Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
File:                     8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft (raw, json)
Hash identifier:          j2bRUYgoy7fmr2Hz6CmrDWqSCULIi7a9OhRaSn+IVbA=
Subject key identifier:   58:BE:23:22:8F:8C:A0:39:C5:D6:44:F3:D5:6B:00:50:E4:7E:16:D8
Authority key identifier: F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24
Certificate issuer:       /CN=f1af8bb98e405539ea983384fafa82b2b4b71724
Certificate serial:       019E1D90BCC706A1B342DA7DD5A1A5015552
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
Manifest number:          1908
Signing time:             Tue 12 May 2026 19:01:25 +0000
Manifest this update:     Tue 12 May 2026 19:01:25 +0000
Manifest next update:     Wed 13 May 2026 19:01:25 +0000
Files and hashes:         1: 8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl (hash: dCmNAu+hB7A9FWEp1SYjRzYTNE31evJS61Nm8iw7z5g=)
                          2: Uhh2a08gwiDaMSROk1rK4331Chw.roa (hash: 8oJqf3hEnDAqhg+fdWdx5w+WvA2GyWV10zwFhqN5lCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:bc:c7:06:a1:b3:42:da:7d:d5:a1:a5:01:55:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1af8bb98e405539ea983384fafa82b2b4b71724
        Validity
            Not Before: May 12 19:01:25 2026 GMT
            Not After : May 13 19:01:25 2026 GMT
        Subject: CN=58be23228f8ca039c5d644f3d56b0050e47e16d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0f:90:f1:4e:d5:9e:2e:1f:fc:5f:5b:77:17:
                    b0:0d:e6:e3:2e:88:d1:14:16:c3:14:5d:82:69:aa:
                    17:bb:62:a6:48:ea:a5:e5:bd:f3:a4:2a:24:48:b0:
                    bc:e5:82:5e:eb:5f:c2:6e:ec:d9:41:fa:c1:d6:72:
                    fb:d7:64:71:bb:08:45:a6:ec:97:a0:ce:4f:e1:c8:
                    70:8b:ec:fa:e0:d4:5a:94:7e:bb:ad:3e:d9:52:22:
                    e9:80:f9:03:bb:5a:ba:3e:68:3c:2b:d9:27:ab:9c:
                    72:58:f5:74:1e:09:0b:19:40:e3:b9:39:15:46:6f:
                    3a:38:bf:ad:c7:9d:1f:8a:3c:93:44:04:28:0b:6c:
                    51:25:79:9e:ba:2c:d3:e4:c1:88:71:a7:33:7e:32:
                    8f:d7:1f:a8:4f:98:63:b3:74:17:e5:a9:0a:1e:7a:
                    47:e9:ee:b9:4d:3d:9d:12:6e:1a:49:95:83:45:5b:
                    08:24:64:e4:bb:8a:23:62:97:dc:8a:7b:4b:25:fc:
                    b0:84:28:4f:79:53:d2:14:cc:ba:cc:ce:d6:da:6f:
                    06:4c:ca:5c:33:00:d8:99:c3:fa:d0:82:a1:16:fe:
                    fd:88:16:24:58:8e:2f:be:39:52:54:fd:c4:78:8e:
                    ff:18:72:79:b2:09:fb:a5:9d:76:49:9a:71:ea:38:
                    97:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:BE:23:22:8F:8C:A0:39:C5:D6:44:F3:D5:6B:00:50:E4:7E:16:D8
            X509v3 Authority Key Identifier:
                keyid:F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:a9:7a:c8:f6:9a:14:1b:87:d0:be:50:17:71:80:16:27:51:
         cb:0f:00:47:09:35:33:8f:10:2a:dc:ea:43:4d:ad:7f:a7:ab:
         a4:aa:a4:38:6d:d7:7a:f8:8a:99:23:04:76:c7:e3:33:aa:60:
         ca:86:f4:e1:d2:ff:da:b3:09:cf:bc:36:9a:56:fa:36:b1:ac:
         6e:c6:55:71:c3:c6:5b:b3:ba:ee:b5:08:69:58:05:b1:0c:94:
         29:5a:ac:0a:a0:cb:ce:f7:9f:28:60:bd:27:ad:ac:1a:f2:18:
         f1:4a:8c:41:e9:38:d1:57:1f:81:fe:4d:5f:83:cf:71:d2:7a:
         bc:32:bf:1a:20:ff:7c:e3:a1:1e:c2:5a:fb:f4:bd:43:02:91:
         6c:1c:9b:ab:96:36:e2:d5:77:81:29:f7:79:57:c0:c2:81:db:
         2b:34:a2:d9:78:fb:85:eb:2d:70:2a:05:31:70:65:a5:1c:94:
         c0:5f:26:49:2b:e6:9c:d7:db:9b:94:02:fc:87:64:74:28:0d:
         10:0e:e3:c1:85:53:d9:1e:8b:72:0e:c9:cc:b5:45:89:5e:d3:
         2c:16:67:ae:b3:0f:ac:86:01:af:fc:32:dc:2a:9e:e9:29:c1:
         39:d5:eb:41:3d:8a:bd:17:36:a7:4a:8a:ca:54:45:9c:28:fc:
         9a:fb:e0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:54:50 2026 by rpki-client