Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
File:                     8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft (raw, json)
Hash identifier:          71jpcG0tYsqJY5QzT9KSrAV7TiRyDvmZFPuZ+TpQPn8=
Subject key identifier:   41:54:90:B3:77:3D:B5:DB:6B:C8:71:31:3D:9B:09:E0:69:D0:86:80
Authority key identifier: F2:60:07:5C:09:44:FB:16:34:B6:28:BB:10:B6:7F:12:C8:73:E4:24
Certificate issuer:       /CN=f260075c0944fb1634b628bb10b67f12c873e424
Certificate serial:       019EC224ACE4B45A391673CB568CD9CB956E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
Manifest number:          02B1
Signing time:             Sat 13 Jun 2026 18:00:43 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:43 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:43 +0000
Files and hashes:         1: 8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl (hash: 093KOCGduUICvFe7/WAn3SDQ6j8tB4l/8cx2x51ZXs8=)
                          2: LS1I0LR07OhJxEEUNJqhn1-nNT0.roa (hash: 05VWudDvTZxRagJ/ZMpYgYcO8jy0CMReHlty6IA1+UM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:ac:e4:b4:5a:39:16:73:cb:56:8c:d9:cb:95:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f260075c0944fb1634b628bb10b67f12c873e424
        Validity
            Not Before: Jun 13 18:00:43 2026 GMT
            Not After : Jun 14 18:00:43 2026 GMT
        Subject: CN=415490b3773db5db6bc871313d9b09e069d08680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6d:d5:cf:64:05:b9:3a:5e:e4:a0:05:9a:3b:
                    90:db:55:99:55:b6:8f:14:ea:de:e9:9b:de:cd:93:
                    6f:04:83:d2:8a:77:37:8d:19:e6:d1:55:c8:8e:9b:
                    f5:fa:1e:59:d2:df:b1:b3:d1:6a:c8:1c:7c:1d:b7:
                    6e:b6:64:d0:9b:76:92:f4:e5:4b:6e:ae:ca:99:b6:
                    bd:3e:07:a0:4f:c9:8c:82:b3:db:53:56:3e:56:00:
                    93:eb:03:ce:76:08:c7:f6:4c:72:ad:4e:4b:ea:60:
                    41:fa:21:9f:65:1f:85:b1:13:5a:dc:39:c8:7c:75:
                    da:a2:78:ab:11:94:36:40:ff:d5:4e:59:e9:f2:5d:
                    ae:4f:86:61:93:18:c4:36:65:ee:de:0a:95:a5:26:
                    a6:23:a8:92:92:47:91:7e:24:4c:01:c5:a3:9c:5e:
                    d7:7f:36:64:9e:3d:f7:46:ef:d6:c4:57:b6:b3:71:
                    f4:4a:b4:ed:1b:30:8d:d2:78:95:69:88:51:6c:ea:
                    ca:b0:af:50:82:b2:d7:27:22:98:27:46:1f:28:42:
                    f0:76:7c:cf:7b:f6:bf:6d:ec:88:9d:de:f9:a8:bc:
                    01:41:4f:48:81:13:a0:70:ff:38:29:12:39:89:f3:
                    82:72:c4:9a:de:62:16:7d:e2:32:1f:52:7d:f0:f9:
                    40:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:54:90:B3:77:3D:B5:DB:6B:C8:71:31:3D:9B:09:E0:69:D0:86:80
            X509v3 Authority Key Identifier:
                keyid:F2:60:07:5C:09:44:FB:16:34:B6:28:BB:10:B6:7F:12:C8:73:E4:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:9b:6d:2f:45:bd:f2:a2:a1:25:4a:aa:40:a2:1a:75:56:bf:
         e9:f0:cf:25:f2:56:62:18:69:67:3d:83:59:0e:4e:74:b7:7a:
         a9:f0:a9:8b:65:86:4f:b8:02:e7:6f:23:da:2b:77:1c:c6:0a:
         72:b7:65:85:a7:28:c5:7f:76:e0:7e:10:6b:a4:85:27:ed:82:
         0b:44:af:1b:84:10:ec:9b:18:91:89:29:07:ff:ed:0c:e8:31:
         5e:49:21:2e:c5:5d:6a:0d:f5:8b:ff:fe:9c:61:22:63:ba:54:
         78:b1:82:fd:27:19:84:65:ee:53:bd:e1:21:99:4f:53:c0:3c:
         33:4f:79:c2:92:78:a6:22:34:6d:2f:48:d9:ec:82:b5:50:3f:
         b4:75:6b:01:3e:72:74:a6:7a:0e:53:f7:e9:63:1d:19:5d:99:
         cc:0a:f2:db:a3:ec:03:1c:85:64:26:7c:0b:8e:b5:74:f6:4e:
         dc:8e:c5:16:ae:fd:af:ba:c4:9f:af:66:b4:7f:7c:66:9b:ce:
         c0:21:60:61:5d:03:d6:26:db:79:af:77:f1:c8:4e:16:b0:21:
         3f:78:4d:99:fa:50:48:a9:1b:af:c7:57:38:78:23:7f:04:d1:
         7a:c6:63:b0:09:28:2a:30:a4:81:a2:85:ce:ae:fa:96:69:68:
         5c:13:74:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:51:02 2026 by rpki-client