Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.mft
File:                     8QEB-_qGP-Reriv2uX4O_n7IMSU.mft (raw, json)
Hash identifier:          g3Rh1uPJf10Xx/ugCb9wIKcFSD14yJDSc/RQcRYfdoE=
Subject key identifier:   84:0A:5D:5B:87:C9:C3:AD:53:F3:46:87:93:5B:D4:8E:56:E7:8E:29
Authority key identifier: F1:01:01:FB:FA:86:3F:E4:5E:AE:2B:F6:B9:7E:0E:FE:7E:C8:31:25
Certificate issuer:       /CN=f10101fbfa863fe45eae2bf6b97e0efe7ec83125
Certificate serial:       019D99D089D264CA4A85428F878EB1B9B631
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8QEB-_qGP-Reriv2uX4O_n7IMSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.mft
Manifest number:          086D
Signing time:             Fri 17 Apr 2026 05:01:13 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:13 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:13 +0000
Files and hashes:         1: 8QEB-_qGP-Reriv2uX4O_n7IMSU.crl (hash: i90u5VHue4adSgthPLilnwgQtZ55otBpxr5spVtnku8=)
                          2: NwpxsBvkXInCfE7s58C2EVrv1wo.roa (hash: T0KsGiCR7aM3uhR3oT8/7BFXwqzPIAkn3MY+dfdaeXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8QEB-_qGP-Reriv2uX4O_n7IMSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:89:d2:64:ca:4a:85:42:8f:87:8e:b1:b9:b6:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f10101fbfa863fe45eae2bf6b97e0efe7ec83125
        Validity
            Not Before: Apr 17 05:01:13 2026 GMT
            Not After : Apr 18 05:01:13 2026 GMT
        Subject: CN=840a5d5b87c9c3ad53f34687935bd48e56e78e29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:63:10:51:28:ea:d8:b3:de:35:fa:21:4e:88:
                    ee:c1:c0:d1:f1:31:0a:72:e0:9c:33:81:50:60:b6:
                    c9:c1:f6:d6:ff:c8:90:3f:88:41:99:22:7f:a0:50:
                    21:63:86:a8:2f:4a:7d:c4:ec:39:2d:46:06:89:f8:
                    6f:fa:f0:0e:0a:b9:f2:9e:ee:88:66:67:f6:e3:50:
                    e5:40:36:a8:03:1b:78:29:49:2c:c4:86:eb:f7:bd:
                    d0:c3:4e:fc:58:5f:51:53:11:c8:16:fd:30:ac:31:
                    85:6e:e5:31:9f:b3:9e:b8:0c:7a:3c:c6:58:e4:0a:
                    57:4c:f5:61:39:6d:52:2c:44:92:1f:0d:33:2f:3e:
                    e9:8d:b4:d5:ad:2c:b7:0a:c1:c5:00:d7:fc:1c:1d:
                    5e:b2:6a:55:2e:38:ac:fe:82:4b:78:32:04:20:74:
                    30:ba:b9:bc:dc:38:cc:53:58:1d:89:de:c8:bb:05:
                    3b:fa:8b:f3:24:87:65:70:a8:64:a0:e8:b9:67:5f:
                    a2:09:e1:31:cb:73:a8:da:8f:d2:fa:30:17:b6:a9:
                    a9:dc:81:ae:c4:62:86:fb:57:62:ea:63:61:1d:ac:
                    9d:e6:fe:c9:4b:b5:68:c2:5c:e1:b8:64:a9:d8:58:
                    f0:fe:a9:0e:a2:aa:f5:5b:32:c4:e1:d0:33:1f:dd:
                    b6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:0A:5D:5B:87:C9:C3:AD:53:F3:46:87:93:5B:D4:8E:56:E7:8E:29
            X509v3 Authority Key Identifier:
                keyid:F1:01:01:FB:FA:86:3F:E4:5E:AE:2B:F6:B9:7E:0E:FE:7E:C8:31:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QEB-_qGP-Reriv2uX4O_n7IMSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:bc:33:c9:7c:f4:26:d5:ba:92:b6:6f:ec:a0:28:7a:a7:3e:
         45:19:10:6d:6e:90:b8:5a:92:07:b8:90:5c:5e:fe:00:5c:fb:
         0c:1d:6c:76:9c:76:75:55:01:33:09:f6:60:ca:a3:3f:89:e4:
         17:34:4f:4b:93:45:7c:23:6b:a5:c7:0a:e2:60:5d:cf:87:6a:
         47:5d:d5:d0:cd:de:a5:9d:e0:47:27:27:f3:38:46:1c:75:3d:
         50:78:c9:3f:f0:70:97:b0:88:40:81:11:df:86:74:92:7d:70:
         a3:01:19:5f:98:40:d2:ec:50:ea:7c:5a:4e:a5:88:ad:e2:3c:
         e1:53:09:3d:11:13:a8:31:fa:01:ef:49:bc:df:09:0c:8a:7a:
         20:cb:a6:11:94:14:cd:3f:8d:3e:d0:2f:fb:68:b1:75:94:00:
         91:be:33:82:c2:15:3b:6b:52:18:e0:e4:b6:aa:46:d8:96:61:
         4a:49:a3:e9:39:ad:64:d8:78:2c:d6:44:d5:84:ff:5b:eb:d2:
         2f:b7:be:07:78:e3:17:25:53:0e:7b:b0:71:ee:2e:99:85:75:
         a4:5a:1f:e5:fb:87:93:48:4c:14:99:ec:30:7c:79:aa:68:e6:
         4c:12:2b:b8:21:36:19:31:93:7a:6f:91:f4:27:f2:5b:b3:80:
         f1:8d:ca:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:39:38 2026 by rpki-client