Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
File:                     t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft (raw, json)
Hash identifier:          2kSt9BE/dAGCL3yqcZ0RbUK22j1eqgvpadZ5cdqEU0U=
Subject key identifier:   E6:52:EA:E4:6A:91:05:BF:B5:6B:52:4C:78:D6:FB:34:D1:13:CF:D2
Authority key identifier: B7:95:AA:F0:33:00:4C:92:D7:A2:6C:23:6C:14:D3:25:52:D7:8D:94
Certificate issuer:       /CN=b795aaf033004c92d7a26c236c14d32552d78d94
Certificate serial:       019E314E08B091B086A9ECB8F7023F2B00B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
Manifest number:          12DC
Signing time:             Sat 16 May 2026 15:00:57 +0000
Manifest this update:     Sat 16 May 2026 15:00:57 +0000
Manifest next update:     Sun 17 May 2026 15:00:57 +0000
Files and hashes:         1: NSKhyUya1x-PyKiiTfwVVTZVm6A.roa (hash: wduaY6yIGEaa6Q7/D9YyI5iy8gfW5slOIEt9QDoD1eQ=)
                          2: t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl (hash: 4v7/s134c1tSQKGiS8/qI4oFws8HndX/bxqdjhS5r08=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4e:08:b0:91:b0:86:a9:ec:b8:f7:02:3f:2b:00:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b795aaf033004c92d7a26c236c14d32552d78d94
        Validity
            Not Before: May 16 15:00:57 2026 GMT
            Not After : May 17 15:00:57 2026 GMT
        Subject: CN=e652eae46a9105bfb56b524c78d6fb34d113cfd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:6f:9d:30:69:96:b9:54:32:9b:11:4f:6f:58:
                    b9:25:c8:ba:9f:86:5b:38:9f:01:2a:1a:37:e2:77:
                    be:9f:50:45:94:93:80:9a:99:12:51:4f:06:ee:39:
                    1d:5a:8c:04:38:53:5f:53:73:ce:1e:e9:6e:e9:3b:
                    26:6c:4b:51:ea:23:df:9b:cf:04:7a:60:d0:d6:c6:
                    48:e8:7d:51:d9:ce:24:68:fc:7a:88:0d:e2:c3:b3:
                    68:ec:ff:38:b5:f7:00:bf:99:e8:88:4e:ad:14:22:
                    55:3a:58:d5:46:d6:34:c5:d6:16:50:71:8e:2b:56:
                    cd:43:8b:71:01:a6:8e:76:68:9c:04:a7:eb:20:01:
                    66:fa:f0:c8:41:a7:a9:97:6f:f9:0e:a2:e5:52:04:
                    9e:3d:94:6d:02:d8:f5:c9:42:51:2a:3f:75:09:3c:
                    b3:ed:67:72:e9:97:0d:9f:a4:10:48:36:5f:9e:b3:
                    aa:63:13:75:41:89:a5:92:c1:9e:70:59:3a:09:44:
                    6e:ed:0b:6b:34:d0:32:70:ac:bc:42:18:1d:84:ff:
                    24:e2:2a:41:06:fd:c0:3a:56:33:7a:6e:3f:d9:df:
                    9f:4e:fc:4b:8f:ed:2d:0a:83:3f:7b:79:78:ad:ec:
                    67:77:a5:f7:39:d3:fa:85:1e:21:4c:06:de:33:18:
                    3f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:52:EA:E4:6A:91:05:BF:B5:6B:52:4C:78:D6:FB:34:D1:13:CF:D2
            X509v3 Authority Key Identifier:
                keyid:B7:95:AA:F0:33:00:4C:92:D7:A2:6C:23:6C:14:D3:25:52:D7:8D:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:98:4c:80:85:91:a8:48:d8:64:4a:7b:3d:7c:32:d8:76:1d:
         cc:73:ad:d3:25:64:fe:db:20:a7:14:b5:cc:b0:bc:5d:2c:77:
         06:be:8b:77:e2:75:af:e4:7e:2d:9b:fb:e4:0d:5e:b8:4b:9d:
         d1:11:d0:e8:4e:92:d7:9f:ca:a0:f2:df:14:12:39:d0:c9:67:
         30:ed:73:d9:78:fe:0b:0e:8b:07:ce:b2:b0:9b:d7:7d:75:61:
         10:f1:f7:2d:8c:f1:24:0c:b9:d5:2e:56:a6:7b:94:b6:24:14:
         80:81:66:56:61:cf:fd:79:76:21:51:72:fe:b0:1c:7b:51:c7:
         c0:75:27:b1:9d:8b:ea:e7:26:fa:cc:a2:da:f9:a0:ef:72:3c:
         74:b4:d2:34:03:51:e0:25:d3:76:62:c4:03:00:e5:53:5d:9d:
         87:2f:a8:a3:ee:50:db:50:23:89:85:6b:76:33:4f:45:07:db:
         5a:45:1b:00:60:09:2e:df:c4:0a:c5:39:45:e1:9b:2a:7d:a8:
         7a:f5:7e:e4:1c:16:4d:d2:53:8d:a0:66:6b:ce:03:95:f0:e6:
         63:1d:ce:3e:94:23:58:c7:9b:29:6f:2d:32:83:9b:c4:4d:32:
         b9:53:7f:a4:ad:36:62:1e:bb:83:03:b0:51:02:63:c2:36:cf:
         95:cc:02:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:13:41 2026 by rpki-client