Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
File:                     8KEVxxfliRNKVTZw8-K1uc2hLYM.mft (raw, json)
Hash identifier:          swNEIitcPRU6QsvwPxYkgzTNyNBzc1mXS+uJJru6bmc=
Subject key identifier:   EA:0C:3C:2F:CB:D3:BB:3B:8A:61:64:F1:E0:46:E0:F5:00:21:F3:AB
Authority key identifier: F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
Certificate issuer:       /CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Certificate serial:       019E1FB61357E18603F670EB96E22409F4FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
Manifest number:          0FFC
Signing time:             Wed 13 May 2026 05:01:26 +0000
Manifest this update:     Wed 13 May 2026 05:01:26 +0000
Manifest next update:     Thu 14 May 2026 05:01:26 +0000
Files and hashes:         1: 8KEVxxfliRNKVTZw8-K1uc2hLYM.crl (hash: VJ4eCpmBxopu5pfTq2Ez+FwVZQk9QgWsDJ1ePLFBDA4=)
                          2: LmCE4vBv57eU5WHq9fR2fqAFtRA.roa (hash: mnnr39ZVewAFhZkB5nyRtZi1LdwMDrlxlNTdJSgLeFw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 05:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b6:13:57:e1:86:03:f6:70:eb:96:e2:24:09:f4:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0a115c717e589134a553670f3e2b5b9cda12d83
        Validity
            Not Before: May 13 05:01:26 2026 GMT
            Not After : May 14 05:01:26 2026 GMT
        Subject: CN=ea0c3c2fcbd3bb3b8a6164f1e046e0f50021f3ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:72:33:12:f4:01:ef:86:92:16:06:77:49:10:
                    b1:f6:35:d1:29:2c:71:7d:85:43:95:74:b3:fb:c9:
                    0c:eb:c9:0b:8b:50:92:e4:ad:db:f9:c1:f0:63:85:
                    34:90:b4:23:9a:3e:6e:09:e9:51:48:9a:7c:1b:c7:
                    09:bc:44:2f:9d:a6:08:14:31:14:33:a7:fd:54:4e:
                    fa:8f:9f:bf:cd:15:40:5a:27:a3:a6:ba:bd:85:7c:
                    ed:c3:22:20:35:33:99:92:78:54:ba:06:69:51:51:
                    36:83:c7:56:5a:a5:70:0f:aa:a0:94:78:01:1c:0b:
                    f3:a6:fc:83:a6:02:b7:32:74:fd:42:81:dd:ce:08:
                    99:ea:7b:5e:38:d7:8e:6c:54:80:af:37:02:63:2d:
                    ba:15:19:35:cc:81:a2:4d:5c:91:ad:b5:f9:b2:61:
                    3d:22:c8:af:21:57:a7:e3:a1:5c:50:f2:ba:41:9a:
                    c3:7b:f1:0e:6e:2e:ce:2c:cc:00:08:92:76:2f:b0:
                    35:2a:d8:19:a4:8a:b2:6e:65:d0:34:0d:c5:cc:aa:
                    fd:72:91:8a:95:ca:5d:9c:2e:f2:81:4f:e9:67:21:
                    6a:64:30:ff:fd:00:32:b7:22:f6:43:76:f4:43:1a:
                    4c:91:1c:9a:bc:8f:bb:5b:34:24:25:d3:86:ce:fd:
                    f7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:0C:3C:2F:CB:D3:BB:3B:8A:61:64:F1:E0:46:E0:F5:00:21:F3:AB
            X509v3 Authority Key Identifier:
                keyid:F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:4c:c1:4a:ab:3d:7c:6a:09:77:59:9b:63:07:6f:87:43:19:
         c3:24:d1:25:7d:51:9f:ff:2e:07:d6:2d:c3:79:70:85:86:29:
         b4:5f:08:cf:8e:8f:a5:c3:d5:e2:9e:81:9b:a3:a5:ec:83:84:
         78:96:1c:98:93:f2:cf:f1:7a:be:65:89:b8:fb:db:ba:d8:cb:
         2b:17:30:44:fd:29:bd:0e:d2:39:ba:1b:e9:c9:6a:b5:e6:e5:
         96:e6:82:b0:78:b5:c3:b1:7b:22:1c:d2:0e:2e:d1:7d:b7:a4:
         00:5e:c7:cc:de:a1:7d:8c:3f:fe:a7:48:16:15:58:53:8e:67:
         fd:97:bf:54:d1:c4:cf:de:aa:2c:ed:53:f6:cd:14:e1:b4:c2:
         76:70:7b:0b:81:ea:68:58:ab:86:88:81:cf:b2:08:2c:8d:f6:
         bf:23:05:7d:d7:26:37:df:8c:68:d0:cf:13:2d:36:00:a4:5a:
         34:50:5e:21:ee:f7:68:85:3c:32:ae:ac:66:6a:0b:b3:d2:c4:
         41:1c:46:49:cc:ab:09:cb:35:fa:1f:a5:e0:6c:14:a4:25:76:
         17:70:9d:e2:ed:ff:97:65:5d:7c:98:f2:8b:ad:54:6d:a7:02:
         30:33:7e:59:63:c0:bb:fb:f1:7b:2f:6d:bd:83:fc:ec:b9:3e:
         eb:33:0c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:06:20 2026 by rpki-client