Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
File:                     8bv5vuUx897i0Du_Tmnvgu7bma8.mft (raw, json)
Hash identifier:          VYSCXodo8TGJIHnf4ZCdO4L3IV/PU7pzVymbOarjvck=
Subject key identifier:   6F:0A:20:56:DB:E6:9E:22:BD:04:DD:62:12:D6:70:9D:3D:D4:C7:47
Authority key identifier: F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF
Certificate issuer:       /CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
Certificate serial:       019E1D22636D1C68304EC30AA3A345727406
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
Manifest number:          14B0
Signing time:             Tue 12 May 2026 17:00:53 +0000
Manifest this update:     Tue 12 May 2026 17:00:53 +0000
Manifest next update:     Wed 13 May 2026 17:00:53 +0000
Files and hashes:         1: 8bv5vuUx897i0Du_Tmnvgu7bma8.crl (hash: +oDbfbbYSG+xLsAZgJPXWqbdCBNiMjUc/22d+gHqxzU=)
                          2: OYgre_-TZIfJxOW5CqDrgpwgkMo.roa (hash: OBphoVWe1wpCXSnuX5Vie+bHC5Q80K+aLt8j/e5pkXQ=)
                          3: PQaM9i-ZFvgM-odibb8AZoCwaLw.roa (hash: 6qm8ZSVZvMA/kQTFFqEROzq6H8nPq+g1vFjlYN9Vl3Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 17:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:63:6d:1c:68:30:4e:c3:0a:a3:a3:45:72:74:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
        Validity
            Not Before: May 12 17:00:53 2026 GMT
            Not After : May 13 17:00:53 2026 GMT
        Subject: CN=6f0a2056dbe69e22bd04dd6212d6709d3dd4c747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:58:c3:2e:63:49:6a:41:10:b5:7e:e2:db:07:
                    24:63:ac:4c:e0:8e:9e:3f:45:24:ac:db:0f:55:6e:
                    ab:ab:14:ac:b8:3c:15:e4:03:0e:8c:a1:2f:90:7e:
                    6d:03:8f:2c:59:59:f0:d6:46:a2:0c:7f:22:24:4c:
                    12:06:0c:44:ba:f2:3d:1a:25:f0:2a:25:bc:75:60:
                    37:11:67:99:1a:ee:9d:c2:3e:c1:f3:33:1c:39:03:
                    de:1b:83:77:01:a9:0c:83:2e:01:1a:d1:f2:31:98:
                    90:dd:28:72:f1:6d:4a:59:53:64:0f:0f:e0:76:41:
                    33:57:bb:75:9a:93:12:5a:d3:b2:56:35:a7:4f:e2:
                    54:51:23:72:fc:4c:d0:40:be:20:ad:39:87:34:34:
                    0d:a7:ca:cf:24:b7:29:25:ac:24:48:4f:8a:79:8d:
                    79:6e:05:30:9c:45:bb:dc:83:8b:42:cd:49:36:64:
                    35:a7:af:a8:8c:9c:42:5d:db:e1:aa:f9:d4:32:9b:
                    db:de:fa:b5:69:89:e9:5b:99:8b:72:33:30:ab:be:
                    db:2a:0b:53:fc:65:37:9c:a2:85:b4:76:23:ad:85:
                    6a:bf:fa:2e:bd:ea:ad:fd:21:eb:72:1e:e3:97:99:
                    7a:6b:8e:11:96:54:b6:a7:8f:4d:ce:8a:bc:88:97:
                    5a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0A:20:56:DB:E6:9E:22:BD:04:DD:62:12:D6:70:9D:3D:D4:C7:47
            X509v3 Authority Key Identifier:
                keyid:F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:9b:1b:25:23:70:32:4d:9a:0e:ec:c0:11:b8:8b:f0:d1:f3:
         02:a4:16:47:26:60:f6:45:e7:8a:fe:e8:c8:68:ad:58:ed:0b:
         01:c6:40:12:1b:e8:34:aa:9c:a9:f5:ea:15:af:50:ea:be:3a:
         5d:4a:db:c5:c1:80:a2:e3:84:ad:07:c0:2a:6d:cc:e3:53:0e:
         40:e9:07:98:b0:df:4a:86:1f:a6:41:da:d0:f8:3a:27:8d:bf:
         87:5e:af:a4:58:0f:ab:18:32:78:32:be:bb:03:28:4c:86:3d:
         f7:6b:2a:07:b4:cc:16:16:9b:ab:5f:7e:40:13:53:d6:af:a1:
         6d:70:d1:b6:9c:59:06:d1:d7:f3:55:1a:30:f1:da:88:d7:05:
         3b:b6:36:df:5b:2f:ff:27:5d:62:34:b4:ef:6e:e8:03:74:7a:
         f3:fe:90:9f:3f:d8:e5:32:4f:86:cc:fe:b2:07:a4:30:73:4c:
         8e:7a:a6:08:ad:74:7a:d5:a6:b2:cb:cd:4c:51:62:cf:4c:b7:
         16:28:e7:ca:39:ce:08:36:59:94:ea:65:12:4f:40:a2:12:50:
         03:ec:d1:7c:0f:91:4a:5a:77:b4:f2:51:61:07:27:20:d2:ec:
         a4:02:59:00:70:ef:09:4a:b5:08:d3:c0:46:be:16:dc:a8:36:
         a0:28:39:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:33:34 2026 by rpki-client