Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
File:                     dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft (raw, json)
Hash identifier:          C7ZRhMHtNnMBwNqZbVpF2SYhlsGm2Br0nEeYIcXDk5k=
Subject key identifier:   EA:25:C9:FB:95:94:B8:3B:E1:63:DF:6D:DE:FE:10:A8:57:1B:70:CF
Authority key identifier: 74:5D:BA:56:CF:1F:FC:2C:FC:1D:05:F4:FA:83:31:17:EF:D7:C7:8A
Certificate issuer:       /CN=745dba56cf1ffc2cfc1d05f4fa833117efd7c78a
Certificate serial:       019E1D9106E0FD2FD28CEBC4F14C00AC3806
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
Manifest number:          089B
Signing time:             Tue 12 May 2026 19:01:44 +0000
Manifest this update:     Tue 12 May 2026 19:01:44 +0000
Manifest next update:     Wed 13 May 2026 19:01:44 +0000
Files and hashes:         1: 0PbPEQsG-kj7SoehWuyEm8KHUSs.roa (hash: PSFO3oJW97UfWkTdnQLs8C6Bk6abk9LmfHzrgXAaZBA=)
                          2: dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl (hash: Fnd6cITdO7G5aWoTKyeISTfwVBjydne+iWsBZPYK2dc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:91:06:e0:fd:2f:d2:8c:eb:c4:f1:4c:00:ac:38:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=745dba56cf1ffc2cfc1d05f4fa833117efd7c78a
        Validity
            Not Before: May 12 19:01:44 2026 GMT
            Not After : May 13 19:01:44 2026 GMT
        Subject: CN=ea25c9fb9594b83be163df6ddefe10a8571b70cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:66:d2:65:0e:6d:32:67:b5:0a:5e:af:13:b1:
                    c8:8d:5b:dc:08:13:64:cc:17:fd:b5:82:f4:29:1c:
                    d7:a6:80:ec:9e:b1:4c:b5:58:62:af:8e:7a:54:ca:
                    e3:8d:d0:cd:fe:e4:f3:bf:2a:47:97:e0:fe:cc:a5:
                    af:a1:1b:96:56:db:fa:e8:43:5e:5c:c2:77:88:ee:
                    82:f3:36:45:b2:d7:6a:84:ff:d6:3a:e2:01:68:b7:
                    7d:73:37:50:bc:99:50:c6:b6:27:6b:df:7f:90:cb:
                    54:99:52:6c:ee:82:59:07:88:a2:71:26:da:7f:de:
                    da:0f:d0:5c:8a:2b:d7:ec:f0:49:70:ba:a1:63:39:
                    4d:0a:d6:3e:c5:6c:38:d4:1a:42:b6:70:d7:fe:c4:
                    c3:48:fc:89:1a:c8:d0:2f:17:c6:2b:3a:58:fe:3a:
                    8a:5b:44:53:bd:b3:c9:fe:dc:78:96:5c:91:46:c7:
                    fa:4a:ff:72:c7:d8:f6:f3:80:cf:94:c4:22:bd:5a:
                    c6:e8:39:c6:a5:dd:a7:a2:e4:c1:4d:a4:5a:bc:39:
                    ce:b8:ed:3f:de:79:73:2f:a5:06:63:eb:bf:92:34:
                    fd:3e:74:5d:fd:4c:3f:5b:43:61:bc:e5:d2:c6:f9:
                    fc:6a:a1:12:d0:b6:45:59:c5:d4:8a:a3:ce:b2:89:
                    9a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:25:C9:FB:95:94:B8:3B:E1:63:DF:6D:DE:FE:10:A8:57:1B:70:CF
            X509v3 Authority Key Identifier:
                keyid:74:5D:BA:56:CF:1F:FC:2C:FC:1D:05:F4:FA:83:31:17:EF:D7:C7:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:29:c9:f3:f7:6e:85:d2:31:27:41:8d:e7:8b:62:54:a1:91:
         2f:60:c5:fe:78:8b:0e:60:a6:54:06:7b:a3:f5:9c:84:89:e3:
         17:c4:ab:20:87:d6:0d:a3:3b:96:fa:cc:68:f9:ab:cb:03:01:
         fc:d5:e4:bb:ee:af:4a:43:9d:8c:07:62:40:61:14:e3:25:07:
         39:e2:93:e6:3d:04:16:77:cd:a7:5c:c1:7f:9f:1f:f0:cc:68:
         66:07:38:3d:86:d1:c0:12:c3:3f:f3:d6:ce:4e:20:17:d5:a3:
         31:36:36:73:8c:9b:05:75:89:d9:76:be:bd:43:ec:03:9a:2d:
         47:85:ac:44:a2:c8:0c:47:5a:51:b9:4f:5d:d5:2b:6c:3a:f1:
         6f:50:97:74:43:93:57:74:ea:b8:02:d3:af:19:a1:4e:dd:91:
         f7:67:2d:06:d7:a9:0f:6a:a9:5b:59:01:2b:7c:e0:4d:5b:01:
         94:0c:16:fe:c4:7f:e4:77:ba:60:91:a2:50:88:93:13:73:46:
         cf:88:e7:30:3d:3a:71:16:97:0f:34:ae:73:2f:da:a6:d9:8e:
         ab:fb:fa:da:1a:00:47:ea:d8:0b:63:5f:da:23:0b:24:f4:8f:
         c8:7a:1b:11:b4:1a:e1:31:31:6b:25:87:ba:30:f0:8e:27:1e:
         b0:fa:7c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:34:15 2026 by rpki-client