Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft
File:                     8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft (raw, json)
Hash identifier:          yFrKbKQizZfI8i/cg9Yn6bVo81miR03mtLnau2Tdi6c=
Subject key identifier:   7B:11:30:58:05:D1:A3:FF:E7:3C:A3:80:F9:EE:F3:60:D9:80:21:89
Authority key identifier: F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA
Certificate issuer:       /CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba
Certificate serial:       019E1CEC0A524AF2ADCB9A1A7871E03E96C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft
Manifest number:          1909
Signing time:             Tue 12 May 2026 16:01:31 +0000
Manifest this update:     Tue 12 May 2026 16:01:31 +0000
Manifest next update:     Wed 13 May 2026 16:01:31 +0000
Files and hashes:         1: 8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl (hash: xxqh6O91tmK7DCLbogYRKAhNnV6NqhpkY3PG/Z6N5Gs=)
                          2: G7HS4Pe64aq7LX7Ac6sahYxcvsg.roa (hash: CRoiGyn3+g1TcYhralq7D2YpvKZFCAsmyg1ItQBPBYo=)
                          3: d79pVbNl6KV7mE-TmGcgiFhhpy0.roa (hash: 6sQKNK+i7JugUTkWCMHqg5UJuTLwVJ2b0IOTbHFw/EY=)
                          4: uGF8_MSgyhQ8dAHm23AhHh6NWz0.roa (hash: sxZlIQb25hDFz3ykb8U9qXE3lTMI/4iHplhe6RLTs2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 16:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:ec:0a:52:4a:f2:ad:cb:9a:1a:78:71:e0:3e:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba
        Validity
            Not Before: May 12 16:01:31 2026 GMT
            Not After : May 13 16:01:31 2026 GMT
        Subject: CN=7b11305805d1a3ffe73ca380f9eef360d9802189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2a:22:bb:68:d6:70:a8:c1:3c:38:2d:48:73:
                    81:67:07:b5:97:e0:49:22:00:17:07:35:f3:20:05:
                    d0:19:a0:4d:c7:b7:40:c0:cf:d5:06:23:77:dc:4b:
                    3b:79:a7:7e:8e:fe:5b:88:ff:ae:ae:08:30:94:38:
                    f9:2f:3e:70:7d:f3:06:f3:43:39:0d:44:61:e3:80:
                    3d:7f:88:43:4f:97:79:0a:94:e9:2b:23:d0:91:b1:
                    11:a6:83:43:50:a5:ac:09:07:c0:22:74:d5:cb:e7:
                    d4:64:5a:dd:71:85:0a:2b:c9:fb:58:8d:60:b7:42:
                    37:7b:f9:e5:27:6b:76:5a:08:13:c6:33:72:21:9d:
                    bc:8f:d4:25:d1:64:3a:d3:7c:be:f8:4e:43:09:ad:
                    69:2d:c5:4f:2e:b6:14:e4:d1:15:c8:4e:ec:0d:8a:
                    65:3f:a8:f0:81:34:32:f8:16:89:79:92:31:dd:9e:
                    c7:eb:1d:73:91:b7:30:f7:09:3f:38:01:25:69:43:
                    99:19:58:ff:bb:3a:db:b4:33:ca:f3:b2:fc:c1:c0:
                    67:2d:44:e8:c8:bf:61:53:c0:d3:b5:b7:15:2e:da:
                    8e:52:c4:ed:d3:88:6e:ee:5f:b5:a6:52:5c:69:17:
                    35:ec:4f:9b:ac:99:8e:51:30:db:bb:81:d1:9a:8f:
                    cc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:11:30:58:05:D1:A3:FF:E7:3C:A3:80:F9:EE:F3:60:D9:80:21:89
            X509v3 Authority Key Identifier:
                keyid:F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:7b:58:2b:eb:5f:d4:59:f4:d8:27:47:b7:7b:68:4e:46:b4:
         ac:a5:97:fb:d8:b6:db:a3:70:d9:12:29:f9:21:af:bf:5f:cf:
         c9:8b:eb:98:17:c4:33:3f:07:09:95:13:97:9d:c2:4a:be:fa:
         f1:05:a7:99:a2:78:4b:d7:cd:7f:68:16:62:7a:af:67:73:3a:
         55:76:83:47:e8:43:f3:3d:26:6b:01:aa:45:29:f1:6d:64:df:
         fe:a1:a6:b1:2f:b1:9e:5a:f9:87:a6:b2:78:b7:13:f1:c2:66:
         7d:e5:ed:45:fa:3d:68:fb:f3:5f:77:3a:ee:1c:1a:e9:52:9e:
         8f:34:28:77:85:d5:7e:7c:b2:7f:96:40:5d:67:63:7b:99:4a:
         33:f3:38:97:82:1f:1a:ff:0d:35:50:0e:57:81:22:be:f6:b3:
         2f:95:d6:07:ab:eb:99:1e:a0:8b:e7:d7:af:e5:7c:f4:a9:b7:
         fb:32:84:db:e6:b2:16:5a:68:b2:1f:02:c5:1f:a1:9b:4b:b0:
         bd:78:7b:4e:20:27:f4:49:fe:fc:c6:4d:1d:41:79:48:d0:6f:
         7e:ed:58:7d:34:42:c2:72:6d:e0:15:46:4e:45:86:57:f6:bf:
         6c:41:b8:63:90:87:98:04:92:1e:e0:05:87:04:9b:12:09:75:
         1a:f0:1e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:24:56 2026 by rpki-client