Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
File:                     8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft (raw, json)
Hash identifier:          69XZrkFXxtELHl3Qea881hK3iO66fCBNuTXhAZBpHuw=
Subject key identifier:   20:2A:80:E3:47:69:CC:91:06:AC:08:C3:E3:29:B4:00:7F:82:01:5C
Authority key identifier: F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
Certificate issuer:       /CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Certificate serial:       019E1DFDF198612434E7C61A5A29CCB07B93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
Manifest number:          1909
Signing time:             Tue 12 May 2026 21:00:41 +0000
Manifest this update:     Tue 12 May 2026 21:00:41 +0000
Manifest next update:     Wed 13 May 2026 21:00:41 +0000
Files and hashes:         1: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl (hash: dvZmrpJp+smjX4nEuFftISsr/S/Ip/HZ1ytbDzTn16w=)
                          2: PLcdq8HBbATb33TrLOZuRDuXEVQ.roa (hash: XGsrxoZcwiWsioFa6/X1psR1kn5m17Bl9f4lBLZE5dk=)
                          3: yYbe2iJW7P_sCDhFY34_L0RrDto.roa (hash: a8JSg8aR8AsTXy0JLCDrOWelsw6IkJ4MgTxTFuy83io=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fd:f1:98:61:24:34:e7:c6:1a:5a:29:cc:b0:7b:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
        Validity
            Not Before: May 12 21:00:41 2026 GMT
            Not After : May 13 21:00:41 2026 GMT
        Subject: CN=202a80e34769cc9106ac08c3e329b4007f82015c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:27:b8:71:d1:34:48:f0:22:4c:63:97:ee:d1:
                    1e:f7:b7:d5:de:59:73:b7:d7:8e:31:f3:cb:43:45:
                    17:a8:e6:48:1f:77:72:25:d7:b6:90:b0:5d:ef:df:
                    41:d0:cf:69:68:12:60:16:aa:81:42:d9:be:5d:c2:
                    c9:58:9d:69:8f:e1:46:a5:dc:1c:2c:09:9d:9f:9c:
                    25:5e:d1:9f:34:58:3b:ca:b1:f6:8c:d0:26:36:5c:
                    b6:59:c8:00:f3:7f:f4:27:7d:34:37:9a:d7:d3:1b:
                    6b:08:fa:de:7b:0c:07:89:ee:23:e9:bf:22:79:bd:
                    da:90:74:0a:9d:df:cc:79:50:d9:13:68:59:de:9b:
                    17:90:a5:5c:3c:b8:d1:0c:7b:73:10:dc:70:b2:a9:
                    08:8a:2a:d0:31:bc:bf:e1:3f:4f:82:48:c9:8a:ff:
                    75:9e:04:cb:d6:99:83:aa:dd:b4:b5:c6:f6:d0:05:
                    41:96:4e:2f:a1:9b:30:fb:83:1b:c7:04:7f:e8:a1:
                    97:46:cf:a5:c6:73:a9:fc:fe:e3:42:7c:10:ed:ae:
                    d4:b0:64:21:2d:7f:ee:13:ab:d5:62:3f:e0:75:6c:
                    f4:cb:d8:82:28:25:ab:09:57:a0:04:0e:d3:ab:ba:
                    20:c6:11:6a:ee:71:e6:b9:c8:8f:e6:b2:dd:38:7c:
                    2d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:2A:80:E3:47:69:CC:91:06:AC:08:C3:E3:29:B4:00:7F:82:01:5C
            X509v3 Authority Key Identifier:
                keyid:F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:38:9e:23:a1:3e:5a:ca:47:ee:bc:83:46:62:6d:da:57:ad:
         a6:29:3f:7a:2b:69:81:59:0f:8b:3c:23:c2:f2:6c:ac:89:67:
         6a:5b:3c:bd:ae:f8:cd:19:cc:cf:19:b1:2e:9e:c8:f1:5d:80:
         0b:3f:38:4e:cc:c1:0f:32:4d:df:ff:e2:e2:50:10:a3:67:7f:
         34:7a:af:16:35:22:cf:5d:9f:25:3a:9c:92:96:6e:6e:7e:eb:
         ab:e0:9f:67:29:22:26:fc:46:d7:3e:ac:79:78:f7:24:7e:2d:
         bb:a3:d3:b7:77:9b:f9:30:c2:e5:aa:26:2d:2b:0a:ed:4f:fa:
         20:c4:5a:17:be:da:6d:49:e6:ff:84:2f:d1:d1:c1:3a:c7:a8:
         f7:d6:90:ed:60:a5:3b:89:87:4f:aa:47:a8:9d:98:fc:72:98:
         c8:b8:6a:39:1b:67:c7:ca:c8:72:d4:d0:0a:6b:30:9e:2d:53:
         42:56:96:7e:63:31:13:22:ee:33:49:a6:d3:c1:10:f4:8f:a1:
         48:eb:56:30:df:a5:5a:35:88:90:05:7d:e7:f8:cc:8e:3c:5b:
         bd:01:23:9c:b1:ef:82:d2:21:fb:99:79:b0:3f:4e:45:b1:a7:
         ae:ad:df:74:cc:59:d0:b5:aa:40:f1:46:02:f8:9d:f3:05:66:
         3f:e5:b4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:56:58 2026 by rpki-client