Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
File:                     8NREvH1TNNoU3oBRcrJiXpgwdj8.mft (raw, json)
Hash identifier:          acTUqxh4S0O33i+SXagl6iAiSmYkblMypD0pbsKs5c8=
Subject key identifier:   6A:18:B8:E8:6C:93:C1:B4:83:1C:30:5A:AD:29:71:4E:C2:C5:41:25
Authority key identifier: F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
Certificate issuer:       /CN=f0d444bc7d5334da14de805172b2625e9830763f
Certificate serial:       019EC03613F4EEDDEAD71C58A3EC29665601
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
Manifest number:          08DB
Signing time:             Sat 13 Jun 2026 09:00:29 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:29 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:29 +0000
Files and hashes:         1: 8NREvH1TNNoU3oBRcrJiXpgwdj8.crl (hash: T1BU0zbh3wAlLZzub3Pm6+u5vOmYn3/7G4qQb/x1nbU=)
                          2: wF_q_VT2vLpTBM5Oeqm7M9XsChw.roa (hash: aN3q8Drn260bx+eRQtUiCzDsSBkZm+NdLG36hflpNDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:13:f4:ee:dd:ea:d7:1c:58:a3:ec:29:66:56:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0d444bc7d5334da14de805172b2625e9830763f
        Validity
            Not Before: Jun 13 09:00:29 2026 GMT
            Not After : Jun 14 09:00:29 2026 GMT
        Subject: CN=6a18b8e86c93c1b4831c305aad29714ec2c54125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4c:75:f9:9b:3d:e8:62:b6:1f:d7:8e:af:72:
                    0b:ee:d3:1e:77:04:6b:60:85:d7:bc:c3:8d:a1:a6:
                    4e:95:c1:03:1d:0f:a9:3a:82:53:90:a9:76:ec:8b:
                    15:91:e0:ea:ba:11:ce:6f:e0:06:96:21:d2:15:45:
                    5d:b5:2a:b8:b5:69:18:d2:a8:ca:ca:ba:c2:78:f8:
                    00:cb:b5:77:6d:c8:46:2c:3d:83:5c:5c:b2:bc:af:
                    21:82:ff:bc:62:31:d9:4b:c4:69:0a:85:93:d5:e1:
                    ba:02:52:18:ac:29:1a:5c:e0:8d:be:60:0e:ef:e2:
                    8d:7e:8b:ad:c5:fa:cc:d1:7b:a7:a4:9a:23:2e:1b:
                    b4:49:40:59:a0:a7:c0:44:a4:95:d6:6a:6c:f4:99:
                    51:e1:e9:28:70:5d:10:94:4c:91:7c:a6:5d:a5:14:
                    39:30:88:cd:68:d5:f0:4d:7d:b9:86:f8:aa:bd:07:
                    16:27:54:a2:c9:4c:04:07:25:cc:f8:0b:48:b9:6f:
                    30:a4:97:16:ff:fc:8f:20:27:50:8c:f7:9b:44:2a:
                    c9:b2:bf:e9:40:c6:0d:0c:6c:e7:2d:57:67:5b:42:
                    ae:95:3e:85:45:b7:25:ca:14:68:66:ab:66:49:db:
                    b5:df:fa:f8:d1:2c:3f:4a:40:ed:85:44:33:36:7a:
                    f9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:18:B8:E8:6C:93:C1:B4:83:1C:30:5A:AD:29:71:4E:C2:C5:41:25
            X509v3 Authority Key Identifier:
                keyid:F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:bb:f5:14:d9:2e:f6:34:e5:ec:11:93:19:b4:0c:c4:3a:03:
         6e:a1:dc:51:d0:e0:9b:02:19:97:e8:1a:37:74:b5:89:eb:38:
         5b:74:08:30:40:27:98:cf:1a:07:54:89:b3:00:4e:b4:26:46:
         f7:9d:5c:3c:68:7f:c0:63:d4:77:c5:0a:a8:cc:ee:2c:36:a8:
         45:8e:28:cf:62:d4:55:a3:1e:19:b9:ee:ad:65:7e:d9:5f:72:
         8b:7d:b1:0f:7b:94:47:90:44:a5:a0:63:62:b5:38:fc:5d:85:
         a2:2a:94:39:93:8b:45:f3:b6:24:70:75:68:bb:07:ae:4b:0c:
         d5:b8:ab:57:89:16:f8:83:5b:3c:31:65:4b:63:af:e0:fd:fb:
         3b:05:a4:ae:05:ac:6f:50:32:fd:14:60:5c:80:03:6a:dc:de:
         2c:e9:be:8e:50:34:44:9e:d1:b0:ad:7e:bb:e5:eb:43:b8:86:
         7e:9e:64:50:d8:4a:29:15:66:a6:05:aa:90:f7:0c:b2:ca:6a:
         6b:a1:2b:ca:09:86:11:2b:09:f2:64:65:82:f4:7c:27:fc:e7:
         1f:0e:59:26:50:51:92:d9:43:26:79:26:ba:3e:94:5c:ea:c0:
         42:22:93:dd:4d:b4:5c:bb:c7:b6:0f:cd:96:ef:4a:ea:5d:10:
         d3:e7:59:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:43:55 2026 by rpki-client