Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
File:                     8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft (raw, json)
Hash identifier:          tMGfzbIPUVXMGq8VpXavf4HpMxXb2199XutzUdiBrew=
Subject key identifier:   FB:36:36:2A:48:A7:32:55:33:AE:B7:1A:99:2C:E9:08:71:A1:A4:50
Authority key identifier: F1:45:4A:B3:C3:E0:9B:65:5C:B4:72:55:39:FF:6E:69:93:1C:46:B0
Certificate issuer:       /CN=f1454ab3c3e09b655cb4725539ff6e69931c46b0
Certificate serial:       019EBFC8BCF09DA8BC8E2F326475552ACFE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
Manifest number:          1957
Signing time:             Sat 13 Jun 2026 07:01:04 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:04 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:04 +0000
Files and hashes:         1: 8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl (hash: tITK3QvaOkTGo5YIQEqY6Q82iFH02CgYkNPpeTOGQQU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:bc:f0:9d:a8:bc:8e:2f:32:64:75:55:2a:cf:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1454ab3c3e09b655cb4725539ff6e69931c46b0
        Validity
            Not Before: Jun 13 07:01:04 2026 GMT
            Not After : Jun 14 07:01:04 2026 GMT
        Subject: CN=fb36362a48a7325533aeb71a992ce90871a1a450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d8:cb:7b:cb:07:11:75:91:62:26:6d:ce:13:
                    3a:d3:1e:55:c9:7a:5f:35:60:c5:f1:4c:a6:d4:a3:
                    9b:e3:85:3e:3f:50:54:80:c2:1c:08:c0:59:f9:01:
                    e8:a9:af:fd:d3:80:3f:e9:66:56:24:71:fd:bb:99:
                    bd:5f:64:1b:79:50:56:5f:27:62:45:4d:cb:a0:4b:
                    9f:5f:fd:a5:46:fe:68:3f:de:0e:f1:b4:76:82:8a:
                    97:2c:c5:a7:55:22:23:60:dd:3b:34:ad:8a:ca:cc:
                    10:d8:63:4c:40:bd:71:69:bc:56:7a:f9:27:87:ae:
                    da:bc:e2:e9:ae:fa:db:84:5d:01:df:af:77:29:e1:
                    6d:da:2c:a2:51:ce:f8:45:2d:63:78:ae:47:65:00:
                    65:b2:39:fb:3b:24:ea:8f:e9:c3:4d:fb:bd:a8:1f:
                    d2:84:b3:d2:89:55:9c:99:bb:d8:34:ab:86:01:b6:
                    4a:05:c9:45:b0:aa:af:38:2e:6f:a8:12:21:72:7b:
                    46:71:76:48:af:86:c9:8b:6d:8d:19:24:d2:88:32:
                    6d:99:a6:03:56:43:a1:e6:b0:8b:77:74:8c:4f:38:
                    14:a4:05:1a:ce:89:b5:c0:2c:2b:a4:90:a2:4a:da:
                    56:a3:be:5a:41:32:c4:fe:cc:fe:bb:ae:2a:7f:d0:
                    42:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:36:36:2A:48:A7:32:55:33:AE:B7:1A:99:2C:E9:08:71:A1:A4:50
            X509v3 Authority Key Identifier:
                keyid:F1:45:4A:B3:C3:E0:9B:65:5C:B4:72:55:39:FF:6E:69:93:1C:46:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:80:46:63:dc:c4:26:4c:99:5f:f9:af:10:25:0a:79:83:88:
         c7:63:7e:6f:50:58:47:c7:1d:1d:1c:de:13:19:29:1b:ba:d7:
         c6:fb:05:ad:c4:e5:ee:c1:71:2f:b1:19:81:11:67:6a:46:1b:
         e0:b7:2e:c8:6a:77:ae:b9:c0:22:68:d5:bc:3f:56:47:76:58:
         41:98:dc:e6:90:5a:7e:0c:c6:28:99:91:af:c4:a5:21:30:48:
         75:7a:92:00:ca:02:4f:0a:d9:9b:8c:2d:6d:10:ea:5d:65:b0:
         ae:d5:46:65:8c:55:b5:c4:62:b6:b7:a5:bc:90:bc:00:b0:b6:
         e3:f7:e4:8c:7c:5b:81:55:c7:5a:1b:50:0c:83:51:04:af:38:
         6c:7b:5a:e0:1e:b3:c1:00:d4:a9:c0:dc:38:0f:3c:71:5d:82:
         6f:72:50:fa:2f:14:a5:bc:b1:00:58:4a:75:8f:05:42:0f:7e:
         40:99:9a:da:29:0b:eb:50:de:c0:3e:c1:da:3d:7a:ab:a9:02:
         1d:06:57:4f:99:db:2e:a4:50:03:47:ac:42:71:c8:90:b7:71:
         44:ec:21:fb:c9:c3:ff:8b:14:89:9a:62:8b:43:42:ce:81:89:
         d1:f8:0a:bc:68:24:48:c8:6f:40:6a:2e:9d:04:8d:37:19:38:
         c2:16:23:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:24:05 2026 by rpki-client