Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
File:                     f8rYnfG_maNvKQzD7w8ee00CdTM.mft (raw, json)
Hash identifier:          8iBgVx1NfHKyPZrDUtdL2IQeiNikErNqm3qKoQF79UQ=
Subject key identifier:   EF:C9:89:49:7D:74:CD:7F:8F:EF:9A:FA:82:AC:0B:2F:A2:84:9A:86
Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
Certificate issuer:       /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Certificate serial:       019D992B581ADA3B6877022F03860670EC44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
Manifest number:          189D
Signing time:             Fri 17 Apr 2026 02:00:47 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:47 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:47 +0000
Files and hashes:         1: 7bMPlZft64LLOc44WXpuvWHCxYI.roa (hash: ovhICafylNUsoU6ggOnBn0FV5ld7QtZ9TQT1cYD5STo=)
                          2: 8ogFWyeBf0vuQT5jhBzXspAf2rE.roa (hash: 8SLnbSVICCGBBETX/lH2EVbhNVK83HBy2quzoB78n6s=)
                          3: f8rYnfG_maNvKQzD7w8ee00CdTM.crl (hash: MfDhu/XC9TPjLEbu113p237jXiawVYsNV8gF08m3vbk=)
                          4: ggggHoWexQd_x29XdkxpzklvtBY.roa (hash: RItnLwTh1P5BCA6CWkDZt99HLo5gT+F8X2TYgXTwevA=)
                          5: wS0apBhtiuVVHFFK87DoMQ3ejQc.roa (hash: ZNtmxsknYilQpUIhLRK+q8WsjLGRXiSlJ1H3sFAAUI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:58:1a:da:3b:68:77:02:2f:03:86:06:70:ec:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
        Validity
            Not Before: Apr 17 02:00:47 2026 GMT
            Not After : Apr 18 02:00:47 2026 GMT
        Subject: CN=efc989497d74cd7f8fef9afa82ac0b2fa2849a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fb:11:43:45:f2:89:c8:d6:1e:9a:15:78:78:
                    49:04:03:4a:c8:64:54:b9:23:c0:16:b5:f2:0d:c9:
                    c8:3d:9c:fc:96:0c:06:9c:85:64:0c:0c:9a:31:66:
                    59:07:58:51:1d:c4:f9:c8:6d:e1:28:70:59:7c:be:
                    dd:f6:d1:09:b7:c7:86:54:2a:6c:9a:0a:38:cb:8f:
                    45:ec:17:54:38:8c:ef:94:75:b1:3f:9a:0a:95:99:
                    99:c3:86:ad:4f:40:8c:7e:d3:d2:dc:c9:fb:a8:a9:
                    09:f7:57:9f:09:65:8a:c3:ab:21:b7:d2:39:39:59:
                    9e:fc:89:aa:e3:0a:af:d5:81:79:ad:32:b8:9d:6b:
                    77:a8:c9:d9:cb:f7:4c:f1:bc:da:36:f0:8b:8b:42:
                    71:ef:90:f9:1f:aa:20:82:84:b3:39:99:df:c0:90:
                    46:72:4f:b6:ba:65:62:0b:8d:0a:d3:9d:c2:89:5b:
                    6b:27:90:52:42:1e:2c:05:7e:ae:60:c7:9e:f6:f7:
                    38:13:2a:bd:a3:9d:c7:d9:22:61:68:80:56:01:a2:
                    31:af:06:3e:03:01:31:61:df:58:d3:43:7a:85:c9:
                    38:fc:28:de:c7:8b:8f:11:f6:c9:19:2a:41:f8:bb:
                    53:5a:07:02:b3:15:b3:08:c8:af:9a:07:7d:a2:3e:
                    64:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C9:89:49:7D:74:CD:7F:8F:EF:9A:FA:82:AC:0B:2F:A2:84:9A:86
            X509v3 Authority Key Identifier:
                keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:f0:9c:17:a0:20:da:28:6a:66:5c:56:a7:f5:f0:08:f0:38:
         cb:ab:0a:7f:47:75:3e:f9:9d:13:15:43:7c:39:d7:06:f9:94:
         fe:4a:98:fd:12:be:aa:c5:56:6d:13:2d:c2:50:a6:73:dd:06:
         be:89:8e:ef:86:8e:0b:ed:c5:f1:5e:24:b8:12:3e:ae:03:2b:
         32:a5:af:c7:f1:b1:af:a7:bf:4c:12:8a:26:8a:8d:66:1d:76:
         0f:26:f2:7d:20:c6:97:3c:16:7c:53:df:62:6b:5f:84:7a:f3:
         1b:a9:77:0e:16:ac:22:3b:03:ad:4e:f8:6c:59:04:37:12:1f:
         0f:d1:cc:fb:bf:fe:7f:87:71:63:00:1c:26:08:17:7c:35:42:
         35:3c:67:20:7e:fc:a7:2a:09:77:fe:cf:eb:59:a1:28:82:af:
         01:40:81:11:45:66:fc:ca:53:44:37:53:41:ea:42:f4:4f:52:
         a5:a5:b2:2a:8d:d3:2b:46:9e:22:b7:21:16:5f:59:c5:43:6e:
         51:94:5a:ea:2d:c1:be:b1:02:b7:76:a1:aa:3b:5d:55:0d:85:
         03:be:9f:2e:08:4f:58:22:22:75:e0:3a:a4:e2:a5:04:de:0d:
         4f:fc:70:6c:72:74:58:3c:96:63:37:c7:8b:9b:5c:57:b8:d8:
         3f:ea:30:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:28:34 2026 by rpki-client