Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
File:                     8YCPGr745rWc1DWaa0SB_HyWMdE.mft (raw, json)
Hash identifier:          VXN9niA5oAJ9U4WLwhj53GAhsCLXhsywHOjGCSaKxQY=
Subject key identifier:   2E:25:92:30:16:BD:67:F6:F3:82:F3:8A:ED:90:0C:55:B9:28:53:C4
Authority key identifier: F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
Certificate issuer:       /CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Certificate serial:       019E1E35FACBF07ACA2810C9B069692CEFE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
Manifest number:          1908
Signing time:             Tue 12 May 2026 22:01:54 +0000
Manifest this update:     Tue 12 May 2026 22:01:54 +0000
Manifest next update:     Wed 13 May 2026 22:01:54 +0000
Files and hashes:         1: 8YCPGr745rWc1DWaa0SB_HyWMdE.crl (hash: HzJlrLIsstTO6HWtWb8okEb+TyAuXn1ogvQQ9epxPz8=)
                          2: 8hVawCDbKfLGVmy8uR3L6HSyhjY.roa (hash: YVD0bBTAjI7+lAMuKAykSFrhVddz0zyQETcTt1yWfGY=)
                          3: bo4jTmLbavInVB1_Xe56jT6duFc.roa (hash: DrLAswJfulupBgy+nF1dC9JnLY+ojBgEGF1LnkBTmLQ=)
                          4: l9mq3dtlYUJYwqPz2hM7UKcrn8U.roa (hash: HVy6JnYfA7DiKZs/nj6ujUr8Qm/xOl9atbOQ23YdxGo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:fa:cb:f0:7a:ca:28:10:c9:b0:69:69:2c:ef:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
        Validity
            Not Before: May 12 22:01:54 2026 GMT
            Not After : May 13 22:01:54 2026 GMT
        Subject: CN=2e25923016bd67f6f382f38aed900c55b92853c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b7:62:a2:6f:19:12:e1:1e:88:c1:56:a0:e7:
                    55:22:82:99:52:87:a5:9e:d7:2e:52:e1:e0:3e:58:
                    eb:ea:34:dd:b0:74:31:ae:7c:f8:07:8f:65:3c:13:
                    cd:88:cd:af:b0:51:38:59:5d:f9:c6:61:13:d9:59:
                    45:c2:57:f3:17:49:f3:27:05:f6:c0:81:3d:68:64:
                    03:79:89:d4:1c:fd:dc:69:28:15:c1:98:e0:2c:2d:
                    3d:cc:5c:f4:9f:40:5c:c3:5b:76:70:00:e3:59:c7:
                    dc:3d:65:eb:f1:22:da:6b:e0:1f:43:4b:83:d4:15:
                    06:b8:0f:b2:8a:bf:cf:49:2a:cf:c5:d6:71:53:a1:
                    00:3f:77:58:23:54:74:83:52:12:86:2e:ef:ba:cf:
                    3f:b8:23:f5:99:b3:5e:64:39:1b:c3:84:8a:bc:c6:
                    78:65:59:ae:2a:c4:7e:9d:8f:8e:4f:76:c4:2e:0a:
                    70:03:42:3f:a3:28:f8:79:f3:3f:ff:a9:8a:f2:e1:
                    74:94:82:c1:4e:c7:d9:4e:a7:0c:38:a6:17:1e:c8:
                    e7:37:eb:a0:6b:46:da:51:e6:8e:0b:25:19:3e:6e:
                    6c:29:b9:41:d3:d4:b8:10:e4:a8:10:ba:d0:f0:01:
                    c8:d7:86:dd:1a:2d:92:ca:74:31:53:53:4f:6c:8b:
                    42:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:25:92:30:16:BD:67:F6:F3:82:F3:8A:ED:90:0C:55:B9:28:53:C4
            X509v3 Authority Key Identifier:
                keyid:F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:0c:bd:f5:a4:db:ca:69:c2:0e:27:35:e9:0c:ea:ab:fe:ba:
         a0:5d:a1:31:21:99:98:a7:4e:f6:55:b6:04:04:95:f4:10:f9:
         2a:2e:3f:e0:54:27:31:93:18:fc:15:16:ba:cb:44:fd:ab:27:
         80:a4:6e:90:51:97:20:d1:87:ca:72:3b:4a:32:af:83:79:48:
         14:08:e6:f9:78:7f:fa:28:8a:96:a9:ba:78:f1:25:5d:71:13:
         6d:3e:4a:c4:f9:ac:11:a2:79:5a:08:6f:2d:28:66:28:e1:58:
         d7:e6:48:2d:98:ae:39:e5:a8:cc:95:82:a1:66:d6:36:26:c6:
         b2:61:f7:24:51:f9:6c:9d:be:64:1a:4a:96:ea:a6:42:05:30:
         4b:12:92:0c:ed:03:67:3b:48:7f:85:1c:84:65:c7:de:4b:8c:
         55:6f:44:54:4b:1e:e7:c2:8b:35:57:a4:fe:20:0d:18:16:f2:
         60:b3:c0:37:df:bc:61:27:fd:f6:37:44:c3:73:6f:21:ab:e8:
         7d:b6:5f:ad:98:c1:83:85:98:60:25:8e:36:5a:1c:a8:d0:01:
         3e:f5:6d:f6:c4:10:57:76:1d:47:5e:5e:73:c9:30:37:c6:d3:
         d7:8d:e5:59:f9:64:7f:68:ed:c8:ad:fb:e2:12:d1:0f:8c:eb:
         a2:67:30:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:31:47 2026 by rpki-client