Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft
File:                     53OfCEQuIkRmIbiaV2ObNUK6NNw.mft (raw, json)
Hash identifier:          e/VA5E/XXJ3nYHOP6UkcPObitVzT3SY3bRbTzZZTtkA=
Subject key identifier:   07:90:AE:EE:DF:FB:69:44:E7:09:14:1D:68:19:87:73:5A:A9:D3:D0
Authority key identifier: E7:73:9F:08:44:2E:22:44:66:21:B8:9A:57:63:9B:35:42:BA:34:DC
Certificate issuer:       /CN=e7739f08442e22446621b89a57639b3542ba34dc
Certificate serial:       019E9B8550FA5DEBB014E4366823EB77B9EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/53OfCEQuIkRmIbiaV2ObNUK6NNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft
Manifest number:          0764
Signing time:             Sat 06 Jun 2026 06:01:05 +0000
Manifest this update:     Sat 06 Jun 2026 06:01:05 +0000
Manifest next update:     Sun 07 Jun 2026 06:01:05 +0000
Files and hashes:         1: 53OfCEQuIkRmIbiaV2ObNUK6NNw.crl (hash: shQRHo5DN8FrHHCMzwC1CTJOr+WQNZZVVniVjVOEBPw=)
                          2: nS12X_FMQVUUwkWnLYmgJW732kk.roa (hash: GXbiX9J7KWPFCiPzKs7zINZFOvfmZgRDxvmBON8Kk10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/53OfCEQuIkRmIbiaV2ObNUK6NNw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9b:85:50:fa:5d:eb:b0:14:e4:36:68:23:eb:77:b9:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7739f08442e22446621b89a57639b3542ba34dc
        Validity
            Not Before: Jun  6 06:01:05 2026 GMT
            Not After : Jun  7 06:01:05 2026 GMT
        Subject: CN=0790aeeedffb6944e709141d681987735aa9d3d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fd:c0:14:f2:9e:c8:c5:11:89:1e:c3:40:6d:
                    3f:0b:e4:bc:c0:1f:ca:c2:31:d8:7e:70:cd:9e:16:
                    1a:2a:a5:90:b9:fb:20:35:27:1f:f4:58:6d:34:e5:
                    1d:af:f7:46:89:35:45:90:89:57:78:b1:d8:ac:3d:
                    c5:83:d4:f9:a1:59:13:d5:0b:7a:7a:42:3f:d4:97:
                    1b:86:6a:8c:d3:90:55:5c:43:de:d5:2a:98:bf:96:
                    c6:c5:3c:af:ab:1e:e0:7c:71:f5:9e:65:2f:17:66:
                    a0:8b:c6:93:01:8d:f2:3f:3e:1f:d0:fd:75:7c:b5:
                    76:74:db:76:59:f9:b5:25:96:9b:da:97:6e:54:11:
                    39:a4:56:41:d0:b6:14:d0:3a:36:00:c9:5c:4c:31:
                    6b:6b:2d:5b:8c:90:30:68:9d:93:42:60:64:84:48:
                    05:60:db:8e:e9:3d:f0:e3:be:f3:b4:ca:a6:e9:76:
                    35:9c:47:f4:bf:f8:73:11:d0:c5:29:67:19:48:c2:
                    04:b3:3b:d6:dd:be:41:b6:3b:61:fd:01:97:42:24:
                    dc:a5:05:ec:5f:1f:90:dd:36:a4:7f:31:50:49:20:
                    49:1d:58:aa:0c:75:74:24:ef:8b:3c:9c:18:2e:75:
                    21:99:eb:a4:11:46:19:a2:12:5d:d0:41:04:c1:7d:
                    76:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:90:AE:EE:DF:FB:69:44:E7:09:14:1D:68:19:87:73:5A:A9:D3:D0
            X509v3 Authority Key Identifier:
                keyid:E7:73:9F:08:44:2E:22:44:66:21:B8:9A:57:63:9B:35:42:BA:34:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53OfCEQuIkRmIbiaV2ObNUK6NNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:60:13:2e:ea:a0:b1:71:1c:ad:40:f3:39:a7:84:be:14:f8:
         b0:52:ef:86:c4:dd:59:e8:c9:f1:4c:e2:72:93:73:af:16:0b:
         e3:34:07:35:87:dd:58:06:a9:31:28:e1:26:09:34:c2:69:d1:
         a2:d5:50:25:35:c8:ac:a7:1f:c5:2d:ec:e3:93:94:c6:8c:df:
         51:38:a7:3a:cd:5b:c9:e5:e2:fc:14:ac:3e:e0:13:01:44:89:
         cf:79:49:ff:73:a8:a4:75:3e:82:20:2a:1f:d9:d1:0f:b3:39:
         7f:80:9c:ce:61:9b:62:5f:17:b2:65:af:66:7f:41:29:d8:ab:
         52:fe:82:db:06:bd:bf:31:9d:fc:2d:98:2f:db:1f:73:8a:6a:
         05:35:b4:56:b8:cc:2c:ee:58:dc:a8:85:27:93:43:5e:69:56:
         71:ef:53:0e:95:8e:88:20:b9:c5:27:6e:f9:c5:c7:91:48:ba:
         61:47:d4:3c:ca:e8:ff:5a:57:a7:01:6a:71:32:9d:60:66:34:
         24:05:a0:8c:7f:5d:7d:a3:ae:a1:c9:ee:b6:66:9c:19:27:46:
         27:2f:1e:1d:29:ed:a3:18:bd:4c:59:d8:75:3d:6d:07:2f:2b:
         d4:38:b3:99:45:c5:ba:fe:f0:e6:99:ee:91:13:11:f9:ad:f6:
         b9:c5:9c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:28:31 2026 by rpki-client