Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.mft
File:                     8QEB-_qGP-Reriv2uX4O_n7IMSU.mft (raw, json)
Hash identifier:          jRSXtGgyXE+JHfsc+FyN1KB5S1whqpPnAABlltq5FEs=
Subject key identifier:   5A:D7:94:3A:62:E1:A7:0D:00:3C:E7:4B:02:43:C3:CD:F6:6E:03:59
Authority key identifier: F1:01:01:FB:FA:86:3F:E4:5E:AE:2B:F6:B9:7E:0E:FE:7E:C8:31:25
Certificate issuer:       /CN=f10101fbfa863fe45eae2bf6b97e0efe7ec83125
Certificate serial:       019E1D224F65C89F0E7C136BAB7CA96E6173
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8QEB-_qGP-Reriv2uX4O_n7IMSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.mft
Manifest number:          08B1
Signing time:             Tue 12 May 2026 17:00:48 +0000
Manifest this update:     Tue 12 May 2026 17:00:48 +0000
Manifest next update:     Wed 13 May 2026 17:00:48 +0000
Files and hashes:         1: 8QEB-_qGP-Reriv2uX4O_n7IMSU.crl (hash: byn/j1BUZmt1FuxmKF+iiM8hcJJorKvCMLX7+MDVFA8=)
                          2: NwpxsBvkXInCfE7s58C2EVrv1wo.roa (hash: T0KsGiCR7aM3uhR3oT8/7BFXwqzPIAkn3MY+dfdaeXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8QEB-_qGP-Reriv2uX4O_n7IMSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:4f:65:c8:9f:0e:7c:13:6b:ab:7c:a9:6e:61:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f10101fbfa863fe45eae2bf6b97e0efe7ec83125
        Validity
            Not Before: May 12 17:00:48 2026 GMT
            Not After : May 13 17:00:48 2026 GMT
        Subject: CN=5ad7943a62e1a70d003ce74b0243c3cdf66e0359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:80:31:c5:f4:7a:93:57:04:33:2c:5c:56:42:
                    7f:29:1d:57:f9:5d:23:4e:dc:65:ad:5c:33:76:8e:
                    37:4e:2b:70:21:d5:61:c2:c9:6b:a7:be:44:f2:9f:
                    f5:a2:3f:a2:97:f4:6a:de:d5:38:a5:57:d9:d4:1b:
                    9b:bc:c8:12:94:bc:ae:94:d9:fc:95:48:b4:e4:f1:
                    f6:9b:a1:48:64:66:f2:8e:dc:29:f3:ae:b1:78:54:
                    1c:86:ce:2b:11:7e:78:4f:a8:93:b8:07:54:f8:e2:
                    b2:59:64:a6:30:5a:1c:a5:47:5d:25:f3:9f:4f:5b:
                    b6:cd:8b:cc:e9:d2:cd:3a:0c:1d:e9:03:87:5b:57:
                    1b:7c:a8:37:09:2b:55:34:2c:93:23:16:77:2c:d4:
                    56:45:d0:8d:b9:4a:48:c4:46:9a:6b:ae:18:ce:04:
                    b3:0e:f0:e9:16:9a:dd:73:41:e5:8c:a2:ab:8b:94:
                    48:fa:51:a6:fb:0e:7f:6e:64:4e:06:4b:00:be:6c:
                    37:37:4f:13:da:85:dc:4c:d7:42:15:97:68:61:19:
                    c9:08:80:6a:b4:6e:c1:a5:27:3b:c4:7b:43:6f:d1:
                    e7:c2:ba:98:8c:3e:2a:7e:32:1b:26:9f:0a:4b:e5:
                    9f:22:a2:dc:95:79:13:2a:e8:46:2f:55:2b:75:15:
                    ef:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D7:94:3A:62:E1:A7:0D:00:3C:E7:4B:02:43:C3:CD:F6:6E:03:59
            X509v3 Authority Key Identifier:
                keyid:F1:01:01:FB:FA:86:3F:E4:5E:AE:2B:F6:B9:7E:0E:FE:7E:C8:31:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QEB-_qGP-Reriv2uX4O_n7IMSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:47:75:95:19:a4:c0:19:80:56:c3:9b:c7:5d:b3:06:19:b3:
         e2:7f:fd:73:76:e3:05:02:52:cf:73:9a:9f:cb:75:7a:e9:aa:
         9d:07:14:32:cf:d0:82:e0:6f:ee:0e:6c:7b:51:d4:19:d5:e3:
         c6:a7:3f:ae:bb:85:3e:9f:37:5b:e7:3a:ac:08:dd:df:b8:9f:
         a5:d7:8a:48:fc:18:a4:25:7d:77:b9:b6:80:f9:cc:9c:9a:8d:
         a9:e7:7e:41:48:44:79:42:64:cd:2b:cb:4b:a9:96:80:ef:99:
         da:16:a4:b2:9d:6a:1d:17:2e:3e:e5:60:6e:a7:ee:c0:a5:61:
         41:ac:73:20:cf:d5:e4:2e:98:92:62:92:3c:8f:4b:78:dd:68:
         3c:37:27:76:06:82:01:57:c8:d2:33:8d:33:da:4e:29:f7:30:
         c6:11:4e:d9:ab:1e:df:75:8b:a6:40:33:1a:de:1b:a6:fc:e5:
         a2:79:d5:ac:5f:b0:71:38:b5:84:57:69:3e:c6:c0:b8:f1:03:
         be:14:01:01:6f:35:94:71:85:6e:5a:4c:6b:24:93:1b:a3:c5:
         1b:0c:19:a7:bd:a0:77:26:6e:9e:90:ef:6c:c9:0d:e8:73:d8:
         e9:d5:1f:1f:ad:ec:10:a4:bb:bd:ee:f5:e9:3b:36:8b:18:12:
         a8:8d:f9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:22 2026 by rpki-client