Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
File:                     8v_48bgcLGFPw-lOsXy6CUAhGgE.mft (raw, json)
Hash identifier:          ZZKJ5xdtjhX/DlJD5sU025zGGQmLzvmIf1iK10DQ36I=
Subject key identifier:   98:88:75:4C:53:4D:DF:D4:1D:E0:61:27:FB:B7:02:63:86:A0:E8:AC
Authority key identifier: F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01
Certificate issuer:       /CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
Certificate serial:       019EBE10A6FBB08AA145DE3CDDA53F525658
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
Manifest number:          1958
Signing time:             Fri 12 Jun 2026 23:00:22 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:22 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:22 +0000
Files and hashes:         1: 8v_48bgcLGFPw-lOsXy6CUAhGgE.crl (hash: N68GL7LU6Zjqy14gebggP6E6ZxTZ4dt9Ejk97fI9oDM=)
                          2: jRpXU9eqysmsAJR80B3Aax6y_BQ.roa (hash: XRM8W3BWblehC6PY0lBpqApKx5419cv1D4/Jksn00jI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:10:a6:fb:b0:8a:a1:45:de:3c:dd:a5:3f:52:56:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
        Validity
            Not Before: Jun 12 23:00:22 2026 GMT
            Not After : Jun 13 23:00:22 2026 GMT
        Subject: CN=9888754c534ddfd41de06127fbb7026386a0e8ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7d:bb:ba:2d:34:03:f9:88:3d:e5:6a:7d:4e:
                    48:91:b3:b9:8b:cc:4a:c2:13:6d:2d:70:d7:c7:99:
                    50:b6:c9:59:44:3e:e0:1b:38:52:1b:77:1d:7c:16:
                    ef:b1:6f:99:70:02:11:d4:0b:8b:1f:5c:56:5b:b0:
                    94:f0:c1:b2:bc:ad:1b:ab:f2:43:79:2d:f0:f9:98:
                    4b:14:51:2e:03:dc:ef:4a:6b:0b:de:eb:82:b9:ea:
                    9d:15:69:6d:0d:c8:77:f7:73:b3:50:e8:f7:81:de:
                    5a:c0:a9:b7:ae:1a:a0:b7:32:a2:f3:12:13:ee:25:
                    05:a7:cd:00:ee:bb:f7:51:34:d9:20:1b:bb:38:95:
                    0d:26:ed:3b:1a:cf:54:6a:b3:3f:81:bf:88:2a:82:
                    aa:36:3f:ad:f1:10:ad:b9:0a:18:76:36:02:47:80:
                    c5:d8:71:f3:54:ed:6d:0d:4b:78:72:86:c1:72:b3:
                    97:08:06:e5:38:11:f9:f5:3b:7b:5a:c6:ad:b6:eb:
                    bc:7a:23:a4:44:72:a6:ad:90:a3:95:49:28:71:50:
                    93:fc:c9:2c:5e:b7:f5:ae:48:a9:97:d6:5f:fe:77:
                    96:df:63:0b:a1:8c:58:50:30:ad:00:6c:ce:79:fc:
                    3f:93:a4:5b:e6:f8:6a:47:bd:0a:e8:68:77:3c:53:
                    29:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:88:75:4C:53:4D:DF:D4:1D:E0:61:27:FB:B7:02:63:86:A0:E8:AC
            X509v3 Authority Key Identifier:
                keyid:F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:17:88:cc:02:16:c1:ab:c9:43:ed:02:ef:7a:72:a8:fd:e7:
         20:42:0f:be:a5:18:a9:7c:ae:04:e3:88:33:b5:05:83:fe:07:
         cd:68:47:f9:f1:96:bc:8a:b1:0a:b4:98:51:99:42:a6:f0:20:
         be:0e:c6:b1:f3:14:b0:46:a4:26:6a:42:2d:0c:8f:72:e2:5f:
         9c:5a:09:12:24:05:73:3a:ec:aa:f1:5e:cd:13:15:49:2e:87:
         5c:cc:7b:93:33:2e:dc:7a:79:c2:df:49:f5:74:8e:d1:99:15:
         e5:67:06:07:94:b5:44:d4:bc:09:53:2e:cb:43:82:78:45:f1:
         59:3c:ab:93:81:34:a7:04:e1:ff:30:3a:7d:c4:30:49:1c:44:
         b2:b8:b6:92:d8:22:c8:a0:79:7b:a3:e5:4d:76:d5:8b:be:db:
         5d:8a:73:ca:7b:f9:93:da:4a:a5:06:bf:d9:02:8e:61:9f:e0:
         c1:7f:d1:47:7e:d7:86:ce:24:25:dd:38:f4:7b:39:28:3c:b5:
         70:14:7f:c8:5e:61:94:bf:75:87:39:60:fe:a2:1c:3d:65:c5:
         d2:25:77:73:a2:75:fe:ed:1b:ec:1d:25:c6:96:8f:ff:c2:f1:
         37:27:cd:fd:4d:76:b7:ed:50:87:a1:26:e4:6c:08:55:fa:bc:
         e7:b9:40:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:57:02 2026 by rpki-client