Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
File:                     jP3v7O1c7o8abJN5jlo0tiH23As.mft (raw, json)
Hash identifier:          ML50WMbVpz7M2oeT4CYQIQFp39ePVjPpfrEvOXuzKBY=
Subject key identifier:   6A:8F:11:99:78:D9:8E:30:62:09:06:EF:96:6B:FC:87:3F:69:C6:17
Authority key identifier: 8C:FD:EF:EC:ED:5C:EE:8F:1A:6C:93:79:8E:5A:34:B6:21:F6:DC:0B
Certificate issuer:       /CN=8cfdefeced5cee8f1a6c93798e5a34b621f6dc0b
Certificate serial:       019E1DC7B6892BD3B37A748D460647CE0FAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
Manifest number:          068D
Signing time:             Tue 12 May 2026 20:01:28 +0000
Manifest this update:     Tue 12 May 2026 20:01:28 +0000
Manifest next update:     Wed 13 May 2026 20:01:28 +0000
Files and hashes:         1: Ev84dzr99BkEprLlsKv-9iCyhPY.asa (hash: A4Hylllyzq6B6OAjJOwRb/t7tAR+6RCdPmT8bW5GCjg=)
                          2: bILTlSPGWMGMY_1Qfmo1vE-bgOc.roa (hash: t48mqB2NaYieA0CKr3J9wx4iPJRQZqgCszx9KbMiWRM=)
                          3: jP3v7O1c7o8abJN5jlo0tiH23As.crl (hash: jbTCS5rX0XrlhBClhFSnke9o52DVUIthmsUtoH98juw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:b6:89:2b:d3:b3:7a:74:8d:46:06:47:ce:0f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cfdefeced5cee8f1a6c93798e5a34b621f6dc0b
        Validity
            Not Before: May 12 20:01:28 2026 GMT
            Not After : May 13 20:01:28 2026 GMT
        Subject: CN=6a8f119978d98e30620906ef966bfc873f69c617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c1:23:31:f4:a6:82:c0:bf:55:46:a8:a5:60:
                    2a:f6:27:45:f9:0b:5e:a9:a8:00:50:00:f9:1d:06:
                    19:41:bd:6d:e4:3e:41:51:39:4b:83:cf:85:fc:58:
                    3c:ca:33:14:f2:7f:99:88:76:12:63:a5:0a:79:ac:
                    16:a2:bd:69:03:64:37:9f:3c:10:3d:8e:0c:12:d3:
                    38:2c:82:27:c8:5b:2b:4d:ed:9f:46:1c:c1:c9:82:
                    ea:55:fc:2d:d3:8f:e2:f9:95:6e:fd:0e:cd:85:b2:
                    af:5a:c6:d2:88:12:39:5e:77:a5:23:ff:73:1e:08:
                    ab:3c:dc:16:fa:71:d1:59:56:9f:91:61:b3:dd:b9:
                    44:d8:0e:bc:1d:a4:6c:e5:03:c4:1e:fe:23:eb:9c:
                    04:9b:13:b8:2b:9e:1d:ad:e1:ac:cf:86:e6:3d:2b:
                    b4:9a:0c:e7:11:b5:c1:4b:83:85:2d:9e:b3:f1:ae:
                    2b:c0:e2:f5:72:8f:e1:e6:e1:48:68:de:02:df:04:
                    00:70:08:f9:ab:30:e6:04:d5:34:01:db:cc:99:ac:
                    9a:e7:af:41:0f:10:62:a2:8d:f0:33:eb:48:3a:d4:
                    49:b8:a5:45:77:8c:e5:99:4d:88:af:4d:fb:aa:0c:
                    05:77:2b:23:88:d2:59:89:47:42:02:eb:63:2e:e9:
                    25:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:8F:11:99:78:D9:8E:30:62:09:06:EF:96:6B:FC:87:3F:69:C6:17
            X509v3 Authority Key Identifier:
                keyid:8C:FD:EF:EC:ED:5C:EE:8F:1A:6C:93:79:8E:5A:34:B6:21:F6:DC:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:10:a3:7a:ca:4c:5c:c9:62:20:4b:3c:1e:10:d8:d2:f5:e3:
         58:e8:f4:8a:f0:8e:b3:b5:39:28:d0:2c:a4:24:a0:fd:5c:ab:
         d9:96:45:35:3c:8f:3e:9a:05:93:79:d2:e1:31:37:b0:0f:66:
         c2:19:0e:c0:7d:72:8d:05:fd:1a:a4:13:66:78:21:cf:89:d5:
         64:dc:13:f8:6a:0d:1a:4a:e8:cc:c4:34:8e:f0:80:41:c0:a2:
         d5:03:ce:c4:58:19:91:09:3f:63:ae:89:fa:88:6a:48:c2:d3:
         7a:30:88:6f:6a:5d:59:62:06:d0:a5:33:c8:e2:7f:4e:26:fe:
         a4:3c:a7:57:71:45:91:a9:e9:cd:70:70:80:1e:85:be:31:5e:
         83:bd:9a:7c:4b:bc:9d:6d:f1:5f:d3:a8:b9:f8:f6:00:e0:12:
         24:97:fc:6d:36:44:2b:9a:cf:ca:c2:8f:4f:d4:8c:27:dc:ce:
         f6:70:a8:34:36:81:41:8a:12:eb:be:3f:22:99:d9:31:ce:85:
         c7:46:09:21:35:ee:7f:d0:c7:53:ff:bb:66:69:9b:52:65:db:
         3a:01:42:1e:96:18:e3:a9:89:37:e4:ab:90:48:10:bb:08:63:
         a6:6a:a8:14:e8:35:f0:98:91:11:3b:ab:72:0b:92:50:28:9a:
         6b:3c:bf:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:02:23 2026 by rpki-client