Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
File:                     8FAUfun2L5cEI8vYttUupfSg7aU.mft (raw, json)
Hash identifier:          2DyFOlq77EFi/f3AO7mDMeeo/rhOlFvQylc4ltlwtU8=
Subject key identifier:   22:B3:78:E1:63:F9:FB:97:63:9B:A1:B7:76:DE:16:66:66:FD:64:4A
Authority key identifier: F0:50:14:7E:E9:F6:2F:97:04:23:CB:D8:B6:D5:2E:A5:F4:A0:ED:A5
Certificate issuer:       /CN=f050147ee9f62f970423cbd8b6d52ea5f4a0eda5
Certificate serial:       019D99D0BF8A69BF3A246EA8A3DAEE75BDAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8FAUfun2L5cEI8vYttUupfSg7aU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
Manifest number:          040F
Signing time:             Fri 17 Apr 2026 05:01:27 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:27 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:27 +0000
Files and hashes:         1: 8FAUfun2L5cEI8vYttUupfSg7aU.crl (hash: r3nBG2MullVd4yrV8AFOPmyA/ZYPrqjh3DV8RkrUOxc=)
                          2: BrDWyRlSZn2CXtf4IPz2NecaGek.roa (hash: stEsjXO2Qw6gddDjn4syr8tHdGrYULyxkALHqMMCkng=)
                          3: UTz-CAu9udrXHC-2_mble0zxioE.roa (hash: khov/J99ODqiFOcvNEfOtWttZ4QbtF1bybuUhyPlZGc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8FAUfun2L5cEI8vYttUupfSg7aU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:bf:8a:69:bf:3a:24:6e:a8:a3:da:ee:75:bd:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f050147ee9f62f970423cbd8b6d52ea5f4a0eda5
        Validity
            Not Before: Apr 17 05:01:27 2026 GMT
            Not After : Apr 18 05:01:27 2026 GMT
        Subject: CN=22b378e163f9fb97639ba1b776de166666fd644a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1e:21:56:b4:d4:9e:a9:79:c9:83:22:be:73:
                    e5:bb:47:d5:f8:85:59:67:6d:9f:e5:4a:6f:98:75:
                    9f:cc:f4:73:a8:dd:f5:56:8e:8c:c3:8c:d7:d9:6a:
                    5c:78:2a:63:06:fd:52:1e:50:3b:cd:9a:b6:d1:17:
                    47:cd:cf:e2:9b:35:45:20:10:1f:41:89:b0:58:a7:
                    e4:7a:b8:e8:81:a8:a2:57:9e:4e:6e:e4:78:61:30:
                    b9:9f:0a:46:49:f7:6f:66:84:49:4a:43:61:ef:c4:
                    2d:f2:d5:f0:34:2b:83:63:f6:cd:47:f4:2e:bc:18:
                    be:1f:a5:da:97:66:5b:da:5d:66:b7:c7:5d:b3:d6:
                    fc:8d:0c:9f:af:e2:9f:78:d0:6d:b0:6b:2a:1b:4a:
                    f8:6a:1a:54:cc:5f:d3:08:22:0a:08:b9:d2:49:41:
                    10:5f:d3:fe:70:20:9f:87:ea:a0:94:d9:34:86:08:
                    19:3d:9f:56:78:86:a6:c6:41:8f:f2:ab:ab:b5:89:
                    3b:45:26:d8:33:b1:63:67:de:59:1f:7a:93:95:76:
                    55:69:8a:a3:9e:07:6d:56:fd:3c:56:f5:88:af:d4:
                    57:d2:e7:41:85:9f:5c:f3:11:02:dc:4d:ff:31:87:
                    7d:80:01:b0:36:6f:40:ec:6f:d8:8b:8a:c4:80:4e:
                    04:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B3:78:E1:63:F9:FB:97:63:9B:A1:B7:76:DE:16:66:66:FD:64:4A
            X509v3 Authority Key Identifier:
                keyid:F0:50:14:7E:E9:F6:2F:97:04:23:CB:D8:B6:D5:2E:A5:F4:A0:ED:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FAUfun2L5cEI8vYttUupfSg7aU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ac:cf:d3:31:77:c5:b5:43:e9:cf:12:46:84:20:f6:4b:d2:
         6c:e6:15:2e:77:ce:73:11:fd:2f:ac:cd:44:e2:79:02:b9:de:
         fc:31:61:05:9c:1e:26:3f:25:93:26:d8:68:72:93:f9:30:45:
         ea:df:6e:38:ff:8c:c4:e5:f7:59:bf:bd:eb:4b:29:38:1b:61:
         af:e4:24:1f:3d:1f:3e:9e:f7:ff:15:38:7c:36:c4:22:1b:ac:
         76:50:12:54:b5:a5:99:8d:a1:df:45:ea:44:a3:21:bb:9e:70:
         7e:dd:af:e6:63:a9:ef:17:52:fe:10:a2:46:76:25:b7:2d:dd:
         a1:69:18:2f:41:e2:8b:75:6a:62:ea:69:e3:d0:ad:73:04:f2:
         12:16:70:44:92:6f:74:d2:ba:dd:0f:5a:56:7b:07:17:ac:04:
         68:44:ec:c2:e5:a4:4d:ac:5b:57:31:df:02:88:a7:51:01:2a:
         fb:60:9f:37:a0:46:18:db:e2:e8:9f:0f:dd:27:8b:c1:b1:74:
         61:7d:f6:a3:f5:7d:7c:f3:9c:d4:6b:0a:7c:86:71:00:8d:15:
         09:55:d8:9d:c1:ce:d1:f3:8e:e6:3e:cb:25:0d:e4:19:8d:0b:
         03:16:b8:58:2e:5b:31:fe:96:ea:e7:39:60:2d:d3:9d:fd:64:
         6c:aa:98:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:12:07 2026 by rpki-client