Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
File:                     f8rYnfG_maNvKQzD7w8ee00CdTM.mft (raw, json)
Hash identifier:          cqFyqN3gHRihjZKERmklKUIlsc/MskvpkVNFzq/BuGc=
Subject key identifier:   A6:2B:91:F0:0A:E5:A0:EA:ED:AE:C6:87:89:0C:89:10:C7:F5:90:A0
Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
Certificate issuer:       /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Certificate serial:       019E1E6CC31771C4AE1A2D24EAD19A723042
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
Manifest number:          18E2
Signing time:             Tue 12 May 2026 23:01:44 +0000
Manifest this update:     Tue 12 May 2026 23:01:44 +0000
Manifest next update:     Wed 13 May 2026 23:01:44 +0000
Files and hashes:         1: 7bMPlZft64LLOc44WXpuvWHCxYI.roa (hash: ovhICafylNUsoU6ggOnBn0FV5ld7QtZ9TQT1cYD5STo=)
                          2: 8ogFWyeBf0vuQT5jhBzXspAf2rE.roa (hash: 8SLnbSVICCGBBETX/lH2EVbhNVK83HBy2quzoB78n6s=)
                          3: f8rYnfG_maNvKQzD7w8ee00CdTM.crl (hash: 0pwXdrHWS5yakbUZDB9DCa75/cv2zMbRukdwq5zbXug=)
                          4: ggggHoWexQd_x29XdkxpzklvtBY.roa (hash: RItnLwTh1P5BCA6CWkDZt99HLo5gT+F8X2TYgXTwevA=)
                          5: wS0apBhtiuVVHFFK87DoMQ3ejQc.roa (hash: ZNtmxsknYilQpUIhLRK+q8WsjLGRXiSlJ1H3sFAAUI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:c3:17:71:c4:ae:1a:2d:24:ea:d1:9a:72:30:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
        Validity
            Not Before: May 12 23:01:44 2026 GMT
            Not After : May 13 23:01:44 2026 GMT
        Subject: CN=a62b91f00ae5a0eaedaec687890c8910c7f590a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b7:39:72:39:eb:64:62:9a:08:db:02:23:87:
                    09:ba:83:de:83:5c:a2:68:0d:d6:dd:e8:7f:5c:19:
                    b8:2a:83:dc:77:f7:70:26:ec:bf:2b:5b:56:3b:df:
                    f2:d4:f8:47:35:0e:a9:54:eb:44:bd:fb:7d:bc:08:
                    6a:19:6d:0a:71:e0:26:65:39:fe:1e:12:a0:3b:9b:
                    cc:58:c5:2d:18:22:16:fc:06:6c:f6:19:68:82:4c:
                    7c:bf:aa:d5:3a:fb:d5:c0:bf:54:4c:c1:59:85:72:
                    2b:17:38:57:95:8d:0f:26:4e:a1:2f:cb:ce:b7:24:
                    4f:7e:4c:a4:f5:db:9c:38:4d:db:8f:36:87:22:9d:
                    63:45:cd:64:0e:6b:aa:24:3d:89:5c:88:9a:3e:52:
                    a0:29:87:01:fa:83:df:79:7f:44:90:46:bd:05:4a:
                    a7:19:11:69:b2:5b:dd:16:a6:69:99:ca:a6:fd:d2:
                    d2:c2:17:23:9d:fe:b8:15:96:40:66:04:4f:6e:f8:
                    41:4e:28:f6:a1:c7:79:28:d0:ce:90:86:ae:d6:96:
                    fd:27:63:e6:c7:fd:ea:26:49:0e:ed:77:ba:bd:df:
                    9c:e3:27:88:a7:56:b3:03:be:29:fd:a8:50:c0:9c:
                    8f:5a:18:a5:e5:41:21:f0:db:54:1e:f9:44:48:a6:
                    75:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:2B:91:F0:0A:E5:A0:EA:ED:AE:C6:87:89:0C:89:10:C7:F5:90:A0
            X509v3 Authority Key Identifier:
                keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:8c:48:03:5c:03:50:68:74:7a:86:65:48:b1:dc:a0:69:fd:
         cd:b1:e0:7c:99:e1:76:3b:84:c7:50:33:52:73:7d:b8:70:4e:
         17:0b:3d:c4:c2:17:f2:2e:a9:56:eb:27:9b:a4:b6:03:51:35:
         fc:0c:ac:fd:b6:f9:02:22:e2:c2:3b:c8:5a:df:69:a4:6f:de:
         55:cd:cd:b0:09:c2:7e:5b:d6:de:ea:e0:1d:56:35:de:cf:a8:
         86:0f:90:b3:bc:cd:70:c0:21:8c:09:80:20:55:1b:d4:52:a4:
         a7:38:62:25:99:f0:c3:43:26:a3:1a:5a:d5:7a:84:2b:62:c7:
         cc:b9:c4:f6:cc:f2:e4:a3:40:d5:90:e8:27:12:34:3f:5e:d6:
         10:e5:e2:ce:20:89:e8:90:ad:c8:06:86:91:32:49:48:71:1b:
         05:36:44:41:8c:3c:1f:42:7e:a3:03:2c:a9:49:66:ad:ad:27:
         65:d8:44:e3:ca:b3:1f:1e:f2:d3:d6:2a:12:55:bd:44:ca:e4:
         ab:e3:62:2f:9c:c7:92:e8:1c:e7:28:27:b2:34:4f:32:ef:bd:
         6a:11:3d:8d:9c:e9:8a:1d:3d:39:19:96:5f:e9:8d:18:cd:83:
         61:28:48:e3:16:81:cf:25:71:c0:ac:3f:52:8c:be:70:72:05:
         c0:59:54:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:35:15 2026 by rpki-client