Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
File:                     8x6drOnnIGMJy2yeW4YX6YWd3IU.mft (raw, json)
Hash identifier:          dXFj29RRMRbX+hZ9/R5Qa7Ls17OJRmHBQzYaj07krfc=
Subject key identifier:   02:3C:F6:14:58:CA:4D:17:39:6A:56:23:78:8D:3C:42:B6:EB:03:E3
Authority key identifier: F3:1E:9D:AC:E9:E7:20:63:09:CB:6C:9E:5B:86:17:E9:85:9D:DC:85
Certificate issuer:       /CN=f31e9dace9e7206309cb6c9e5b8617e9859ddc85
Certificate serial:       019E1EA3D785FB8FB7C96C5766BEF52DEBAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
Manifest number:          03C7
Signing time:             Wed 13 May 2026 00:01:54 +0000
Manifest this update:     Wed 13 May 2026 00:01:54 +0000
Manifest next update:     Thu 14 May 2026 00:01:54 +0000
Files and hashes:         1: 8x6drOnnIGMJy2yeW4YX6YWd3IU.crl (hash: If/I0r2tE03zSrz2Pm2QlIZKhwMd9RKhUghVLB24xiQ=)
                          2: qVZeyuIJgAH_RvLNP7X_MFn3Jws.roa (hash: e8ltV6uZOZ7loOT5ePx9DkMlZ9YWrSrqO4NGgl5qtP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:d7:85:fb:8f:b7:c9:6c:57:66:be:f5:2d:eb:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f31e9dace9e7206309cb6c9e5b8617e9859ddc85
        Validity
            Not Before: May 13 00:01:54 2026 GMT
            Not After : May 14 00:01:54 2026 GMT
        Subject: CN=023cf61458ca4d17396a5623788d3c42b6eb03e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:53:f7:b6:ba:96:9b:da:62:01:75:e2:8b:73:
                    88:81:23:50:5c:b8:07:d2:cf:19:b7:85:db:44:64:
                    f8:d0:31:de:73:35:d5:23:e0:f1:ce:2a:3e:7b:6c:
                    a9:4c:56:bc:fd:d1:10:23:b5:d5:cd:36:56:e7:42:
                    36:fd:ed:15:00:36:1a:8b:cc:b0:27:91:b7:6c:64:
                    57:94:78:b9:4c:b5:bb:a4:ac:9a:1a:be:25:39:2a:
                    6b:5d:56:48:40:ac:91:28:a5:4e:8d:d4:10:85:14:
                    4d:bf:52:f6:fb:b4:04:9b:da:2e:e0:36:b7:bd:9d:
                    b7:d9:c0:b3:a4:a0:8b:ef:d8:36:3f:47:4d:56:fa:
                    1b:94:16:89:7a:1d:cb:ae:96:b1:37:08:12:b9:16:
                    b8:3b:21:7d:53:e2:38:f1:dd:7b:8a:91:82:b2:88:
                    f4:d1:19:d3:46:11:4d:fe:ed:aa:53:30:95:1a:08:
                    f5:72:e1:8a:13:d2:62:a6:d8:d9:3b:35:a1:a4:72:
                    07:da:ad:04:7c:f1:c3:34:62:6c:47:92:da:6b:c4:
                    64:0c:a9:dd:e4:b7:8b:08:e6:93:58:ce:1e:37:0d:
                    fc:36:87:13:6e:d2:83:e3:63:8d:7f:37:f0:b8:80:
                    0d:12:b7:e2:ca:3b:4a:b6:40:de:9e:ef:51:3b:9f:
                    ad:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:3C:F6:14:58:CA:4D:17:39:6A:56:23:78:8D:3C:42:B6:EB:03:E3
            X509v3 Authority Key Identifier:
                keyid:F3:1E:9D:AC:E9:E7:20:63:09:CB:6C:9E:5B:86:17:E9:85:9D:DC:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:42:dd:e6:be:1c:d8:15:47:8f:ad:2f:5a:9b:e4:b7:c9:77:
         1c:d8:90:04:9e:b8:03:c3:9b:35:74:f0:21:1b:4f:11:c9:c7:
         ca:93:fc:62:5d:cb:8a:24:b1:bd:4d:bc:54:57:2f:68:3c:e8:
         32:0d:5b:21:67:05:3d:31:c1:03:c6:89:19:80:61:9b:9f:d9:
         e8:0a:10:a8:10:f3:ff:dd:b3:9c:93:93:56:37:5e:97:78:8e:
         f4:1a:8f:43:42:1c:e1:50:22:1f:54:94:c2:c3:eb:f6:9f:f9:
         00:83:d4:a5:2c:59:8b:34:10:8d:46:a2:b1:ab:e9:34:1b:c7:
         b5:eb:8c:cc:5b:83:19:c7:9a:c0:c2:05:0c:86:13:df:42:86:
         d5:52:86:28:56:f5:e4:9c:36:73:3b:95:9c:fe:73:24:c1:96:
         3b:4b:b8:05:a2:73:74:ff:1d:d6:36:26:db:dd:e8:2e:13:d1:
         ec:57:d6:39:3b:34:f9:ef:73:0d:dd:66:e1:3f:90:ac:1d:29:
         ae:66:95:09:43:0f:e5:de:e2:94:21:6b:be:69:de:4d:55:58:
         b0:f9:9d:24:c3:e7:3e:fb:9b:a7:98:75:e1:5e:ab:1f:4a:a8:
         00:3d:51:ee:ac:0c:f4:e6:a5:42:57:54:f5:38:91:8d:31:a9:
         44:79:c6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:11:07 2026 by rpki-client