Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
File:                     4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft (raw, json)
Hash identifier:          UlAqZ63L2n7hwNO/9fzq3q8+jg7OXPK/WxXuP2xb7tg=
Subject key identifier:   AA:0F:94:4A:56:79:DB:8D:3E:0A:C4:83:E6:6A:B8:E9:35:B5:43:71
Authority key identifier: E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
Certificate issuer:       /CN=e214eb35a35fd488860703b7990b8170af17912f
Certificate serial:       019E30E03D9C1B9777E235D217BD8B74518A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
Manifest number:          0B4E
Signing time:             Sat 16 May 2026 13:01:02 +0000
Manifest this update:     Sat 16 May 2026 13:01:02 +0000
Manifest next update:     Sun 17 May 2026 13:01:02 +0000
Files and hashes:         1: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl (hash: 6giCo5/UVuxQDJ93+0u4r6+oOb+8pm84t2ltpym+Nek=)
                          2: OPFTuLGWkU6mUdnCpgOtMP0wcEc.roa (hash: mYTV++dJNwiiA96b08GGaua3APnQu69gvPcnLc6GiRg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:3d:9c:1b:97:77:e2:35:d2:17:bd:8b:74:51:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e214eb35a35fd488860703b7990b8170af17912f
        Validity
            Not Before: May 16 13:01:02 2026 GMT
            Not After : May 17 13:01:02 2026 GMT
        Subject: CN=aa0f944a5679db8d3e0ac483e66ab8e935b54371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:de:e5:a2:fd:95:2d:34:a3:3e:98:9c:b8:a4:
                    d3:3c:e8:2b:ff:26:34:f3:58:b1:4f:68:e7:05:64:
                    17:c9:6d:dc:a5:24:0b:b5:3a:b8:19:39:65:b6:b6:
                    02:22:09:a3:7a:fa:02:ec:72:59:fa:55:e1:5b:da:
                    88:bf:b9:41:e9:bf:7f:e7:a4:58:eb:80:48:1c:7d:
                    a4:58:5e:0b:33:76:96:c7:1b:68:ca:7f:45:bc:cf:
                    2c:5e:15:40:6d:9c:01:4f:b2:63:6a:ee:1d:d1:1e:
                    db:d5:9d:6d:3a:3f:ef:67:53:09:28:06:57:52:43:
                    b8:55:47:70:8d:07:20:3e:98:bf:f0:e0:cb:a5:70:
                    09:df:0f:af:2f:ea:5c:f5:72:9d:fe:ea:16:66:47:
                    e0:3d:67:1f:dd:c7:13:d0:c1:b7:16:00:84:8d:46:
                    b5:49:c5:12:17:50:37:fa:ac:ea:0f:fc:0f:b4:4f:
                    d9:93:30:64:90:0e:8e:75:82:fd:3c:91:4b:b0:6c:
                    82:72:03:88:29:90:eb:94:d3:b7:05:f8:8d:17:6c:
                    86:08:1c:ac:b1:97:2d:28:2a:8a:e3:72:c3:6e:63:
                    6c:cd:07:bd:e5:d4:d9:e1:89:08:6e:91:6d:e2:16:
                    13:38:20:61:ac:ee:c2:90:47:97:94:9b:98:8a:cc:
                    be:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:0F:94:4A:56:79:DB:8D:3E:0A:C4:83:E6:6A:B8:E9:35:B5:43:71
            X509v3 Authority Key Identifier:
                keyid:E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:df:b6:e3:16:37:aa:d3:20:81:6a:2d:8e:9f:e2:30:52:3a:
         cb:31:11:49:fc:17:f6:69:3d:c6:5c:c9:06:72:0c:b7:97:6a:
         4f:e0:36:c7:81:49:5e:fc:d6:f8:eb:85:38:49:e6:ea:cf:7e:
         f1:93:f8:e0:62:e2:3b:56:56:83:5b:aa:11:36:e4:70:10:50:
         71:bd:c1:55:a7:32:66:67:c1:3d:df:b9:a4:7d:33:f6:24:38:
         9e:00:d2:fc:30:83:00:71:66:37:4b:18:44:30:d0:1d:08:43:
         70:7d:b6:50:29:a0:83:fe:98:4e:1c:c1:cf:ee:87:81:94:9d:
         d7:29:6e:6e:24:bb:b6:ae:8f:38:7d:a6:e4:64:17:91:20:e2:
         34:a3:76:00:d8:da:85:39:ca:7e:11:6d:78:4c:3f:11:bd:3d:
         19:1b:ab:9b:88:93:f1:07:6a:0d:94:7e:fe:da:a4:20:df:1b:
         08:63:07:1d:65:7e:50:17:1e:34:15:71:9a:b4:35:81:2e:77:
         31:12:35:11:21:1d:e9:31:84:e4:f0:6c:10:f1:04:32:16:e7:
         bb:2e:4f:a4:9e:dc:e1:09:a1:99:bf:9d:73:7a:40:0d:7b:ad:
         a4:ca:f2:e3:14:a4:46:1b:d3:c6:ba:96:39:f5:18:51:58:e6:
         cc:ed:01:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:26:51 2026 by rpki-client