Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
File:                     8NXf3eTWeccRzOBu30A2yk5cwQM.mft (raw, json)
Hash identifier:          j0OuuDcc7AMpcxzgVNhQwwiPQg26by8MBmDt8HHlmck=
Subject key identifier:   62:6B:12:0B:02:97:CF:84:EF:1C:75:30:D2:59:1D:3F:59:4E:9B:9D
Authority key identifier: F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
Certificate issuer:       /CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Certificate serial:       019DA3411D888E2CFD6ABD23E025944D6633
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
Manifest number:          1054
Signing time:             Sun 19 Apr 2026 01:00:46 +0000
Manifest this update:     Sun 19 Apr 2026 01:00:46 +0000
Manifest next update:     Mon 20 Apr 2026 01:00:46 +0000
Files and hashes:         1: 8NXf3eTWeccRzOBu30A2yk5cwQM.crl (hash: ghuxA9oviMZRy2a4PxHte8UobeEuWfTG0XilOVozBtY=)
                          2: kAZmzQ0U-tWvr0f-02x69bXjUAU.roa (hash: 5WlvJHiQOeb7v4dnN4FdtefOtV8drHOu9JZO31PSCrM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 01:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:41:1d:88:8e:2c:fd:6a:bd:23:e0:25:94:4d:66:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
        Validity
            Not Before: Apr 19 01:00:46 2026 GMT
            Not After : Apr 20 01:00:46 2026 GMT
        Subject: CN=626b120b0297cf84ef1c7530d2591d3f594e9b9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8c:52:c8:ec:6e:5b:75:f3:a0:7d:59:d1:a2:
                    97:6e:08:d1:7c:c0:54:f7:17:c9:ef:86:a3:c1:9e:
                    15:8c:11:7c:98:3d:29:6f:7f:9f:5e:0c:e7:7d:6e:
                    c8:3b:9d:34:a2:2e:8a:cf:e3:ce:bd:f6:c3:b1:61:
                    5a:77:5d:1e:fe:d5:b3:4b:b3:cf:55:da:00:4f:9d:
                    a0:3e:82:af:78:5f:c8:e9:e5:9a:a1:16:12:04:a6:
                    9c:fe:b6:99:87:99:38:b8:2e:2b:00:72:22:a4:d8:
                    f8:fe:38:03:e3:83:f4:ea:fd:c5:d8:cf:35:1e:99:
                    3b:5a:bf:0d:1a:38:cb:89:40:50:52:d0:41:c6:f5:
                    2b:a4:58:b0:89:8d:95:dd:79:9a:6c:95:c4:2f:33:
                    db:98:4e:49:a1:ac:39:7f:be:ec:38:3f:fe:20:f3:
                    40:e9:15:0e:2e:03:97:50:8c:c2:6a:51:b7:45:6c:
                    43:de:a1:4f:55:e1:58:31:53:bf:89:23:5c:fd:62:
                    ca:2b:a6:ce:46:31:41:5a:8c:21:c3:de:a8:ca:d6:
                    38:40:83:a0:d1:0e:3c:0b:59:6c:55:16:c9:53:b5:
                    8b:24:99:ff:42:9d:e9:bf:bc:9d:a2:06:3a:65:a3:
                    69:ff:6c:db:a6:6e:59:3e:e8:6f:47:38:04:ee:be:
                    72:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:6B:12:0B:02:97:CF:84:EF:1C:75:30:D2:59:1D:3F:59:4E:9B:9D
            X509v3 Authority Key Identifier:
                keyid:F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:31:f2:4d:4e:29:d6:6e:90:50:c4:e7:65:b7:74:55:bb:44:
         ee:cd:04:56:4b:49:ee:3d:4d:31:b5:6e:a8:70:a8:91:24:72:
         a8:2b:73:3c:79:2a:b9:b1:9f:d3:71:11:35:2e:e0:18:0a:34:
         f4:50:7f:22:49:0f:96:82:de:9b:2f:fc:47:04:08:5e:e3:84:
         71:1e:8c:19:a5:c7:4b:57:db:79:7d:66:df:39:bc:29:d0:3f:
         8b:44:37:ad:6c:eb:e1:4e:f8:62:0a:d9:14:3f:4e:2f:f2:a9:
         10:13:41:bd:3a:b8:8c:f9:70:a3:4c:a5:f5:f3:be:2a:d0:c9:
         d3:67:6b:0e:d5:7b:23:53:f4:20:f4:cc:a5:e0:03:be:17:5b:
         ab:d9:15:9c:81:af:be:d9:ac:f5:f9:7e:5f:97:33:a5:6e:a3:
         11:ac:63:80:a7:4a:ee:52:d3:b8:1a:1e:3f:29:a2:38:9b:66:
         85:a7:22:b8:d7:cc:d7:8b:34:b5:ed:82:f5:26:5f:81:0f:8a:
         54:b4:d5:a2:5b:fd:62:8e:b1:5b:4d:1c:80:d6:00:46:c2:9b:
         d0:7e:d9:de:4b:c1:c3:85:af:b1:ff:ee:6d:8e:5d:85:64:46:
         4d:5f:14:57:ce:f1:5d:ac:ce:59:4c:54:da:60:8f:a5:5c:f3:
         9b:53:e5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:47:00 2026 by rpki-client