Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft
File:                     8Q057dsAjRuJ35dBlg2_IET2V_s.mft (raw, json)
Hash identifier:          dK1NSHZqkG0I/TG5KyFViePSkNa5dDSdH9+SFDSgK1s=
Subject key identifier:   67:87:8F:9E:8C:EA:0E:0A:1C:05:8F:9E:60:1F:DD:8B:8E:EF:D5:FA
Authority key identifier: F1:0D:39:ED:DB:00:8D:1B:89:DF:97:41:96:0D:BF:20:44:F6:57:FB
Certificate issuer:       /CN=f10d39eddb008d1b89df9741960dbf2044f657fb
Certificate serial:       019E1EA36C38AA5A328DB2C9A9637973B183
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft
Manifest number:          190E
Signing time:             Wed 13 May 2026 00:01:26 +0000
Manifest this update:     Wed 13 May 2026 00:01:26 +0000
Manifest next update:     Thu 14 May 2026 00:01:26 +0000
Files and hashes:         1: 8Q057dsAjRuJ35dBlg2_IET2V_s.crl (hash: DoYgHeT7XhEa2BfY2zkbqxwdQMreDCAsXMYtUvuTx6Y=)
                          2: wp6uiGrJ4kjvwZ8tHt_RT5DTcms.roa (hash: VFhk9hTGSYfetlFbp/u5F1XNCOx7IZQTp3tsScBlLMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:6c:38:aa:5a:32:8d:b2:c9:a9:63:79:73:b1:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f10d39eddb008d1b89df9741960dbf2044f657fb
        Validity
            Not Before: May 13 00:01:26 2026 GMT
            Not After : May 14 00:01:26 2026 GMT
        Subject: CN=67878f9e8cea0e0a1c058f9e601fdd8b8eefd5fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:85:87:1b:1d:70:a6:75:b3:20:03:6d:85:c8:
                    7e:3e:b8:e9:01:f6:87:8c:aa:be:04:c6:c0:b8:3a:
                    95:50:22:b6:c1:24:b0:97:6e:1c:25:af:c7:cf:c5:
                    e0:35:84:07:76:0f:87:3b:35:b8:80:8d:bc:bb:bc:
                    63:a8:77:0f:e7:ea:08:09:b5:95:df:e8:85:0d:35:
                    26:90:49:7b:0f:b3:00:62:80:43:ec:ea:94:2f:67:
                    45:3f:cd:25:3b:0d:8e:3c:78:17:f1:69:b4:a3:a5:
                    6b:44:e4:d6:92:16:8c:2c:e3:89:1c:2f:5d:4e:af:
                    3b:6e:15:78:3a:8e:1b:9f:75:1f:7b:a4:59:0e:05:
                    a5:df:f9:23:b2:7d:c7:54:4b:b8:21:da:21:75:a4:
                    a8:dc:93:17:fd:fb:97:75:fd:47:2f:7d:24:7d:c3:
                    79:44:ef:39:0c:3a:26:de:00:c1:05:66:3e:c0:52:
                    b4:5a:d2:5f:21:82:48:19:72:be:48:fe:be:c3:67:
                    fb:2f:90:ef:c9:1b:87:10:cc:ce:b9:7d:4b:b4:c2:
                    44:34:69:a8:2e:b4:19:14:81:7a:1c:14:d6:8d:c2:
                    16:a0:6c:02:58:c4:40:79:e7:23:f3:ce:3e:24:62:
                    bb:d9:40:32:a2:3a:f5:5f:0e:16:d2:93:bc:a0:79:
                    4d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:87:8F:9E:8C:EA:0E:0A:1C:05:8F:9E:60:1F:DD:8B:8E:EF:D5:FA
            X509v3 Authority Key Identifier:
                keyid:F1:0D:39:ED:DB:00:8D:1B:89:DF:97:41:96:0D:BF:20:44:F6:57:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:57:42:ca:59:a9:7e:1b:4e:9a:10:74:a7:f7:a5:0a:06:2a:
         4e:d6:ed:a4:0a:96:35:99:6a:49:73:a7:33:27:a2:37:46:cd:
         d2:22:cb:10:7f:13:d3:44:10:06:ad:e7:f0:9e:3d:80:39:48:
         9c:06:39:23:da:33:b8:92:66:35:f6:9a:c3:d3:85:aa:6a:01:
         18:05:52:65:2d:7b:8a:f5:c0:93:30:83:07:77:26:f7:6a:e4:
         a9:9d:9a:31:f0:17:d5:0e:88:0c:79:c8:c3:e4:e3:08:23:73:
         ce:1e:f1:3b:c3:17:51:6c:ce:1c:a7:4b:69:f7:8a:6f:17:a3:
         ce:e3:5c:11:e8:18:f7:e4:04:29:e0:16:ea:88:01:d6:2f:d5:
         78:af:d7:a4:86:f6:00:67:d0:d9:a5:8a:b2:7d:e3:46:7c:0b:
         03:c2:75:29:06:fa:5a:0c:c3:18:c9:ad:50:ad:6e:cf:a7:d4:
         4a:83:ec:75:75:d5:ce:46:d5:93:63:52:df:c5:75:a7:8e:ea:
         ee:11:09:6a:8f:27:6e:b1:d1:38:22:67:ef:3f:2d:c9:c7:59:
         37:12:f5:ac:e3:1c:87:38:0a:8e:ca:c6:d1:5b:9b:8c:0b:54:
         40:a2:7c:74:f7:51:27:eb:4a:ab:96:7b:23:f5:3a:67:9a:3b:
         62:eb:d1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:25:16 2026 by rpki-client