:55:a3:a8:96:
         62:4f:c3:b1:29:cf:1a:ab:0e:ba:70:9f:13:2f:d2:a2:5d:2e:
         af:e4:92:eb:c0:a3:1d:87:5a:28:16:6d:6e:7e:8d:6f:a2:b9:
         70:c3:50:c0:a9:8e:fc:91:99:30:94:42:ec:6e:a4:07:59:3b:
         48:31:b0:13:87:4a:8d:74:c2:80:44:c9:f9:dd:27:4a:fa:4d:
         19:dc:f2:57:30:42:4c:85:3d:84:69:91:2a:29:3a:45:68:d9:
         4d:1f:d4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:05:41 2026 by rpki-client