Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft
File:                     8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft (raw, json)
Hash identifier:          QWEIUB/Kvv39QViAfT1esY3Pd48J3IORLjIfZpcE/CY=
Subject key identifier:   FE:A2:7C:E8:49:2B:09:7E:70:06:65:66:97:B6:76:97:01:DB:7F:8E
Authority key identifier: F0:59:4E:7A:31:DB:79:37:FA:B5:2F:CC:38:90:59:D3:45:1F:23:66
Certificate issuer:       /CN=f0594e7a31db7937fab52fcc389059d3451f2366
Certificate serial:       019E1F10F8BAE345AB5473EE4F7CC6BE75B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8FlOejHbeTf6tS_MOJBZ00UfI2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft
Manifest number:          023F
Signing time:             Wed 13 May 2026 02:01:06 +0000
Manifest this update:     Wed 13 May 2026 02:01:06 +0000
Manifest next update:     Thu 14 May 2026 02:01:06 +0000
Files and hashes:         1: 8FlOejHbeTf6tS_MOJBZ00UfI2Y.crl (hash: PaGPRCD7mgRr9hWXLnuxYLwt8d8Ih1gZ/u4wrRkSxGI=)
                          2: FQxNg7AnkMBIxSPt-ywRlwPzZU0.roa (hash: mDMc0kRW89SXaN2WszngnBY0Vg6QXvcafmxW2mS8Fw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8FlOejHbeTf6tS_MOJBZ00UfI2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:f8:ba:e3:45:ab:54:73:ee:4f:7c:c6:be:75:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0594e7a31db7937fab52fcc389059d3451f2366
        Validity
            Not Before: May 13 02:01:06 2026 GMT
            Not After : May 14 02:01:06 2026 GMT
        Subject: CN=fea27ce8492b097e7006656697b6769701db7f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f5:20:44:c3:4b:ce:ef:6b:3b:df:29:35:8a:
                    83:fe:61:c8:32:e8:9c:f3:c5:37:b0:74:08:49:b3:
                    04:24:41:ab:42:ad:57:be:d2:52:26:4d:d1:1a:24:
                    a4:3a:12:31:a9:45:18:19:5a:9a:97:5b:9e:a0:df:
                    01:d7:b8:fe:99:9c:ff:3c:2c:91:86:3b:4e:bd:86:
                    1e:c4:1a:41:be:ca:b3:bc:6b:bb:58:2f:03:76:a7:
                    be:41:a7:66:2c:c9:2c:ee:77:68:15:c1:a9:89:c1:
                    91:40:90:e4:49:24:33:7c:4a:6d:f4:e7:b4:b4:5e:
                    0b:71:74:31:0b:02:ab:ee:f2:26:78:d3:ee:c8:5c:
                    32:ce:33:c7:07:d8:d3:c6:c2:11:1b:75:83:e6:99:
                    88:84:12:b0:7d:97:5d:f5:f6:02:2f:e4:2a:e9:6e:
                    32:29:ea:c6:5a:86:22:96:a8:bd:2d:1b:00:56:a0:
                    97:dd:86:7e:8e:a0:58:fa:b7:72:aa:fa:bb:ae:08:
                    56:43:4d:3c:d6:cd:04:57:81:26:d4:c1:39:01:f4:
                    ff:23:1a:8e:fd:2c:29:69:fb:79:d5:97:91:bb:fe:
                    60:eb:f6:1d:bf:aa:fb:e4:6d:e4:95:6a:29:21:e0:
                    c1:9e:61:13:6a:97:a6:83:76:67:36:ef:9c:54:35:
                    aa:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A2:7C:E8:49:2B:09:7E:70:06:65:66:97:B6:76:97:01:DB:7F:8E
            X509v3 Authority Key Identifier:
                keyid:F0:59:4E:7A:31:DB:79:37:FA:B5:2F:CC:38:90:59:D3:45:1F:23:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FlOejHbeTf6tS_MOJBZ00UfI2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:65:2c:7e:d2:db:ca:46:64:70:e0:24:1f:18:ff:54:fc:29:
         29:3e:b1:a3:e7:9c:b2:fb:90:96:63:8d:bb:e9:46:ee:0a:11:
         ff:ea:91:5a:26:26:e2:85:db:0b:bd:bc:a5:a6:14:7d:7f:20:
         4c:0d:d2:c8:d8:eb:da:86:42:40:1e:f6:31:ce:4d:af:d8:b7:
         8a:8d:97:04:0d:51:1a:4a:64:a4:36:7d:cc:f1:b1:21:10:4b:
         0e:e0:30:98:1f:93:2e:f9:88:a2:86:46:eb:8c:75:6d:bb:47:
         12:7b:44:77:36:ad:7d:a8:47:8b:88:eb:c4:fd:26:be:89:10:
         28:21:22:d6:6c:e4:83:b7:42:e0:6d:cc:67:e6:0d:a4:e2:f0:
         98:c0:f5:f1:36:89:f2:ed:b3:a9:cd:bf:5c:26:d7:01:6c:fd:
         51:2e:48:5e:17:06:f9:f9:59:8e:a8:23:da:c8:de:ec:d3:84:
         db:1f:4e:bf:cf:4b:a2:70:54:ba:3d:da:92:a9:a3:57:9f:db:
         b3:69:6f:e3:2e:b7:94:fe:b2:a8:47:3b:68:33:a4:08:67:f6:
         c6:72:d9:ff:e2:1d:4b:1c:c0:7a:f2:4c:c7:bf:01:9e:b5:29:
         f1:d7:73:70:f5:d9:ec:17:62:62:ae:46:fb:b6:f6:15:1a:6a:
         12:21:37:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:14:15 2026 by rpki-client