Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
File:                     f8rYnfG_maNvKQzD7w8ee00CdTM.mft (raw, json)
Hash identifier:          NNX2GIf/ANK3VM1SpaVRqCeuGXVapKx+iKc1uCBsHG4=
Subject key identifier:   48:8C:11:1B:38:73:2D:90:D5:50:E3:50:C3:D9:E3:6C:4E:78:96:94
Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
Certificate issuer:       /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Certificate serial:       019EC0A46FA06EAF3BD249A73EFDF3232801
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
Manifest number:          1936
Signing time:             Sat 13 Jun 2026 11:01:02 +0000
Manifest this update:     Sat 13 Jun 2026 11:01:02 +0000
Manifest next update:     Sun 14 Jun 2026 11:01:02 +0000
Files and hashes:         1: 7bMPlZft64LLOc44WXpuvWHCxYI.roa (hash: ovhICafylNUsoU6ggOnBn0FV5ld7QtZ9TQT1cYD5STo=)
                          2: 8ogFWyeBf0vuQT5jhBzXspAf2rE.roa (hash: 8SLnbSVICCGBBETX/lH2EVbhNVK83HBy2quzoB78n6s=)
                          3: f8rYnfG_maNvKQzD7w8ee00CdTM.crl (hash: gOFZH39f4Zr2PO3ecRt/QEDvyFvwMy52AgDA5BnoBmE=)
                          4: ggggHoWexQd_x29XdkxpzklvtBY.roa (hash: RItnLwTh1P5BCA6CWkDZt99HLo5gT+F8X2TYgXTwevA=)
                          5: wS0apBhtiuVVHFFK87DoMQ3ejQc.roa (hash: ZNtmxsknYilQpUIhLRK+q8WsjLGRXiSlJ1H3sFAAUI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:6f:a0:6e:af:3b:d2:49:a7:3e:fd:f3:23:28:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
        Validity
            Not Before: Jun 13 11:01:02 2026 GMT
            Not After : Jun 14 11:01:02 2026 GMT
        Subject: CN=488c111b38732d90d550e350c3d9e36c4e789694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6c:85:3f:56:c6:8f:44:7b:61:e6:b3:27:45:
                    20:e7:b7:39:33:01:2d:85:e4:fe:b2:fc:8e:71:03:
                    43:9c:16:18:47:93:c9:9a:fc:e2:bf:35:a2:5e:dd:
                    c0:39:52:4d:0b:1a:f7:70:f6:f8:5b:12:7b:d9:c9:
                    33:a0:c5:4c:ed:ce:6b:d4:aa:a5:3f:df:7b:5e:ed:
                    68:3a:09:4f:d0:dd:9f:5d:2e:55:bf:36:21:11:d7:
                    50:c0:aa:dc:7e:b3:47:f6:11:c3:7e:fc:5a:02:01:
                    b0:bb:f4:f7:18:ed:4e:38:f4:ba:0e:45:48:19:25:
                    b6:ec:09:ac:4e:41:0a:7e:50:1e:a7:41:66:7b:6f:
                    aa:81:7a:98:29:42:a6:26:d9:b0:b6:64:8a:1c:84:
                    6d:01:99:9d:c2:86:5a:54:03:d6:bc:e6:88:b4:fb:
                    b3:2e:d8:c0:14:e4:de:11:91:2a:e8:7b:37:1e:fb:
                    b7:fb:1a:ea:c6:13:6f:25:fd:45:b2:1d:2c:a5:40:
                    a7:55:5b:13:64:d8:34:e0:96:5f:81:39:65:8d:f0:
                    99:8f:1b:44:f2:20:fc:78:0d:22:f0:a8:2a:d6:7a:
                    04:c4:7a:36:90:7a:1c:e2:f5:aa:1c:17:33:d5:d5:
                    33:c5:72:2d:86:e1:eb:98:1c:5a:87:39:26:66:ab:
                    22:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:8C:11:1B:38:73:2D:90:D5:50:E3:50:C3:D9:E3:6C:4E:78:96:94
            X509v3 Authority Key Identifier:
                keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:b6:ae:55:6d:40:e6:4a:6a:70:a5:d8:cd:0d:11:37:8b:c8:
         bf:1d:33:e0:4e:f3:0d:da:b3:37:9c:4f:94:cd:e2:86:8c:c3:
         ba:ff:28:de:e5:9d:d7:16:9e:e1:51:69:82:65:8a:ea:e9:b4:
         eb:97:8d:f5:3a:f4:a0:3a:94:3d:07:cf:71:cb:51:c7:cb:bc:
         69:c2:d1:71:73:d2:ff:61:e9:4b:52:78:31:1d:14:45:76:99:
         49:47:31:59:b5:e1:74:88:74:4b:94:10:ae:88:7e:cd:08:fe:
         bd:6e:98:24:52:3c:1b:a5:61:1a:ee:6a:b6:9f:80:c9:17:bb:
         bc:bd:59:f6:42:38:fc:97:8b:78:55:3b:69:d0:bc:ff:3a:db:
         ac:2f:62:0c:88:f7:61:a1:44:84:c1:ad:48:20:2d:da:b3:ac:
         96:18:a7:94:bb:48:30:83:c6:6a:28:78:e4:25:9b:bc:1d:67:
         e1:04:25:0d:d8:7e:c5:8f:1c:a1:62:29:26:35:07:87:a6:f2:
         64:ff:8c:36:76:e1:df:74:5c:a1:80:14:26:d4:a3:cb:7c:ce:
         7c:bd:7a:d6:77:66:36:20:a6:8c:26:67:e3:30:18:0d:cf:96:
         04:cb:c6:ef:9b:42:90:9a:5c:68:f3:e0:16:5c:ae:59:2f:e4:
         a6:42:b5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:07:01 2026 by rpki-client