Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
File:                     8SEJSHr0AKY-PLARo9VJ51H9LBg.mft (raw, json)
Hash identifier:          7frFQKBeJgVAVSfTk9XSW70O9kDI8cLE3Py32Jb+mzg=
Subject key identifier:   D5:D8:93:F7:0F:21:CB:C3:A0:D2:26:5E:4B:EF:B8:CF:C2:60:64:A3
Authority key identifier: F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18
Certificate issuer:       /CN=f12109487af400a63e3cb011a3d549e751fd2c18
Certificate serial:       019E1D9115A120FDA9B65DE699CC3FA443E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
Manifest number:          0FE8
Signing time:             Tue 12 May 2026 19:01:47 +0000
Manifest this update:     Tue 12 May 2026 19:01:47 +0000
Manifest next update:     Wed 13 May 2026 19:01:47 +0000
Files and hashes:         1: 8SEJSHr0AKY-PLARo9VJ51H9LBg.crl (hash: LIF1ptCUdFoPml2hdFKa97pZhw2bhKaapzhYFfaFt5w=)
                          2: FpQImozb1WQPa7ynxxGnFSr06JI.roa (hash: ifQklYq1Q4YF5Y36wrzWjlvtYcLa+HxFkFPijteQsCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:91:15:a1:20:fd:a9:b6:5d:e6:99:cc:3f:a4:43:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f12109487af400a63e3cb011a3d549e751fd2c18
        Validity
            Not Before: May 12 19:01:47 2026 GMT
            Not After : May 13 19:01:47 2026 GMT
        Subject: CN=d5d893f70f21cbc3a0d2265e4befb8cfc26064a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ca:6d:b5:be:e9:db:41:ae:83:c1:ad:f2:a2:
                    42:f7:30:d2:26:20:e0:de:02:78:65:fa:62:ab:90:
                    24:a7:b0:b1:cf:1a:1a:e2:e7:9d:ca:91:ad:c1:b8:
                    86:25:89:5f:c9:a8:84:8c:f8:ed:6f:5b:74:59:88:
                    36:7e:a3:ef:54:5c:75:66:ed:5b:1f:75:30:22:96:
                    e4:92:12:bd:c0:37:d1:15:42:fb:5a:18:e3:27:f2:
                    7a:55:1a:91:a4:0d:aa:f0:08:7f:a9:45:93:87:85:
                    95:5a:76:05:bc:fd:fb:fe:2c:fc:df:1b:91:c9:64:
                    dc:7d:7f:00:3e:55:78:bf:fa:bc:0e:19:41:71:82:
                    fa:3d:a8:27:58:e9:01:58:b6:b4:07:d4:a9:bb:43:
                    1b:d3:ca:00:34:b3:6c:bd:3d:0c:3f:e7:95:fd:4e:
                    79:82:22:d3:f8:93:36:df:d4:32:d7:94:b7:5a:49:
                    73:b4:3d:b7:7e:a3:c3:26:7f:92:64:86:c9:2d:29:
                    52:1e:e3:08:75:e2:03:95:68:de:6c:4f:3c:31:24:
                    c1:fe:79:a8:32:c7:3c:32:92:24:84:af:40:32:80:
                    e4:06:7c:01:54:cc:46:14:4b:c6:25:3e:46:7c:bf:
                    ec:fb:8a:c2:09:50:1a:9c:63:bf:e4:e8:7d:9c:f1:
                    c2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D8:93:F7:0F:21:CB:C3:A0:D2:26:5E:4B:EF:B8:CF:C2:60:64:A3
            X509v3 Authority Key Identifier:
                keyid:F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:0f:04:11:cd:50:87:b2:ba:35:d9:cd:7e:28:26:6a:cd:3b:
         f9:b6:53:43:36:71:2d:57:2d:f3:56:16:ee:ad:8d:40:29:85:
         4c:15:dc:bc:da:96:cb:81:7b:c1:5d:12:7e:fa:8a:78:2c:7a:
         a8:4e:fc:51:b8:33:ec:3d:5c:e5:d4:ea:3f:1b:fc:55:1a:cb:
         75:d2:ed:04:06:b9:02:60:f3:b2:4a:13:ca:cc:7c:8d:24:88:
         cc:cc:a1:24:de:ff:a6:3f:f5:bc:9e:67:92:a0:03:e4:65:87:
         bb:45:30:09:d4:d2:70:2b:2c:e6:36:c8:7a:b1:72:cd:1e:ec:
         ca:22:0a:13:90:01:29:9a:ba:66:40:27:e3:95:9e:19:39:20:
         81:fa:56:77:56:df:64:61:e7:70:f0:4d:c6:61:fc:f5:32:d5:
         81:fd:75:f9:d6:49:91:16:1f:20:1c:5f:3c:16:8e:ec:0f:af:
         b6:e1:7a:81:de:0a:50:92:62:f6:72:6f:a4:6d:32:e2:96:8b:
         a1:1c:b2:a8:a7:ff:ec:07:e3:56:e3:e7:28:1e:1e:b2:8e:74:
         ea:1c:c0:cf:47:bb:82:8b:bb:0a:9b:47:24:11:0d:a1:97:eb:
         52:7c:56:93:12:dd:da:fc:ba:ec:5d:59:5a:70:5d:81:a6:57:
         73:06:08:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:34:26 2026 by rpki-client