Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
File:                     8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft (raw, json)
Hash identifier:          EKkK9UaFN2IH+YjFA0xstF9XQE5fMsQXuOpVz/wXWC8=
Subject key identifier:   79:65:92:CA:DE:84:AE:4A:A0:C1:43:7C:68:4A:68:59:D9:85:51:CC
Authority key identifier: F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78
Certificate issuer:       /CN=f1f5e0181c4bbae5c090ab159d06562f1322e278
Certificate serial:       019D9962CE8B10C1379C80BCD31447A08CE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
Manifest number:          0B7A
Signing time:             Fri 17 Apr 2026 03:01:22 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:22 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:22 +0000
Files and hashes:         1: 1e3-ee_DDB8uKbq4DDF2oeY9brA.roa (hash: d1HzxXfkVXwQpykJbxZZ+w5Pxsb18cIOczK6ype9Npo=)
                          2: 8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl (hash: Mk/Stx/ECKGN4qbmbs84Qm0MGwmQvOoneC8Y6OqJprM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:ce:8b:10:c1:37:9c:80:bc:d3:14:47:a0:8c:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1f5e0181c4bbae5c090ab159d06562f1322e278
        Validity
            Not Before: Apr 17 03:01:22 2026 GMT
            Not After : Apr 18 03:01:22 2026 GMT
        Subject: CN=796592cade84ae4aa0c1437c684a6859d98551cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:09:60:0b:27:1a:ff:fd:57:ab:69:32:fc:bc:
                    59:e6:2c:9d:ab:d6:59:40:08:ab:e6:2c:ea:c9:2d:
                    b8:de:bc:ab:79:7b:84:d1:02:b9:c9:2c:61:7a:72:
                    0f:8c:47:7d:a7:51:05:ab:0e:78:72:66:22:6c:53:
                    9e:99:8c:a8:ad:07:16:36:15:e8:11:33:8e:84:66:
                    38:cd:23:81:85:ff:82:33:61:19:11:fa:45:53:88:
                    ee:a8:a4:b5:13:b2:32:e2:74:10:03:63:ac:60:14:
                    fa:59:d7:75:9c:08:d0:52:37:02:4d:c5:15:f7:0e:
                    16:de:76:80:bf:af:64:29:0b:5f:23:4a:96:10:fa:
                    ea:e3:dc:b7:97:9f:23:7b:87:88:7e:cd:cf:3e:0a:
                    fe:66:38:d2:d0:fe:3b:26:71:bf:4a:d6:d6:74:53:
                    52:57:af:4f:a0:77:d0:20:89:59:59:5d:94:94:20:
                    dc:1b:45:a4:c6:98:7f:04:30:d4:3d:cd:a3:68:90:
                    ed:1b:c3:93:4e:a9:9c:79:cb:84:00:30:63:e3:58:
                    33:ba:1f:24:57:ae:ba:2b:f6:3c:2c:59:0c:97:f6:
                    5b:70:c8:b8:85:15:89:02:35:05:d3:cc:b3:db:28:
                    ba:db:8d:a9:42:98:1e:9d:52:49:42:6d:f3:7b:85:
                    6c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:65:92:CA:DE:84:AE:4A:A0:C1:43:7C:68:4A:68:59:D9:85:51:CC
            X509v3 Authority Key Identifier:
                keyid:F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:c2:f0:6c:2c:58:75:1c:72:1e:94:c1:83:1a:95:21:61:d6:
         cb:58:51:3e:00:bd:45:d7:60:b6:2c:0d:91:ac:ff:a8:3c:8f:
         93:3c:df:52:9d:c0:11:71:37:43:37:59:aa:3e:63:a1:1a:29:
         05:ba:69:81:a5:d9:ed:f9:df:18:36:fb:f6:38:e1:fb:1c:e2:
         1a:7b:a2:0a:27:d0:dd:53:69:c6:ac:96:90:7c:e5:38:00:90:
         86:cb:ac:20:e0:32:10:10:c8:a9:a0:dd:1b:8f:f1:3e:c4:85:
         1f:f5:89:6e:1c:6d:13:70:fc:76:6d:fe:9d:00:9c:6f:42:6e:
         9b:b1:1e:f6:cb:b2:7b:be:0b:49:82:b3:68:c0:19:92:c0:33:
         ac:88:3d:3d:50:fb:9b:ca:6c:61:aa:04:e6:86:49:1a:8b:a5:
         94:c3:7c:84:5e:1e:c1:a3:3e:1c:ac:3c:8c:d8:47:ab:b3:f5:
         e8:df:6c:b8:48:48:86:e5:5b:03:8d:d7:69:b3:33:aa:fe:51:
         d6:e5:75:cc:19:4b:78:ad:41:a1:00:e4:f3:7d:57:fa:65:90:
         96:9b:b7:24:a1:99:24:07:7d:23:f6:b3:14:7b:9a:35:34:f9:
         83:f2:e9:18:ec:f0:bc:3e:0c:7e:2e:b7:7e:78:e9:b0:76:02:
         83:e8:b8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:27:36 2026 by rpki-client