Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
File:                     8VCW_jOQRJyTboVwYdSmll1AijE.mft (raw, json)
Hash identifier:          n2ezAiGP5HF630YYkrSu9E0KQFR6oB8NrFiNXbf9ZRw=
Subject key identifier:   AA:E0:AE:C7:38:97:C2:4C:D8:72:D4:8C:F7:A2:C5:8D:59:1F:6C:82
Authority key identifier: F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31
Certificate issuer:       /CN=f15096fe3390449c936e857061d4a6965d408a31
Certificate serial:       019E1E6C3699E21676204C8D9469442D3DEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
Manifest number:          0F0C
Signing time:             Tue 12 May 2026 23:01:08 +0000
Manifest this update:     Tue 12 May 2026 23:01:08 +0000
Manifest next update:     Wed 13 May 2026 23:01:08 +0000
Files and hashes:         1: 8VCW_jOQRJyTboVwYdSmll1AijE.crl (hash: RgbRtVCI01YzAG552yeVtxbp9ENhHYdjXpJHgsktxNk=)
                          2: WOvdhijn_s2DZtcctLEpLuIdUNw.roa (hash: Z7s2Qx4CcpmhX86cISi/NLHh5qOxWJPe6Z62x5xT1Q0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:36:99:e2:16:76:20:4c:8d:94:69:44:2d:3d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f15096fe3390449c936e857061d4a6965d408a31
        Validity
            Not Before: May 12 23:01:08 2026 GMT
            Not After : May 13 23:01:08 2026 GMT
        Subject: CN=aae0aec73897c24cd872d48cf7a2c58d591f6c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f0:6f:03:4c:0d:7a:bc:34:52:38:14:a1:1c:
                    de:ee:8f:25:89:f7:b0:e1:84:80:53:64:b9:2c:2e:
                    6c:55:7f:53:59:ea:30:a7:a6:c6:5a:3d:2e:06:74:
                    dd:91:73:24:b7:4d:1f:a9:a8:76:24:17:bf:81:53:
                    d3:cb:dc:80:17:57:0f:21:5d:ae:dd:21:ff:e5:f3:
                    ec:a8:bb:c6:81:3c:fa:42:6a:6c:e9:9b:d8:d5:68:
                    cb:58:20:37:a9:b1:10:4e:f7:8d:45:53:68:27:3e:
                    de:a9:7d:2b:20:cd:79:d7:0b:9e:84:0c:1e:3d:52:
                    6d:cd:21:0a:32:97:6a:9f:52:85:17:77:aa:c6:02:
                    37:e5:c7:6d:9e:22:fa:0f:64:a7:cb:de:e5:2b:e8:
                    40:5b:a1:a9:23:3c:63:a6:12:0d:60:45:a9:83:13:
                    07:d0:05:85:a8:cc:a2:7f:89:6e:e4:af:c0:85:f3:
                    26:e9:81:0b:1e:74:bb:d9:97:ed:ad:eb:bf:e6:49:
                    c9:e5:de:6c:a0:ed:eb:4c:2d:be:f1:f1:36:d4:84:
                    cb:31:c4:18:d9:70:d7:3c:7b:80:8c:a0:4f:09:47:
                    f2:5f:ec:fa:b8:5a:0b:47:22:33:0e:49:a8:16:48:
                    3c:79:04:04:68:4b:45:3f:50:c0:49:b3:f7:22:d8:
                    ce:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E0:AE:C7:38:97:C2:4C:D8:72:D4:8C:F7:A2:C5:8D:59:1F:6C:82
            X509v3 Authority Key Identifier:
                keyid:F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:66:d2:e5:d1:c9:ac:f1:a6:21:96:e2:b5:7a:06:97:c7:f3:
         dc:d3:1e:bb:f3:30:3d:b8:65:f3:f5:39:50:53:8e:e2:b9:0e:
         3b:ca:6c:b3:92:9e:0b:c9:1b:1e:b1:0a:be:2a:d0:cb:b8:40:
         63:94:29:b5:4d:c8:2b:20:16:f0:34:e0:e1:5d:57:bd:66:81:
         00:26:e4:95:bd:c2:9f:e8:20:f1:ac:12:6d:92:cd:93:2c:d4:
         a9:ec:d8:ff:b7:b2:b8:3c:b6:87:16:80:54:4e:b5:3b:ae:46:
         4e:f0:ed:3f:60:21:57:d6:6e:95:6d:6c:a0:9a:4e:02:82:df:
         db:6e:63:90:da:aa:ef:c6:a7:97:3b:9a:de:1d:5c:ed:60:3a:
         17:3f:91:8f:f8:39:b0:2a:15:02:27:7b:d8:e1:a8:bd:57:29:
         cd:a5:1b:e9:e4:37:03:d9:5c:a0:6b:fd:81:94:9e:57:fe:d2:
         eb:c5:88:8a:6a:6f:c7:aa:14:8f:90:e1:31:f0:db:f2:66:af:
         82:da:a6:ed:f2:ce:55:d7:65:b5:9c:62:3e:d1:5f:98:d2:07:
         f6:2a:4e:28:a6:65:9e:7c:18:f2:de:7b:60:2b:08:41:eb:47:
         e7:8d:4e:d2:b0:fa:38:14:df:d8:c9:51:72:5e:be:57:f4:06:
         4c:a3:ee:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:07:57 2026 by rpki-client