Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft
File:                     Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft (raw, json)
Hash identifier:          li5xwicp0qN/YH6JKTjnBxcCHifPPeTHop2Dp79lnBY=
Subject key identifier:   1D:C5:17:C8:06:F7:13:78:B7:76:1C:32:5B:DB:B3:61:8D:BB:FE:88
Authority key identifier: 49:FE:8C:72:AA:32:DE:95:7B:24:CF:9F:73:F8:A7:FB:1A:CF:0B:71
Certificate issuer:       /CN=49fe8c72aa32de957b24cf9f73f8a7fb1acf0b71
Certificate serial:       019E31179997C6FF53333EAD20FA8019BDDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft
Manifest number:          1147
Signing time:             Sat 16 May 2026 14:01:30 +0000
Manifest this update:     Sat 16 May 2026 14:01:30 +0000
Manifest next update:     Sun 17 May 2026 14:01:30 +0000
Files and hashes:         1: Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl (hash: WmxoqcsshqAF0ZqwQFDSapJKGDfpK8eLFoX3aa9+lAw=)
                          2: zuvfz_qQwxwSkAdtG0Js-khyYL4.roa (hash: xagvaZCpPwHCxyMBtZK7vMyfxxV2ODbD7qNizvfSRvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:99:97:c6:ff:53:33:3e:ad:20:fa:80:19:bd:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49fe8c72aa32de957b24cf9f73f8a7fb1acf0b71
        Validity
            Not Before: May 16 14:01:30 2026 GMT
            Not After : May 17 14:01:30 2026 GMT
        Subject: CN=1dc517c806f71378b7761c325bdbb3618dbbfe88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7a:8d:e1:65:23:8b:a7:c4:6c:78:fe:af:a3:
                    16:5f:99:c2:02:82:70:84:97:f1:fd:8f:45:a1:93:
                    8d:e2:44:96:03:80:ec:2a:13:5f:dc:d6:4e:e9:e7:
                    87:bb:0c:3f:4d:5a:9f:16:0a:e7:c4:6b:87:29:43:
                    60:fb:58:11:86:b7:f1:ff:9f:60:d3:94:a1:7d:5c:
                    b7:19:e0:64:21:7d:91:97:2a:40:96:cc:14:f2:57:
                    aa:e5:5d:12:f5:0e:a6:ef:a1:41:cf:a4:86:95:a3:
                    b8:63:48:ce:ef:e7:34:24:4a:4f:c6:34:e1:06:ad:
                    c4:88:63:1e:ef:91:35:12:f4:da:ed:1f:bf:ae:ce:
                    46:d9:10:c7:0c:5e:d5:4a:66:d3:d0:cd:48:1f:e6:
                    b4:d1:05:39:f3:d3:d9:32:82:ae:a5:21:a7:a9:23:
                    36:6c:7c:2d:f8:e3:b7:42:ab:e8:c8:88:bf:a6:2e:
                    26:e4:c9:10:38:b5:1e:df:d4:04:25:7f:14:34:2d:
                    09:04:8d:94:be:36:50:30:7b:4b:ef:ac:b5:25:58:
                    93:9b:2b:e6:92:c7:83:85:eb:68:f7:54:c7:ca:1f:
                    8b:a3:fd:06:95:d2:bf:ea:52:6a:33:26:1c:4f:bb:
                    a4:ed:6c:ab:90:6e:bf:f4:c2:d7:60:e3:5e:f6:42:
                    1e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C5:17:C8:06:F7:13:78:B7:76:1C:32:5B:DB:B3:61:8D:BB:FE:88
            X509v3 Authority Key Identifier:
                keyid:49:FE:8C:72:AA:32:DE:95:7B:24:CF:9F:73:F8:A7:FB:1A:CF:0B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:ab:e6:1e:60:df:42:7e:e2:bb:0d:8c:26:0d:05:da:40:8d:
         96:1c:cf:3b:84:00:0d:f5:36:77:6f:bc:b5:67:8f:e0:6a:9b:
         5d:a7:34:c4:48:f9:21:5f:92:fd:81:83:51:b8:5c:93:96:26:
         e7:c4:5d:6e:35:59:31:cf:d4:78:bb:c0:e7:dd:8b:25:2f:e7:
         45:2c:03:be:0c:07:2b:96:83:7c:54:ff:df:37:8f:a8:52:9c:
         a9:5e:69:9b:0b:33:7c:16:36:41:ba:b4:ce:b6:15:62:0c:44:
         a8:b2:93:f1:1a:36:ed:cd:d1:9b:a4:50:24:c2:a3:22:04:50:
         55:d6:16:30:3c:f4:63:4c:f9:3a:65:68:c0:a1:b4:d2:3b:03:
         55:5d:d0:94:21:76:1a:66:b1:64:e6:5a:b7:9d:c1:ff:fc:4f:
         23:f3:68:d5:53:c2:90:ff:0a:1c:9f:e3:b3:61:24:f5:a9:bb:
         74:c4:04:f9:14:63:9d:64:03:3c:e9:da:c6:f2:86:04:b1:49:
         84:cd:7c:d2:7b:3e:3a:67:f0:ea:7e:7d:a6:24:14:e4:98:35:
         90:f1:a9:c5:23:6f:b7:4a:0e:72:c7:44:1e:40:fe:7d:e3:44:
         b9:83:79:98:13:15:df:24:96:f1:f2:91:3a:da:10:75:5f:87:
         23:bf:d6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:03:16 2026 by rpki-client