Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
File:                     8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft (raw, json)
Hash identifier:          hxdTNqbLqPKh3YBcvhfTa1V2SDlle37O+CXMBinprC0=
Subject key identifier:   6E:0F:77:7C:F8:7E:9E:22:23:B5:8F:A3:3A:40:19:25:E3:77:03:CF
Authority key identifier: F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
Certificate issuer:       /CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Certificate serial:       019E1D22535A96743E5DFE87F40B34AD2A80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
Manifest number:          1915
Signing time:             Tue 12 May 2026 17:00:49 +0000
Manifest this update:     Tue 12 May 2026 17:00:49 +0000
Manifest next update:     Wed 13 May 2026 17:00:49 +0000
Files and hashes:         1: 8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl (hash: rCBEzSKKJX8goY+QWJBnFQZ37uD+BvCNTYEGihUX5+I=)
                          2: unUyBQz8XFF2OcgZ1f90_tl9Ad4.roa (hash: Q3zQczsKFUa5DCI4QfqsevX6E5xk3SVGs2WbjqkExHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 17:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:53:5a:96:74:3e:5d:fe:87:f4:0b:34:ad:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
        Validity
            Not Before: May 12 17:00:49 2026 GMT
            Not After : May 13 17:00:49 2026 GMT
        Subject: CN=6e0f777cf87e9e2223b58fa33a401925e37703cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:74:57:2f:a9:18:9b:71:6e:3a:42:2b:d0:e8:
                    6c:a4:6f:c1:6c:79:64:e0:fb:61:0c:f2:87:c9:a9:
                    e9:cb:3d:dc:e1:e8:9f:e1:a7:c3:3c:ee:dd:3f:29:
                    48:fa:66:63:a7:7d:ab:f2:07:43:f9:42:4f:ee:81:
                    da:6f:21:d2:54:49:0a:d7:59:af:1f:ed:0c:4f:0d:
                    9e:a6:58:96:94:a6:12:b0:47:b3:0a:de:c1:e3:53:
                    d6:20:bc:21:cf:9a:fa:3b:f9:0e:f0:21:12:6a:6e:
                    06:a0:5a:c2:55:07:d9:d3:0e:f7:2b:cb:00:68:1c:
                    57:4b:64:e1:69:52:c6:2d:48:02:93:23:a6:e7:25:
                    ac:f9:36:e0:12:fd:43:ea:e5:bb:bb:12:f0:89:c5:
                    dc:dc:03:cc:fe:87:4a:c3:bf:f7:3f:d5:09:e3:7f:
                    9d:e1:5f:99:4e:f1:eb:de:a4:d1:1d:0b:4a:d1:63:
                    4f:71:e8:08:91:f0:32:02:21:11:5a:5f:57:5b:7f:
                    ea:ec:9f:6e:40:9f:e9:57:a1:43:9b:63:e0:d5:fb:
                    7d:80:62:33:9d:4b:25:0d:4a:72:8b:70:d0:82:17:
                    14:ad:f0:80:57:4e:f9:3a:14:a0:c3:dc:d2:a5:1a:
                    e7:62:6e:9a:bd:0d:8b:ae:d2:d2:95:1a:ad:85:c3:
                    bc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0F:77:7C:F8:7E:9E:22:23:B5:8F:A3:3A:40:19:25:E3:77:03:CF
            X509v3 Authority Key Identifier:
                keyid:F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:13:93:41:08:22:95:f7:5b:05:b7:59:42:bd:5b:3e:a9:c4:
         76:4c:01:7a:1c:3d:7f:70:ee:7e:e5:e1:3d:16:95:95:22:4a:
         f8:83:67:7c:25:9d:06:f7:9d:b5:64:16:4a:d2:91:d5:83:3b:
         a5:87:07:2d:26:f7:af:c3:3e:90:19:e4:70:2d:d7:6d:78:f2:
         3b:3a:73:08:ba:20:4c:30:5b:e7:99:c1:68:77:ff:d6:0b:58:
         72:e6:c2:67:91:80:4b:de:fb:7d:6d:31:d6:d8:59:0e:31:bd:
         a9:60:35:ec:30:5b:a2:bb:68:37:e0:84:06:fc:3b:1b:23:ec:
         ed:45:af:fb:da:9e:58:de:8c:8a:2e:e1:67:01:a8:d4:36:38:
         08:dd:3e:d9:80:5e:f0:66:b5:af:63:15:f8:b3:72:21:69:a9:
         a9:5d:95:7f:e8:fa:2d:b2:bb:9c:9f:8b:e8:52:b5:94:78:67:
         a2:c5:98:7b:17:5f:94:f8:0b:8a:4d:4a:3b:b0:69:04:cd:09:
         1b:bb:ac:7f:20:5c:a7:0e:26:83:34:2f:81:63:3d:a1:8b:a6:
         d4:88:07:83:b0:2d:75:21:ac:56:c3:06:27:17:fa:99:bc:99:
         65:86:fb:07:05:33:64:ab:98:d3:38:bf:3e:33:b6:d1:b3:1f:
         0a:11:73:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:03:24 2026 by rpki-client