Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.mft
File:                     81296PvNv0KF6HvkkO1vzbRqBfs.mft (raw, json)
Hash identifier:          4JrJTLKmGAvGNC1huC5vQrMpwmGUI3lR7RACOtrGw0I=
Subject key identifier:   EA:8C:A7:92:B0:04:CE:5C:2B:EE:45:39:A4:75:64:97:74:60:75:69
Authority key identifier: F3:5D:BD:E8:FB:CD:BF:42:85:E8:7B:E4:90:ED:6F:CD:B4:6A:05:FB
Certificate issuer:       /CN=f35dbde8fbcdbf4285e87be490ed6fcdb46a05fb
Certificate serial:       019E1E35F54631347D870F342CC6CF15C5C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/81296PvNv0KF6HvkkO1vzbRqBfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.mft
Manifest number:          098A
Signing time:             Tue 12 May 2026 22:01:53 +0000
Manifest this update:     Tue 12 May 2026 22:01:53 +0000
Manifest next update:     Wed 13 May 2026 22:01:53 +0000
Files and hashes:         1: 81296PvNv0KF6HvkkO1vzbRqBfs.crl (hash: 0Mdi/2Hp+/CTfga5hMzsSMK73F7BtX0hYQz+k7DnicA=)
                          2: u7PMzJk0LD92U_KXyN6F886wE3w.roa (hash: fw8bxf2gcvv9j/em4IufdaESCHy0Vu0Ro0Bhg2xvHAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/81296PvNv0KF6HvkkO1vzbRqBfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:f5:46:31:34:7d:87:0f:34:2c:c6:cf:15:c5:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f35dbde8fbcdbf4285e87be490ed6fcdb46a05fb
        Validity
            Not Before: May 12 22:01:53 2026 GMT
            Not After : May 13 22:01:53 2026 GMT
        Subject: CN=ea8ca792b004ce5c2bee4539a475649774607569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:53:7e:8d:77:57:f7:81:6c:4d:e3:0c:c0:b5:
                    c8:58:c6:6a:72:95:43:b4:a4:7a:e9:26:2e:23:d2:
                    c4:08:51:e0:6b:69:0e:f2:bc:37:c9:d2:a4:bc:82:
                    30:49:93:ce:9e:41:b4:42:c2:70:15:b9:5a:12:61:
                    2c:e2:38:b7:d6:7a:12:98:82:7b:5a:1c:b6:94:13:
                    a4:a3:9c:af:6a:b2:b4:87:be:15:b1:33:ad:0d:05:
                    6a:3b:46:36:8b:8c:d6:d0:b1:17:83:be:c8:1d:4b:
                    b6:ab:d2:95:e8:87:1e:d9:29:37:0f:58:bf:ee:86:
                    c0:5a:4c:cb:e3:07:95:7e:75:ed:f6:62:a1:1f:b1:
                    12:6a:cc:ad:87:94:e2:c1:28:e5:e0:25:40:71:a2:
                    bd:41:09:c1:30:67:1e:92:91:df:71:76:10:3c:fe:
                    71:5e:e8:0c:d9:37:4b:26:f2:87:77:23:16:fb:6a:
                    e1:9d:a1:59:94:6b:ae:b4:37:77:ea:de:d8:86:a2:
                    38:f0:ed:51:39:7c:20:e1:43:3f:02:c5:96:b1:79:
                    60:34:e8:43:87:cd:5d:95:10:db:44:3e:e5:73:a6:
                    10:68:1f:99:6a:3a:23:10:4c:66:4c:20:c0:eb:19:
                    90:9c:a7:12:f3:4e:52:f0:ec:68:ce:82:a7:64:dc:
                    4e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:8C:A7:92:B0:04:CE:5C:2B:EE:45:39:A4:75:64:97:74:60:75:69
            X509v3 Authority Key Identifier:
                keyid:F3:5D:BD:E8:FB:CD:BF:42:85:E8:7B:E4:90:ED:6F:CD:B4:6A:05:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81296PvNv0KF6HvkkO1vzbRqBfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:8e:9d:43:d1:cb:6a:8b:ee:7e:8c:50:c2:a5:41:5f:9f:24:
         f6:bc:fd:a1:d6:0b:cc:76:45:11:59:da:bf:c6:28:41:61:83:
         50:a1:33:9a:b3:71:9b:33:0f:f6:8b:7e:a3:09:bb:f9:81:a4:
         11:20:13:aa:c9:4a:f6:37:4a:b5:90:b2:23:ae:7f:f2:9c:3f:
         09:0a:39:c6:0c:ef:fe:25:fa:21:46:e4:1a:5f:6e:a8:c1:cc:
         c5:85:b3:9a:82:6d:5b:24:e9:b8:d7:7b:a3:b0:8c:26:b0:c0:
         96:35:f1:7d:9f:f8:7a:4d:68:db:c6:da:e6:68:20:c9:90:e2:
         b3:d1:8d:21:b0:15:d4:90:fa:5f:bb:80:0a:d4:38:be:2a:38:
         bb:b8:57:83:79:97:40:e7:cc:12:24:4a:5c:5b:39:1b:d3:19:
         48:ad:7e:e1:5b:85:e7:e4:23:b4:71:ac:d9:4d:ff:b7:a7:3e:
         fe:34:6a:9e:08:67:6a:61:29:58:d5:2e:52:a4:c2:e8:ed:69:
         66:a5:db:0c:fe:08:f4:6f:3b:e6:d1:eb:0a:08:a5:df:dd:5a:
         01:ae:4f:5d:7a:88:2c:8a:c7:0c:0f:a7:57:8d:d1:a1:7b:e4:
         5f:f3:ec:3e:3c:a1:73:95:d4:77:93:1a:9d:04:ab:eb:eb:9e:
         98:b6:1a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:00:54 2026 by rpki-client