Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
File:                     iNEpp8ePtm0Hc7yZAINX5QfB574.mft (raw, json)
Hash identifier:          gHNAWSPhvVizBkgMWIEGLoHKhlF4mrumlY7An8IQLQU=
Subject key identifier:   F8:A0:8D:CF:BF:81:6C:7A:B9:83:E0:14:6D:28:3A:3E:70:09:1E:9B
Authority key identifier: 88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
Certificate issuer:       /CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Certificate serial:       019E1EA36673B9FF9AB9BBDA3111D2838578
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
Manifest number:          0A38
Signing time:             Wed 13 May 2026 00:01:25 +0000
Manifest this update:     Wed 13 May 2026 00:01:25 +0000
Manifest next update:     Thu 14 May 2026 00:01:25 +0000
Files and hashes:         1: WJ4tfO6kiSMSkG1grDmRdHg6U_4.roa (hash: Eb3yXv0Sg6PPztcKbZR4VGFXGGjS4jiVBjwDazfbRcs=)
                          2: iNEpp8ePtm0Hc7yZAINX5QfB574.crl (hash: 8TAxyLqFD8zYMfdZwHc1xsOZRT0mIdsUgWXoCmeJTCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:66:73:b9:ff:9a:b9:bb:da:31:11:d2:83:85:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d129a7c78fb66d0773bc99008357e507c1e7be
        Validity
            Not Before: May 13 00:01:25 2026 GMT
            Not After : May 14 00:01:25 2026 GMT
        Subject: CN=f8a08dcfbf816c7ab983e0146d283a3e70091e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:92:29:f4:2e:0f:75:45:57:55:26:07:d5:5a:
                    4e:ee:4c:44:bd:0f:54:6b:2e:2f:7d:d4:2f:bf:ca:
                    72:33:1c:52:1c:3f:aa:32:69:51:dd:f6:c1:ed:78:
                    d7:ce:21:4e:43:57:5d:16:96:f4:1d:dd:cc:df:6b:
                    db:ac:d4:21:b2:f9:a8:d7:fb:91:55:33:70:00:b6:
                    d9:9c:d3:0a:b0:5d:5c:f2:9c:dd:88:be:0f:ad:a8:
                    ec:63:18:ef:0d:d2:8e:32:3d:22:85:b9:08:5e:ee:
                    84:56:49:d4:50:20:70:27:17:c6:d0:da:5c:97:28:
                    2f:c3:8f:0e:bf:a5:39:2b:5b:29:e6:e7:55:5a:3a:
                    98:b6:86:f6:a9:71:16:51:da:61:4f:e3:2a:a0:a9:
                    29:72:54:21:df:4c:cc:53:03:9a:43:ea:0a:90:45:
                    38:f3:d9:55:98:bd:f5:96:68:62:4b:99:5a:26:ab:
                    f9:d1:36:87:5c:7a:83:d6:88:63:99:fa:54:ec:ee:
                    37:ef:d6:76:98:ad:43:6d:61:7d:05:cf:d1:5f:70:
                    38:77:3c:ac:57:0b:db:4b:72:e4:62:ed:96:1d:34:
                    cb:b9:d9:9e:c5:bd:ef:51:69:50:87:f2:76:a0:78:
                    f1:d4:75:4b:27:69:69:dd:31:57:6c:12:bc:94:99:
                    46:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A0:8D:CF:BF:81:6C:7A:B9:83:E0:14:6D:28:3A:3E:70:09:1E:9B
            X509v3 Authority Key Identifier:
                keyid:88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:6a:c4:56:25:d8:48:2c:45:17:24:df:9c:31:f4:4e:4d:28:
         f2:b8:0a:0d:f4:50:24:88:50:ca:55:bb:0c:20:61:b2:24:2a:
         9d:26:da:1d:7f:52:61:5b:74:fb:e9:b2:d9:3f:10:fc:12:97:
         73:f6:a1:47:e9:be:22:9a:aa:ea:35:d9:8d:81:4b:02:1b:0a:
         5f:12:4e:87:a3:26:3b:d3:e5:40:15:54:07:34:84:2f:a6:5b:
         0b:4b:50:41:95:09:38:ab:0e:ec:7d:16:d0:dd:25:9d:5f:e1:
         8b:19:4c:f8:94:57:56:0a:09:90:21:ab:1a:9e:1f:0a:b7:0d:
         bd:28:ac:aa:62:c9:b6:f0:63:63:3e:87:b0:58:ad:5e:77:ce:
         29:d4:27:6a:0a:a6:02:1b:c3:90:eb:46:9c:bd:35:35:38:3c:
         0b:3f:7b:85:89:bb:1c:5f:45:13:31:55:22:da:3a:71:5f:0e:
         5a:b8:22:88:c3:28:7a:1e:39:26:1b:ca:e4:81:11:d4:35:35:
         4a:dd:18:7a:8f:33:67:6c:bd:09:cd:af:a8:e2:55:4c:02:4a:
         70:f1:cd:f6:8b:e6:cf:b6:10:05:74:cc:46:61:5c:d1:ec:bc:
         c6:21:5b:31:d2:01:07:84:af:d1:63:b5:07:b0:57:02:24:55:
         a4:5c:e2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:36:30 2026 by rpki-client