Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft
File:                     P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft (raw, json)
Hash identifier:          dmobKRt31+gaapA3QX/9XrAKdkiMmTh93EjT4lV7yvw=
Subject key identifier:   10:23:BC:04:7A:20:EF:DF:EB:9D:44:0F:E2:D5:81:F4:68:96:67:E5
Authority key identifier: 3F:4B:FE:92:DE:10:E6:60:DD:F4:5C:C2:D1:F5:FF:B6:36:EF:35:90
Certificate issuer:       /CN=3f4bfe92de10e660ddf45cc2d1f5ffb636ef3590
Certificate serial:       019E1DFEB7949B0C2123184A7D559BAADFC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft
Manifest number:          01C8
Signing time:             Tue 12 May 2026 21:01:32 +0000
Manifest this update:     Tue 12 May 2026 21:01:32 +0000
Manifest next update:     Wed 13 May 2026 21:01:32 +0000
Files and hashes:         1: P0v-kt4Q5mDd9FzC0fX_tjbvNZA.crl (hash: VC9T4qpWFPSmxIGD5ekC2QDTyfvK/bSpTYO/9+X5cVA=)
                          2: wiCmzHMmJI0asghERNxqN-MynS0.roa (hash: bcmBxTUeR+yh0Zn1PK7SL7wVYZreCWWh7r4c30KwASE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:b7:94:9b:0c:21:23:18:4a:7d:55:9b:aa:df:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f4bfe92de10e660ddf45cc2d1f5ffb636ef3590
        Validity
            Not Before: May 12 21:01:32 2026 GMT
            Not After : May 13 21:01:32 2026 GMT
        Subject: CN=1023bc047a20efdfeb9d440fe2d581f4689667e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ab:c1:cf:07:60:7a:2f:74:f1:d3:35:71:43:
                    b5:6e:ba:dc:66:19:ca:8f:93:3f:e8:1c:01:3a:15:
                    6b:de:73:01:12:a8:fa:16:6b:c0:83:55:92:fe:9d:
                    74:f4:f6:10:6b:61:5a:28:4c:df:3e:24:d0:e3:80:
                    1b:1c:ce:ef:3e:f6:13:d8:08:db:36:8b:f4:3e:c0:
                    94:51:77:8a:80:22:d2:16:8b:c4:08:13:60:04:f7:
                    8f:53:18:7e:f7:81:e4:5d:99:c3:0a:91:08:f8:dc:
                    2f:fa:a6:ed:55:07:54:7e:2a:7c:6a:59:75:7e:81:
                    9c:a7:6e:62:87:5b:23:e4:0f:f3:56:8c:74:9d:d6:
                    c8:3b:e1:3e:14:c8:2b:fd:c5:06:5b:c8:84:7a:83:
                    38:14:da:3b:1e:0f:4b:c2:e6:dc:cf:54:4b:b5:eb:
                    dd:cb:72:8c:57:2a:c9:5e:a3:15:22:0b:0b:50:c0:
                    e0:fa:ce:a2:d7:a7:1c:b3:87:69:69:39:0b:13:07:
                    b2:21:18:c6:2f:dd:bb:db:77:00:22:ac:f3:0a:1b:
                    5e:27:7e:86:00:05:d1:ff:d1:c4:3d:68:16:00:23:
                    4b:f5:1b:1b:de:58:d0:50:aa:7a:1b:3a:ff:80:a2:
                    4c:68:d9:52:4c:32:17:d5:7f:78:79:a4:cf:73:18:
                    4f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:23:BC:04:7A:20:EF:DF:EB:9D:44:0F:E2:D5:81:F4:68:96:67:E5
            X509v3 Authority Key Identifier:
                keyid:3F:4B:FE:92:DE:10:E6:60:DD:F4:5C:C2:D1:F5:FF:B6:36:EF:35:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:55:24:e3:ee:2d:63:77:29:bf:89:ec:16:d9:1f:e6:f0:72:
         50:cd:8b:7e:88:ea:f5:44:ec:f4:04:96:2b:f1:37:da:41:99:
         c7:38:df:33:91:74:85:0f:64:2e:88:c0:01:60:80:39:94:6b:
         4c:3f:13:18:6e:f5:6d:ff:90:b4:6c:b0:0f:24:4f:12:f6:ba:
         2b:12:ba:b1:23:70:a7:2f:61:a8:4c:03:9d:f2:ce:c7:2e:84:
         bc:ef:d5:e2:4b:85:5a:70:1a:bc:7e:9c:38:bb:9a:59:e3:4e:
         4c:19:de:b4:f5:81:36:50:a6:3d:d1:80:16:f6:68:a2:b7:c8:
         47:a4:bf:a3:3e:72:7e:ec:c7:ff:d7:cc:dd:f3:2d:e0:25:af:
         44:61:9a:fd:05:eb:ba:b8:88:f5:2d:79:d0:f8:c5:1b:d9:66:
         4d:df:cf:9d:b1:d3:fe:9f:b4:4f:b3:9a:95:51:16:84:af:30:
         4d:9b:09:af:a2:f6:d4:15:36:32:d6:47:13:c6:e3:c4:0b:07:
         02:3f:b9:f4:d9:d7:dd:3e:90:c7:7c:cd:34:f0:b9:c4:8f:2c:
         1d:a2:a5:7a:50:8e:6b:45:de:0f:10:e9:ab:e1:02:63:fa:75:
         39:22:ae:19:d1:fd:a3:5a:c5:95:66:c7:8b:fc:e9:a2:e9:a9:
         37:0b:71:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:32:15 2026 by rpki-client