Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
File:                     8nmj6FTwEBXp0OA-idgHDMnrz4k.mft (raw, json)
Hash identifier:          7HXdiN7TyqTSqcQSslyRXIzksrizEkzY64Bc8194cCM=
Subject key identifier:   70:9B:54:F6:56:2D:C9:5B:16:D5:E9:9B:39:CB:25:1E:E4:53:92:62
Authority key identifier: F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
Certificate issuer:       /CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Certificate serial:       019E1CEB6D23C7634EB3320FADE29B75C295
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
Manifest number:          1905
Signing time:             Tue 12 May 2026 16:00:51 +0000
Manifest this update:     Tue 12 May 2026 16:00:51 +0000
Manifest next update:     Wed 13 May 2026 16:00:51 +0000
Files and hashes:         1: 8nmj6FTwEBXp0OA-idgHDMnrz4k.crl (hash: SsGAw8ygrRPgX4Z7uJ9FUejjR8ukEoAVLSX0fou+2kw=)
                          2: gItw0vdqzg90tFpmlTqKM5Onxow.roa (hash: EIklKyUdyJ9hgAFeB37ndmxzyfrlZyuSiNL83eIkim4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 16:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:6d:23:c7:63:4e:b3:32:0f:ad:e2:9b:75:c2:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
        Validity
            Not Before: May 12 16:00:51 2026 GMT
            Not After : May 13 16:00:51 2026 GMT
        Subject: CN=709b54f6562dc95b16d5e99b39cb251ee4539262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:06:e6:bd:43:44:60:45:4e:79:37:9b:e3:d9:
                    53:58:cc:86:af:38:e5:92:a0:3f:55:37:4d:65:c4:
                    56:a8:70:0c:8a:50:6f:33:39:2f:86:80:17:97:ba:
                    f7:14:5c:b8:9d:5e:56:47:7c:d0:1b:3f:1e:8c:e7:
                    aa:d5:0e:4c:3e:f4:20:c4:23:55:02:65:fb:22:83:
                    cb:66:90:66:58:c0:49:72:10:f9:3c:07:5d:7d:f3:
                    d4:88:ef:dc:ae:06:62:04:c9:63:bf:3f:52:e2:40:
                    6a:41:d9:61:83:fb:2d:d1:5f:a0:02:b9:f6:0a:3b:
                    aa:ed:90:0e:0c:5b:31:e7:0a:be:21:06:f8:c9:23:
                    a2:01:be:94:17:47:cb:c7:f0:b9:7f:24:ca:f7:56:
                    0e:4d:9c:62:d7:78:ac:64:c4:31:45:0e:ef:cc:a9:
                    61:ca:4a:bd:33:fc:d3:26:04:6e:db:36:05:81:03:
                    da:5c:55:dc:c7:10:4c:2c:80:49:a9:7a:ff:82:ae:
                    7f:fd:46:32:2e:ab:03:bc:1d:e1:4a:3b:29:5c:13:
                    42:e6:34:11:eb:d4:a8:7f:64:39:ca:31:7e:3e:6d:
                    b9:8c:75:27:b6:4d:33:80:5e:4d:35:d9:1c:4e:b7:
                    6f:5e:d4:2a:50:aa:e6:cb:30:95:35:4c:92:dc:58:
                    98:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:9B:54:F6:56:2D:C9:5B:16:D5:E9:9B:39:CB:25:1E:E4:53:92:62
            X509v3 Authority Key Identifier:
                keyid:F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:09:46:f9:c2:97:a8:79:fd:5a:5b:d3:cb:2e:ba:16:94:66:
         11:37:81:a8:d7:9d:a7:51:00:da:97:11:e9:31:96:ec:34:a9:
         34:24:b8:ac:61:21:6f:43:3b:07:a3:4e:94:0c:05:36:7e:c9:
         62:dc:19:8a:41:75:f0:08:ef:5c:a9:a5:ac:f4:ea:32:20:9e:
         47:eb:0f:46:4c:ce:a8:5e:b2:92:a7:ad:ff:f9:2f:ab:c9:32:
         58:fb:1d:1b:c0:32:d4:50:ab:50:6c:a4:f5:a6:04:b7:4d:d1:
         c5:f4:bd:8a:8b:f4:af:ae:ad:dd:22:78:85:f6:ad:df:59:c0:
         b4:5b:94:85:29:cd:b1:28:ed:2d:10:df:ff:50:39:4b:da:8d:
         bc:d7:de:ce:57:f8:6d:02:07:19:8d:2a:5f:03:c5:3a:49:5f:
         86:0c:87:7f:13:22:7a:83:d8:75:d0:69:c7:f0:6d:16:06:c9:
         3f:81:b3:6e:0a:23:3b:1d:f0:c9:95:bd:d7:c4:30:b1:37:1b:
         55:c8:c9:e9:7b:f3:84:e0:8e:6d:e6:73:a1:88:95:08:ef:de:
         07:5b:91:3a:3e:c7:aa:ba:78:f2:37:81:cc:3b:3c:5d:c3:af:
         16:c2:31:20:b6:bf:87:88:82:01:17:ff:70:ea:15:5a:e4:16:
         29:ae:a7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:53:40 2026 by rpki-client