Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
File:                     c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft (raw, json)
Hash identifier:          V5MQBqSYzhWrac11u1t64f57P0a3t2+8ke489iTsflY=
Subject key identifier:   82:DC:E9:0C:45:CA:9C:67:7F:BF:EB:A0:FB:6B:50:A8:A4:B5:08:83
Authority key identifier: 73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94
Certificate issuer:       /CN=73c90ad151d4326a6d62e13046d788f85bf82e94
Certificate serial:       019E1CEBAE773441571CBF7FF0F63A73E989
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
Manifest number:          126C
Signing time:             Tue 12 May 2026 16:01:08 +0000
Manifest this update:     Tue 12 May 2026 16:01:08 +0000
Manifest next update:     Wed 13 May 2026 16:01:08 +0000
Files and hashes:         1: c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl (hash: cnJ5XKpjDqzkldigBMUy6VMXwcdzSmbz548mWdnyEp0=)
                          2: n4jCcgfnjIRQBuc83E5OKmqoWsg.roa (hash: VbvW5BuZ6bctb7kCqPvJChCxCthWd5ZrUCoerfivWps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:ae:77:34:41:57:1c:bf:7f:f0:f6:3a:73:e9:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c90ad151d4326a6d62e13046d788f85bf82e94
        Validity
            Not Before: May 12 16:01:08 2026 GMT
            Not After : May 13 16:01:08 2026 GMT
        Subject: CN=82dce90c45ca9c677fbfeba0fb6b50a8a4b50883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c3:eb:e7:6c:7a:1f:d8:06:d2:e4:71:d9:e2:
                    bf:90:6c:2f:3d:63:53:a6:b7:55:4d:5f:ba:c7:d5:
                    3b:4d:97:a5:e4:35:66:fa:7f:b3:0b:a7:e4:43:4e:
                    00:d9:84:03:0d:0a:15:fa:b7:be:be:13:ce:cf:de:
                    2a:de:32:1a:26:85:56:70:1e:b5:a2:f6:0c:aa:71:
                    66:6e:c3:00:f5:40:22:9e:ed:1a:88:be:98:6f:83:
                    92:15:1b:b2:64:61:e8:ab:59:48:0d:69:71:6a:a3:
                    23:af:0d:27:f6:90:22:0b:b3:49:77:47:53:8b:f2:
                    29:2d:99:55:32:86:23:b5:ef:e8:0f:b5:eb:e7:57:
                    7e:e4:b7:8e:01:29:9b:3b:dc:97:5e:1f:c9:d4:cf:
                    92:2e:a2:70:19:45:90:89:8e:24:05:9a:c3:96:60:
                    52:24:88:6f:3b:9d:ab:73:42:a2:92:15:04:18:88:
                    3a:63:7c:67:47:fb:8f:e8:43:b3:eb:91:d8:16:2c:
                    24:eb:08:d3:07:a9:e0:63:f1:51:b1:c1:c7:e2:1c:
                    98:5f:7d:c9:f9:e8:87:3e:f8:f2:8e:f5:03:70:f2:
                    72:4f:1d:e3:fc:57:fe:4f:c8:63:c5:60:2d:03:ae:
                    74:3d:28:f5:93:02:2a:88:bb:82:f0:c9:7a:56:72:
                    56:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:DC:E9:0C:45:CA:9C:67:7F:BF:EB:A0:FB:6B:50:A8:A4:B5:08:83
            X509v3 Authority Key Identifier:
                keyid:73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:0b:6d:f6:36:54:e6:85:11:60:6f:2d:7f:44:56:5a:50:72:
         c5:7b:43:ff:cd:1e:1f:b9:36:de:98:cf:21:0d:96:a4:2b:53:
         29:67:d0:ec:7c:26:36:83:ab:f0:84:a8:73:c4:d3:56:0c:d7:
         ec:bf:d9:23:9d:ff:87:35:f0:20:00:50:23:04:95:26:06:dc:
         8a:a3:cf:b3:1b:76:91:70:44:d1:41:37:26:a6:1f:ed:f1:f2:
         18:c2:af:18:9f:fb:fd:81:c9:da:ce:49:f5:2a:17:6a:58:d4:
         39:79:cc:1d:02:ba:5e:1b:12:3a:96:98:e1:64:f0:60:a8:9b:
         af:c6:e0:b0:0c:eb:07:82:70:b3:85:c3:fd:8f:35:b7:83:18:
         1a:13:1e:2b:2b:a5:00:fb:58:51:22:e6:30:69:b5:a4:f8:b4:
         17:7b:3d:60:04:b8:63:94:e9:f9:82:cd:66:c7:e2:85:14:7b:
         d9:2e:20:e2:14:ff:23:43:4d:94:08:34:37:28:a5:fe:21:43:
         72:c7:f3:d1:ec:4c:7a:79:96:7e:b9:a6:37:4e:8b:f4:e7:8a:
         d6:4b:17:1e:05:69:46:f8:bf:17:68:c7:7b:dd:91:91:14:81:
         9f:05:e1:62:64:54:68:be:ee:03:76:88:0d:dc:9a:fe:92:e9:
         52:75:08:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:51:26 2026 by rpki-client