Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
File:                     54O2KriupSB3DFdAS-d3H2eewLU.mft (raw, json)
Hash identifier:          3EkE2tmhsweoqRlRTDJNQf+c7ycSTQ9J7x7IjPQZPfo=
Subject key identifier:   03:80:8F:10:10:60:A9:15:A6:D8:FD:6C:FC:F5:63:DF:66:A5:A9:88
Authority key identifier: E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5
Certificate issuer:       /CN=e783b62ab8aea520770c57404be7771f679ec0b5
Certificate serial:       019DDD31C01F83A29C23CB18B079BF0F174C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
Manifest number:          187A
Signing time:             Thu 30 Apr 2026 07:01:58 +0000
Manifest this update:     Thu 30 Apr 2026 07:01:58 +0000
Manifest next update:     Fri 01 May 2026 07:01:58 +0000
Files and hashes:         1: 54O2KriupSB3DFdAS-d3H2eewLU.crl (hash: /zFrEwEaGsVHd28Dz9kPnd4VC1JcQ7pgdfmgCN0sAkQ=)
                          2: 8ZwMCE0GKxtxHvWw4iCZk5ccrLQ.roa (hash: ihfIEbqwEULTE/OLIE3mqsVCssWQ6XBCkAGO8OC7UiQ=)
                          3: KM-isetfFQ48jT5UlKY2Mm7Ax0Y.asa (hash: 8i1NfCOqJ0Jq8VqPBEJyQbTSUD60u+xKuWbGsqyrU/A=)
                          4: P7qWrs2V2AQezp3eeUtgLDcatjI.roa (hash: 24DT/UvLaMHn12NZyYMSEhf55ywjNyUpSkfYVKDW1As=)
                          5: m9ne4AYiPOSdzaOHma0RPMHFIXo.roa (hash: CcdNSaFI+Idh1vG8DNWCzWCXN6GNcifanXez8Ab1HsA=)
                          6: slPUQzpAJ12Ih9Jzqnj5F0SKAxg.roa (hash: Nu5TAyzLPZcJp+J4t6JX8dbl8sGpnXq2tX6BxvM07Oo=)
                          7: yd0VNlAOh1ENu0y1pBAFD8ujbvw.roa (hash: bFUcyJVn75mPPcVkoj5xBq3tVwT0rV177XBSyfgCsxM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:dd:31:c0:1f:83:a2:9c:23:cb:18:b0:79:bf:0f:17:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e783b62ab8aea520770c57404be7771f679ec0b5
        Validity
            Not Before: Apr 30 07:01:58 2026 GMT
            Not After : May  1 07:01:58 2026 GMT
        Subject: CN=03808f101060a915a6d8fd6cfcf563df66a5a988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:af:23:77:de:85:5b:71:a7:c6:6f:15:42:de:
                    96:f0:1f:04:db:0f:42:52:d1:b5:15:9e:c8:22:d9:
                    0a:b1:14:b7:c6:a9:29:a4:f3:b0:b3:79:b5:83:ed:
                    b3:b3:92:09:8d:76:e4:38:bf:6f:3e:53:fe:53:0e:
                    c0:ea:07:17:97:b9:b9:87:71:07:c1:82:9b:21:63:
                    16:17:a3:f1:2b:28:d5:6c:7d:9c:64:12:08:42:b9:
                    51:1d:3a:78:39:f0:0a:ed:41:2a:c7:dd:35:dd:30:
                    42:c6:35:52:d1:1f:ea:20:ce:b5:5a:18:9c:95:15:
                    63:e9:b8:8b:57:10:42:04:72:6f:7c:b9:8c:1f:37:
                    38:01:34:29:e4:34:76:69:d0:8c:a9:6e:b3:01:8d:
                    b7:9f:b6:39:d9:c6:b8:10:dc:bc:eb:4c:94:b2:36:
                    2e:ac:e3:e6:9a:4b:61:c7:35:ae:f9:1c:9d:3a:e3:
                    7d:d6:e9:7b:c6:06:98:37:bf:0c:87:ab:c2:76:71:
                    2c:67:f7:44:40:51:89:71:4a:58:9c:15:56:8f:74:
                    97:03:f2:fd:98:73:f0:d6:fe:a9:6b:0f:78:1d:3c:
                    e9:84:32:80:a7:53:95:d1:f9:0f:46:27:f0:2b:6a:
                    cb:a8:bd:4d:20:d1:58:92:c0:4e:56:36:12:d2:60:
                    11:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:80:8F:10:10:60:A9:15:A6:D8:FD:6C:FC:F5:63:DF:66:A5:A9:88
            X509v3 Authority Key Identifier:
                keyid:E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:d4:c0:b1:17:36:42:ca:4a:c4:0f:f6:ca:30:2a:92:1a:69:
         c3:9c:54:db:c6:32:c2:24:a8:f3:47:f0:dc:02:45:b9:ea:bf:
         bf:ff:4c:80:57:13:5d:c2:c2:9d:d9:22:26:e0:f1:e3:b3:6a:
         df:f9:c2:59:03:28:f8:46:fb:b5:1f:fb:bc:65:85:59:57:d8:
         26:5d:29:59:93:66:bf:8b:25:03:29:76:84:07:12:dc:5f:25:
         14:39:cf:73:56:a7:a9:71:46:78:97:97:d0:d8:4f:a0:c4:36:
         22:6b:d6:aa:bc:c6:1d:ba:48:89:03:a6:76:0f:84:8f:99:9f:
         06:a5:b2:7f:b4:4c:62:04:79:a3:73:2b:6d:3b:af:5b:a0:76:
         36:4b:19:67:55:8b:2f:50:b2:a6:14:9d:73:d9:7b:f8:bc:67:
         e1:44:08:48:ab:79:1f:eb:da:09:35:86:5a:a9:90:7f:82:6e:
         94:ad:1b:f8:e9:c0:6b:80:bd:b7:59:06:bc:70:f1:d4:ac:d1:
         c1:fc:d6:bf:3a:82:a1:6b:1d:de:f8:a7:28:72:d4:30:02:78:
         be:4f:de:f5:43:30:b8:ee:e3:0f:2e:6b:4f:a8:86:d0:06:53:
         0c:f3:db:86:d8:c4:3e:41:25:cb:29:25:30:0d:5f:2c:0f:a5:
         16:45:22:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:48:00 2026 by rpki-client