Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft
File:                     8WBdCa0sbEN7bC-Gg___viF0_mw.mft (raw, json)
Hash identifier:          EgeoDBukYtMgkajhV+uLsi57sNQCK8DKWSc9ccNIAlE=
Subject key identifier:   80:E9:F0:EB:C8:57:84:0D:44:1D:45:73:0C:1F:32:5E:62:F0:C6:5C
Authority key identifier: F1:60:5D:09:AD:2C:6C:43:7B:6C:2F:86:83:FF:FF:BE:21:74:FE:6C
Certificate issuer:       /CN=f1605d09ad2c6c437b6c2f8683ffffbe2174fe6c
Certificate serial:       019E20C8C9A6E95868A62D9D03B74B4A5A54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft
Manifest number:          1272
Signing time:             Wed 13 May 2026 10:01:30 +0000
Manifest this update:     Wed 13 May 2026 10:01:30 +0000
Manifest next update:     Thu 14 May 2026 10:01:30 +0000
Files and hashes:         1: 8WBdCa0sbEN7bC-Gg___viF0_mw.crl (hash: vebeK5rDC9ByyWh5s4rybN77zFx7rcG5BWHmF8oLc+0=)
                          2: D8FKo30pQrTU9mJYfYQg9avocxA.roa (hash: eTwcKoj9qVJBPhmvJcocW9ihZIrUpzbDq33DB90KBWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:c8:c9:a6:e9:58:68:a6:2d:9d:03:b7:4b:4a:5a:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1605d09ad2c6c437b6c2f8683ffffbe2174fe6c
        Validity
            Not Before: May 13 10:01:30 2026 GMT
            Not After : May 14 10:01:30 2026 GMT
        Subject: CN=80e9f0ebc857840d441d45730c1f325e62f0c65c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bc:d8:b1:73:e1:90:45:10:dc:f0:d4:27:f7:
                    6c:7f:ff:31:15:63:30:0b:9c:30:32:28:b8:b4:c1:
                    df:68:d4:15:52:7b:5d:63:56:aa:e3:2d:22:e7:b4:
                    df:43:6b:d9:da:1e:d8:2e:96:af:27:3c:d2:b6:2d:
                    0f:37:99:86:b9:cd:9a:04:2f:20:de:b3:4d:51:2c:
                    4f:24:fc:fb:b9:8e:76:36:58:2b:6f:f7:c8:dc:e9:
                    1e:04:26:82:60:f1:aa:84:17:1b:1b:60:a8:7e:bf:
                    91:c0:1d:08:77:23:6d:8f:56:a0:83:b6:40:a1:e4:
                    8b:46:2f:12:c0:83:4b:1e:f7:bf:d4:3c:76:25:37:
                    1d:ec:66:b9:70:75:65:db:46:a6:3d:ab:11:52:6f:
                    29:9d:97:bc:24:1b:90:9b:c0:35:cb:66:6f:66:47:
                    48:ec:57:83:09:7f:ca:20:5a:03:dd:29:30:05:16:
                    bc:90:7a:dd:f4:b5:2c:02:5c:3b:02:77:31:9a:f2:
                    98:19:63:89:85:c2:ff:0c:39:25:df:e0:ad:84:0e:
                    cb:c2:80:45:81:d5:09:52:33:e9:31:e9:3d:98:3d:
                    ab:c3:73:05:6a:cb:61:94:2d:49:ab:f0:82:5a:e1:
                    f2:97:ee:0c:40:63:76:c7:b9:0f:3d:c9:30:cd:fd:
                    9d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E9:F0:EB:C8:57:84:0D:44:1D:45:73:0C:1F:32:5E:62:F0:C6:5C
            X509v3 Authority Key Identifier:
                keyid:F1:60:5D:09:AD:2C:6C:43:7B:6C:2F:86:83:FF:FF:BE:21:74:FE:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:19:ea:cc:83:bc:c2:d0:0e:3c:a9:32:6c:dc:dd:ae:8e:b9:
         45:6b:8c:57:c0:31:85:b0:9c:1e:f7:a5:ac:d9:f5:d3:55:74:
         63:e5:54:a2:2d:b5:c9:5b:2d:31:ec:31:4b:49:65:5b:06:1b:
         96:e0:74:09:d6:39:12:21:f7:ec:b3:40:36:94:65:f3:74:fc:
         0d:6c:38:84:59:e6:bf:46:a2:11:26:76:91:ae:82:8f:e2:19:
         0f:b8:b2:34:92:35:33:f3:c9:9f:f4:1d:6b:3f:57:51:08:ea:
         70:54:73:88:7c:c1:ce:f3:52:7a:04:32:8c:3a:65:37:11:f4:
         82:dc:ac:f8:43:f2:7f:0a:f1:e8:b6:33:04:28:8a:64:b9:f7:
         7b:ab:9d:13:68:d9:05:1b:24:ef:9f:80:f3:2b:1b:d9:4c:63:
         ec:d1:97:3c:6d:bc:81:31:3b:32:fa:b2:99:63:13:65:9c:56:
         f9:4a:a4:40:ab:e5:2e:97:89:b0:ee:c8:33:12:e1:bf:76:b8:
         31:be:fc:ce:f0:39:3f:9a:42:ab:ff:2e:dd:73:42:9a:9a:55:
         b6:f4:f4:51:bd:63:ee:ce:91:a8:2d:02:19:15:ef:3c:a8:e9:
         90:04:b9:4c:01:9b:8f:b8:cb:48:36:a6:fd:dd:09:23:2a:cc:
         e3:e7:7b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:12:48 2026 by rpki-client