Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
File:                     8JLOTWiFNFSE6Zp312Fm_HICIDM.mft (raw, json)
Hash identifier:          GjVOCJP+x3hYjY1snKXrYTsUGHpBYQe2CUaf2rdtGJU=
Subject key identifier:   6F:C1:4B:E1:24:AD:A7:F8:F2:20:44:40:88:5F:A8:E7:03:DE:33:9D
Authority key identifier: F0:92:CE:4D:68:85:34:54:84:E9:9A:77:D7:61:66:FC:72:02:20:33
Certificate issuer:       /CN=f092ce4d6885345484e99a77d76166fc72022033
Certificate serial:       019EBF5B256812E14EFB371FF2158A741880
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
Manifest number:          1958
Signing time:             Sat 13 Jun 2026 05:01:21 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:21 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:21 +0000
Files and hashes:         1: 8JLOTWiFNFSE6Zp312Fm_HICIDM.crl (hash: fcztGS6/P8hZ4uHEj8nRapFS3BSJKmQYXlwO+9pWzbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5b:25:68:12:e1:4e:fb:37:1f:f2:15:8a:74:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f092ce4d6885345484e99a77d76166fc72022033
        Validity
            Not Before: Jun 13 05:01:21 2026 GMT
            Not After : Jun 14 05:01:21 2026 GMT
        Subject: CN=6fc14be124ada7f8f2204440885fa8e703de339d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a4:35:e2:82:c6:a9:de:8d:ca:e8:fb:45:bc:
                    bd:af:d2:96:51:b8:7b:e5:01:00:9a:19:8e:2e:85:
                    79:3c:a0:5a:7e:3e:6a:9b:45:46:df:a7:45:d0:ec:
                    b4:f1:60:e9:68:88:96:ec:0c:09:ea:11:a8:ed:85:
                    00:cc:e6:f8:ed:28:a9:92:8d:35:8d:44:c3:07:7f:
                    97:f6:72:41:88:9a:e1:09:ec:06:c7:52:3a:3c:5c:
                    93:2f:4e:ec:77:6e:75:03:99:94:8a:f9:76:ab:70:
                    fe:54:03:98:86:8b:40:6a:54:61:7c:90:a1:e0:40:
                    6c:e6:b2:1e:9b:bc:1d:b5:25:dd:fc:f3:01:32:4f:
                    cb:2c:4b:bf:53:0a:b2:f0:88:59:0c:8c:24:fd:74:
                    ca:eb:8d:ee:36:05:11:f0:f1:1c:9a:a7:a3:c4:d3:
                    98:e5:97:9b:db:c9:42:11:37:2f:4f:7e:57:d2:e9:
                    6a:4c:3c:16:c8:9e:1d:ce:eb:f6:5b:ba:f5:5c:56:
                    4f:f1:ea:67:ea:13:25:71:3a:ab:70:92:68:27:6a:
                    bd:80:6a:ff:5b:5f:bd:b9:74:62:0e:99:db:fd:15:
                    2e:42:60:9e:bd:77:71:54:24:29:4c:6d:c7:08:2a:
                    5c:fd:6c:00:19:0c:b0:62:b8:6a:9d:a7:1b:26:b8:
                    48:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C1:4B:E1:24:AD:A7:F8:F2:20:44:40:88:5F:A8:E7:03:DE:33:9D
            X509v3 Authority Key Identifier:
                keyid:F0:92:CE:4D:68:85:34:54:84:E9:9A:77:D7:61:66:FC:72:02:20:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:b5:fc:ea:34:3b:c8:b5:e7:51:2c:e7:4f:74:f6:87:67:d4:
         0b:c1:bd:b1:ef:df:f6:58:32:61:05:c5:80:27:99:84:f6:5b:
         0e:1e:75:b1:64:c2:ae:71:0f:5e:1a:49:25:a4:4c:25:a7:1e:
         2e:88:87:70:67:d2:4f:c4:d3:93:91:3f:04:f7:d2:cb:74:5f:
         bf:6f:c6:f9:7a:79:d8:67:1f:81:1e:97:7c:3c:99:ae:d0:d0:
         24:e0:04:8f:26:79:1d:2f:c9:cb:e6:09:76:0a:2e:fd:ce:7c:
         a9:5d:b4:26:cd:98:cd:f3:58:63:b7:af:50:d9:91:4d:81:4c:
         d4:53:63:79:4b:d2:b0:29:5f:2b:47:1f:60:8a:a4:f6:46:85:
         bc:68:51:e1:e2:70:10:71:8b:91:8d:e1:0e:15:45:44:1b:c5:
         73:b8:57:31:95:78:f2:e2:41:6d:54:85:d6:0a:a2:75:78:f3:
         d8:5b:f9:31:54:a1:cb:93:c0:00:8e:96:21:b2:c8:27:ed:ea:
         e9:ea:c8:6c:06:f0:e1:5d:50:78:ab:c6:84:8d:48:1d:c1:79:
         d2:62:cd:24:9f:da:35:90:01:29:92:35:89:38:1c:76:62:3f:
         91:67:b4:61:22:3c:e7:7e:3a:9e:05:cc:37:10:d2:12:d1:3c:
         fe:81:94:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:36:03 2026 by rpki-client