Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
File:                     8tWTsch7gXOexBkQKVvzhfLJqZI.mft (raw, json)
Hash identifier:          T7SKompgWahHbSexDxDcV57QL91YtnDAinPH8kNB9EE=
Subject key identifier:   7A:12:06:87:12:B0:52:A2:87:11:3F:57:A0:24:40:9A:F6:C9:DA:C0
Authority key identifier: F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
Certificate issuer:       /CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Certificate serial:       019EBF91CC684AE2DB116819D2DCB36C49CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
Manifest number:          124F
Signing time:             Sat 13 Jun 2026 06:01:03 +0000
Manifest this update:     Sat 13 Jun 2026 06:01:03 +0000
Manifest next update:     Sun 14 Jun 2026 06:01:03 +0000
Files and hashes:         1: 8tWTsch7gXOexBkQKVvzhfLJqZI.crl (hash: PHSr4N4CZLs0p51BtrIEwnGbYFUM+4UVGT0yHxoIrD4=)
                          2: VK5J5QXmsEfKr-yeuBSA7pgMRS0.roa (hash: QEOQEZoGmfNdE7eYFQFsPYIivVEyHZdR3wVt3CbFPeo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:cc:68:4a:e2:db:11:68:19:d2:dc:b3:6c:49:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d593b1c87b81739ec41910295bf385f2c9a992
        Validity
            Not Before: Jun 13 06:01:03 2026 GMT
            Not After : Jun 14 06:01:03 2026 GMT
        Subject: CN=7a12068712b052a287113f57a024409af6c9dac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0d:90:4f:15:39:b4:11:0d:51:c5:de:74:73:
                    5f:fa:71:e9:61:11:68:30:5e:03:52:ed:a9:71:49:
                    0d:30:b4:cc:a9:2a:32:2c:f1:d8:4c:10:08:bb:16:
                    0f:49:88:5f:d7:b9:47:72:cc:16:b6:d8:34:b8:09:
                    aa:76:1b:bc:2f:2c:ef:92:72:3f:e7:e1:bf:dd:bf:
                    af:26:7c:3a:23:c5:84:a1:65:9c:0d:b1:6a:f2:71:
                    12:0c:f8:ac:8d:b7:87:4f:42:4e:76:7a:db:71:8a:
                    a8:fd:34:3b:94:2a:90:be:54:5a:55:3c:16:3c:52:
                    f7:3d:ec:e1:52:ad:2b:9e:1e:c6:63:d3:11:82:05:
                    48:91:8a:de:64:3a:ed:5a:e2:f1:0c:b5:d7:1a:a6:
                    86:f7:5b:2e:3e:14:0c:75:fc:b6:f6:53:a3:30:b4:
                    07:47:33:4a:f6:a4:cd:b5:45:0c:36:3f:39:07:a6:
                    49:8c:11:22:af:63:ab:e3:9f:61:26:00:92:c0:8e:
                    48:78:ed:c2:5d:1f:2c:b3:74:82:89:66:46:5c:37:
                    c2:fa:66:4a:c0:01:84:c0:e0:3a:2e:5d:c9:12:1f:
                    77:0b:70:0b:a3:d1:b5:32:38:74:b6:de:08:be:49:
                    d1:62:30:ad:43:33:39:bd:e7:76:62:ab:9f:17:c8:
                    a2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:12:06:87:12:B0:52:A2:87:11:3F:57:A0:24:40:9A:F6:C9:DA:C0
            X509v3 Authority Key Identifier:
                keyid:F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:57:36:db:26:0e:24:d5:b0:e3:55:a9:e5:ba:76:e8:79:ef:
         4c:d9:30:b0:12:cf:b8:28:22:de:db:1e:7a:c0:76:f9:02:89:
         9a:77:b5:93:8f:8a:ff:19:c1:23:8b:36:e1:44:11:0a:ad:d6:
         58:f3:20:de:3f:5d:16:e2:a5:2d:be:78:ef:71:42:28:f1:bf:
         79:36:bb:81:62:63:4b:59:c2:de:28:cf:d0:22:fc:4c:25:86:
         1e:8d:f0:c6:fd:ea:eb:55:e2:f0:6d:bd:5f:5c:70:bb:e7:d6:
         b5:9f:ff:7b:12:05:9e:c5:47:55:ea:44:07:3e:1e:78:a5:8c:
         68:a3:c1:ef:b1:d7:4e:32:8b:11:69:2d:88:17:e9:15:ee:9b:
         e1:2f:c7:1f:81:da:48:61:7a:00:e1:5b:d8:68:0b:d6:89:eb:
         0c:06:1e:d4:b2:75:f0:9d:c6:ba:7d:46:08:41:c2:ef:05:2f:
         fa:19:e9:4e:c2:15:0a:e1:cc:34:d7:ff:f8:e5:63:e3:74:29:
         02:34:a5:c8:46:a3:90:2b:66:fa:41:08:75:15:f3:c3:96:e2:
         0f:b0:a8:5c:30:44:48:bc:96:9f:4f:b5:6b:2f:04:fe:01:76:
         ce:5b:3b:b0:40:46:56:54:de:46:0b:a2:12:87:40:2e:5c:ec:
         27:66:3a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:55:21 2026 by rpki-client