Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
File:                     8l2dskSP6XudF6RL5dZEhI-gGOE.mft (raw, json)
Hash identifier:          eSRv7hno3PQ9pEJjqMAmzCkUtr0cvqC/qQ7EYYGF+Qk=
Subject key identifier:   4A:A9:91:42:18:15:78:27:52:DC:AF:CB:64:32:B5:DD:57:60:1F:92
Authority key identifier: F2:5D:9D:B2:44:8F:E9:7B:9D:17:A4:4B:E5:D6:44:84:8F:A0:18:E1
Certificate issuer:       /CN=f25d9db2448fe97b9d17a44be5d644848fa018e1
Certificate serial:       019E1C100719F060FCC6DA8E58015117E688
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
Manifest number:          1906
Signing time:             Tue 12 May 2026 12:01:12 +0000
Manifest this update:     Tue 12 May 2026 12:01:12 +0000
Manifest next update:     Wed 13 May 2026 12:01:12 +0000
Files and hashes:         1: 8l2dskSP6XudF6RL5dZEhI-gGOE.crl (hash: 2Qc54DsulPAQ5OWuOEKfRpGHMCcIJQZNrrJMq6cPr98=)
                          2: SmR3reVpg9Oftt2wG6VeqB7WbmE.roa (hash: 0SJZoaTugeFDErq1aPzr3jWd7TCUqCyvEDw1XhqHPJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:10:07:19:f0:60:fc:c6:da:8e:58:01:51:17:e6:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f25d9db2448fe97b9d17a44be5d644848fa018e1
        Validity
            Not Before: May 12 12:01:12 2026 GMT
            Not After : May 13 12:01:12 2026 GMT
        Subject: CN=4aa991421815782752dcafcb6432b5dd57601f92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:20:8c:51:41:6e:1a:70:9a:a2:93:1d:92:e4:
                    16:42:df:de:f8:1e:2b:3c:1a:e9:6e:da:d3:6b:af:
                    c0:87:c8:25:0b:ef:1d:0e:f7:2f:43:ef:1c:8c:44:
                    54:3e:5b:93:17:df:0a:dd:8d:e6:05:7f:4b:b9:3a:
                    6b:17:78:8c:10:21:91:d3:76:6f:5c:e7:c9:ab:55:
                    2d:38:f4:4f:02:a3:2f:8e:dd:db:42:95:00:cd:b5:
                    46:bd:c3:58:93:b2:55:3a:cf:be:29:b4:a6:65:b9:
                    24:36:af:6a:85:8c:9f:30:b3:15:34:b0:53:c4:57:
                    8b:27:1f:b9:38:97:80:22:07:c8:c2:d3:17:ec:33:
                    96:e1:b8:34:d0:b5:0a:91:59:25:2f:ce:d9:8e:79:
                    fd:82:06:10:05:3b:94:13:c2:79:d8:ba:5c:6e:6d:
                    34:b4:86:68:a6:1c:9c:a9:5b:8e:11:0a:96:a0:bb:
                    9a:0a:31:a8:4b:2b:65:ca:9c:d3:75:31:a4:05:87:
                    fd:9d:1d:9a:db:e1:64:8a:bc:fb:9f:60:96:8c:5b:
                    1d:eb:e0:0a:69:36:37:a3:06:f4:5f:9b:a1:4e:ed:
                    d7:71:ba:5f:3f:0b:32:8a:80:2a:95:df:b8:1e:2c:
                    4b:05:18:8b:98:70:6d:b8:1b:8b:f6:e8:c2:cf:c6:
                    8c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A9:91:42:18:15:78:27:52:DC:AF:CB:64:32:B5:DD:57:60:1F:92
            X509v3 Authority Key Identifier:
                keyid:F2:5D:9D:B2:44:8F:E9:7B:9D:17:A4:4B:E5:D6:44:84:8F:A0:18:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:71:3a:bc:73:51:ed:5a:c8:5c:b6:ca:52:c1:d6:09:52:17:
         13:3f:3c:6d:cb:ed:67:9e:9b:93:98:f2:0d:79:ca:91:e8:5b:
         a3:ba:d8:95:a5:8e:67:7f:5b:1b:dd:eb:8f:2f:a2:97:ae:a4:
         97:0a:8b:bd:67:91:42:f9:94:2a:c7:dd:18:a2:ff:2f:cc:50:
         b9:62:94:b8:77:61:f7:38:0b:27:c1:8d:00:97:51:74:b8:75:
         80:c0:bd:0e:1b:fb:e1:d2:69:ef:92:52:3d:94:03:b9:72:cf:
         bd:d7:24:25:50:ec:b7:04:aa:45:a8:38:3e:e8:6a:01:6c:e3:
         7e:af:d0:93:53:8e:e9:ec:c4:e2:d7:3a:05:e2:02:34:b7:6e:
         5c:92:90:c3:59:99:9f:0b:de:e9:87:6d:74:e4:da:22:14:94:
         50:93:9f:46:7b:1d:a8:65:21:b3:91:69:c5:af:20:6f:25:48:
         31:d8:e0:6a:ba:38:a2:e3:01:cb:b5:60:ac:c7:43:57:63:46:
         06:93:5e:b7:05:4b:ab:9f:9f:53:13:4e:98:41:0b:2e:de:49:
         0d:a1:c3:89:71:c4:d2:b4:0a:22:6e:ab:9c:e9:04:a1:02:d1:
         ba:18:22:0c:e3:60:60:59:2f:06:aa:86:a2:ae:d7:3c:df:b2:
         1e:1d:7d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:54:26 2026 by rpki-client