Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
File:                     8C4yJOPjKSgZJijSZIfVAPJwd2U.mft (raw, json)
Hash identifier:          9ojIpT9X63XtmA7twIitCwY4J48dSeJfvfFkbYMN6KI=
Subject key identifier:   CB:5F:57:03:E4:B0:F7:BB:36:A7:EC:F4:A2:43:04:9C:4A:D2:AE:7F
Authority key identifier: F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
Certificate issuer:       /CN=f02e3224e3e32928192628d26487d500f2707765
Certificate serial:       019E1DC70C6B9AD58D7BFD7DE107701722CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
Manifest number:          1909
Signing time:             Tue 12 May 2026 20:00:44 +0000
Manifest this update:     Tue 12 May 2026 20:00:44 +0000
Manifest next update:     Wed 13 May 2026 20:00:44 +0000
Files and hashes:         1: 8C4yJOPjKSgZJijSZIfVAPJwd2U.crl (hash: cPF0V//DN4bc7Kn4gnVlBSOvNNOzSwM6sa1sqyISDr0=)
                          2: Rm3DWdCGv6N3AGtlgwwUaBhNvo8.roa (hash: mKMA8v5enBshub8zpH+FWCvpU25kENVUShbbazleOWE=)
                          3: U_rat5lH-1OBTjZW3Kpv35l2bnY.roa (hash: RWS/4jTw+B9QckGKnUwmlAnGx+MDkdaAdkO4bYQ9r8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:0c:6b:9a:d5:8d:7b:fd:7d:e1:07:70:17:22:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f02e3224e3e32928192628d26487d500f2707765
        Validity
            Not Before: May 12 20:00:44 2026 GMT
            Not After : May 13 20:00:44 2026 GMT
        Subject: CN=cb5f5703e4b0f7bb36a7ecf4a243049c4ad2ae7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8f:ef:f2:c2:32:fe:cc:51:76:51:cc:97:7c:
                    7c:31:dc:d3:75:41:33:a8:a2:8d:18:94:a4:16:f5:
                    f7:5a:3d:1e:91:c7:94:92:c9:e0:a7:b6:ee:0b:55:
                    d8:f1:ba:4d:f5:1f:5a:c3:2d:8a:75:7f:78:f0:3d:
                    7c:96:0a:af:19:30:ec:4e:5f:33:92:9c:ff:13:46:
                    f9:6a:73:8c:e9:5d:a2:99:86:49:ae:1e:47:79:be:
                    b0:6a:31:a3:0c:d5:65:88:25:50:30:3f:f6:59:a2:
                    65:7c:07:7c:ad:31:0c:25:9c:a2:bb:16:d2:04:3a:
                    6a:57:32:04:47:15:fe:6e:ec:c8:ef:f1:69:be:14:
                    1c:b4:c3:81:99:2f:69:36:32:21:ed:21:10:4d:43:
                    17:56:dc:06:9f:0e:ac:b9:cb:c7:a2:b1:51:2e:f1:
                    8b:e1:11:d5:d2:4d:8b:2f:34:b3:26:25:29:78:cb:
                    08:f8:09:5c:b3:88:33:ea:f4:55:8f:7b:e6:21:2c:
                    82:38:54:02:69:00:44:6f:00:65:6e:9e:85:f4:d2:
                    b7:81:9a:52:a1:e6:04:79:17:01:70:01:f7:e9:cb:
                    e2:a4:39:97:40:8f:04:57:f6:e4:bc:94:07:b2:c4:
                    13:88:e0:c2:0c:8f:d0:3e:c4:5a:a1:84:fb:5e:3b:
                    c3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:5F:57:03:E4:B0:F7:BB:36:A7:EC:F4:A2:43:04:9C:4A:D2:AE:7F
            X509v3 Authority Key Identifier:
                keyid:F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:6c:87:dd:aa:4d:c0:4f:4a:4c:4c:42:40:13:1a:50:bb:da:
         6d:21:a7:52:d2:07:2e:67:77:74:f7:8b:59:f7:da:1b:1e:b2:
         c5:44:1f:71:f5:05:66:8c:53:eb:9c:39:a0:44:f9:ba:d9:a7:
         ef:d9:68:25:25:a8:fd:84:cc:28:80:97:39:e1:71:28:bf:78:
         03:de:24:52:b2:0b:66:83:5c:12:f0:a2:96:74:81:47:00:82:
         33:a8:d0:a2:97:59:cf:a1:bc:f8:5d:66:8b:2f:7b:20:9e:f2:
         c1:a0:30:1d:38:2e:8d:46:43:e2:08:f4:b3:ce:24:81:d0:4f:
         17:c4:77:55:7d:80:8d:ad:10:af:a0:91:61:8c:4b:71:ff:bb:
         2d:df:51:f1:6b:b5:3c:9c:2f:0f:95:fa:37:c4:cd:f6:32:7a:
         50:cb:1e:ab:35:80:76:30:56:dd:9a:ac:cf:84:fb:18:98:de:
         49:f5:dc:1c:b6:ee:60:b7:79:e4:5d:04:52:31:ef:98:fd:29:
         35:3b:8f:82:3d:12:2a:df:ae:4e:dd:6f:7b:69:b6:c3:85:43:
         22:de:13:72:c5:d9:1e:cb:9f:cb:e9:93:f5:14:b8:9f:29:c0:
         0e:04:51:fc:70:03:72:f8:62:2b:f8:2d:66:30:85:0d:32:0e:
         a5:e8:ed:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:18:51 2026 by rpki-client