Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
File:                     8HH00RnQt0-2bjen74eNRJ1U3cg.mft (raw, json)
Hash identifier:          fiLD47FAOOYKf/Umbs3xnFekI1ccRxJCKF5W5LrvQDc=
Subject key identifier:   30:45:F4:56:90:BA:11:D0:50:2A:22:EC:CA:74:A0:AE:AB:F2:3C:28
Authority key identifier: F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8
Certificate issuer:       /CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
Certificate serial:       019E1D22FCC8C25D9272D66D5F1770194349
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
Manifest number:          1924
Signing time:             Tue 12 May 2026 17:01:32 +0000
Manifest this update:     Tue 12 May 2026 17:01:32 +0000
Manifest next update:     Wed 13 May 2026 17:01:32 +0000
Files and hashes:         1: 8HH00RnQt0-2bjen74eNRJ1U3cg.crl (hash: RvfMA5OSV5iYVTOD9WYZ6TAWrInfUtppFfD64JoMkqc=)
                          2: JTGa6gnVCnC_0aiY47Op1UuqiXg.roa (hash: Ks2YhvrwgXilKIV5biVYzNEQiDr4tEwP3nbyii0EPRs=)
                          3: Vvb80MYSkguz6_4hy1kdfE1ltwA.roa (hash: sqkJWQ9Xeo1TklNk71WrnovXu2Ri41sp487lWIh/DUU=)
                          4: jFj46lu_4u0ubIJMiYtU4-hn078.roa (hash: G0bQ//8p+NwdW+KNpaWOQBklpF5Yu3De2ZhKpunhcY8=)
                          5: onuyGuJos8Q8ND84yh1u-8KZ0LI.roa (hash: IwftUiRifWGm4SmqfCzNFHRxNAZyFmT+9xw7JojcqMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 17:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:fc:c8:c2:5d:92:72:d6:6d:5f:17:70:19:43:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
        Validity
            Not Before: May 12 17:01:32 2026 GMT
            Not After : May 13 17:01:32 2026 GMT
        Subject: CN=3045f45690ba11d0502a22ecca74a0aeabf23c28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:50:c8:e6:98:05:13:bf:d5:81:e9:0a:9e:98:
                    4e:90:f7:c2:46:02:66:4c:57:4d:60:49:c7:89:6b:
                    a6:31:7e:6a:5c:a5:54:9b:d2:2b:ac:98:83:53:27:
                    20:c2:00:22:6a:5a:bc:d0:68:ff:18:2d:f9:ea:5a:
                    a8:e7:e7:80:c9:48:ca:c6:82:4e:d3:65:9c:29:a8:
                    e2:36:42:f8:eb:50:6c:08:9a:4b:a9:b3:0e:a4:90:
                    21:92:81:17:c6:82:2a:91:2f:b4:2d:0a:9b:05:01:
                    a3:a4:80:fb:bb:56:f2:87:7d:f5:fa:6c:78:32:2a:
                    1a:b6:aa:af:92:19:73:fc:9b:5e:4c:82:73:db:9b:
                    81:af:9a:9b:74:c9:62:09:c3:65:7e:93:7c:b0:02:
                    1d:47:d1:5c:6e:2c:4a:2c:0b:01:db:c7:04:be:92:
                    22:59:77:03:6e:0c:4e:0b:c4:93:c2:2c:55:92:09:
                    c3:7a:59:34:d0:5b:54:60:67:8c:ac:b2:d1:ce:e6:
                    ff:eb:8b:48:12:ef:63:1a:f8:ec:2d:d6:fc:f9:a3:
                    da:9c:60:e9:5f:42:b9:27:56:b8:79:34:c5:91:3e:
                    b3:1c:e5:3e:a8:d3:34:4c:94:ac:ff:08:a8:7a:ab:
                    d3:5c:c2:07:3e:38:8a:81:d9:13:ef:4e:a1:95:52:
                    df:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:45:F4:56:90:BA:11:D0:50:2A:22:EC:CA:74:A0:AE:AB:F2:3C:28
            X509v3 Authority Key Identifier:
                keyid:F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:16:bd:b7:d3:4a:28:1b:a3:46:bc:6e:8b:a2:0a:b0:db:0a:
         4a:6f:ca:4e:6f:b9:c4:13:0e:8f:c6:56:02:7b:7e:d9:8f:02:
         f6:07:ba:c4:a1:01:63:70:78:09:f8:ee:36:f2:1a:05:16:c7:
         79:f8:ce:57:47:d3:16:67:32:9d:93:12:2e:fb:4d:f8:88:1c:
         0b:ee:9f:0a:b3:0c:21:a1:29:32:ab:56:45:2e:6e:6d:fc:b0:
         70:bd:64:24:91:e8:1c:be:c9:5f:bb:de:57:6a:89:a3:b6:1b:
         05:99:85:c5:31:42:56:df:ad:55:1a:00:17:65:5c:ad:21:f9:
         99:8c:e7:17:0a:3d:e1:63:9f:10:02:4e:39:66:36:b2:d4:04:
         c1:2c:fb:e1:38:f6:4b:c4:7c:37:6f:f8:48:6b:c5:ed:a8:7c:
         c4:fd:0f:02:22:70:74:a8:f6:cf:6c:01:a7:f9:01:cf:be:39:
         b5:db:ac:ca:f4:31:6a:bf:1b:55:62:4e:e2:d8:55:64:77:da:
         f2:2d:dd:ac:80:4a:1e:71:75:56:ab:23:dc:ae:90:c1:cc:b2:
         86:37:63:4c:21:37:e5:14:ad:27:90:a6:6e:1f:fa:ae:27:89:
         14:c6:c8:65:8e:5c:8a:83:81:19:20:52:69:50:18:45:e0:68:
         27:39:2e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:08:26 2026 by rpki-client