Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
File:                     _cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft (raw, json)
Hash identifier:          EK7yNeusOECL0MjH7jz1tjhPmYNDEeKEcibCu+4Ghj4=
Subject key identifier:   A1:8D:9D:F7:A8:F0:DD:EF:29:3F:88:3B:9D:F1:52:31:BC:6F:84:48
Authority key identifier: FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E
Certificate issuer:       /CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e
Certificate serial:       019E284B44DD8940253193B92EE537BF4FEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
Manifest number:          062E
Signing time:             Thu 14 May 2026 21:01:21 +0000
Manifest this update:     Thu 14 May 2026 21:01:21 +0000
Manifest next update:     Fri 15 May 2026 21:01:21 +0000
Files and hashes:         1: PK0CRUNKPydp1F9sRstNCMcVwis.roa (hash: n+n/sPwhuGlwhn4Gy6p0W0/UiHGQEt+/uBb6OJWsN1E=)
                          2: Z31MissZ7yHyJsx_dTK4RFd8-rY.asa (hash: nIwJfm6qlYIi6/sdM1uVq+e1tR35aqGsM85M/JuSXJc=)
                          3: _cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl (hash: sFSzrVvu6oZ+GTdPqs0bKiX0zlFtGxh7p/A8Jbx6gbg=)
                          4: i0sj2OlRMgevoHUz4ryR_Oma4I4.asa (hash: adtzyb9u4Fbn/ZPKqrDMufHnnCkRcWugW8Vy0F2nkqI=)
                          5: l3v9mZTPVTxPe5Kh1-GOSK6w8Zw.roa (hash: 51EMra3zFohpnXCIeOY4jhtjtvE+0ZKY/ys2ekben48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 21:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:4b:44:dd:89:40:25:31:93:b9:2e:e5:37:bf:4f:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e
        Validity
            Not Before: May 14 21:01:21 2026 GMT
            Not After : May 15 21:01:21 2026 GMT
        Subject: CN=a18d9df7a8f0ddef293f883b9df15231bc6f8448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:52:3c:2e:db:14:22:9a:9c:85:a5:28:cd:4c:
                    1f:33:3a:02:f8:29:07:4f:03:48:c1:d0:f3:0f:7d:
                    9c:6f:f9:d5:69:6c:74:fe:ea:d2:cb:1f:0e:e7:aa:
                    22:81:3c:c9:5f:47:12:76:ac:7f:29:42:12:d6:c6:
                    25:c2:63:2d:4e:c1:29:57:42:88:7f:0f:f6:4e:34:
                    39:35:82:88:da:d1:94:5a:f2:49:b5:35:6f:7d:67:
                    58:cc:f1:c3:c0:90:37:f0:33:32:92:8b:13:30:05:
                    87:ba:d6:4c:0b:20:40:7d:68:3d:fe:da:18:16:1f:
                    9f:83:08:1e:24:8f:04:46:5b:26:12:4a:0f:61:c0:
                    3a:3a:2f:c6:b5:05:27:98:62:56:54:1e:a7:71:9f:
                    dd:4d:a8:ef:56:63:51:4d:01:8e:95:e8:8e:c9:9f:
                    28:99:af:b0:c7:13:35:20:a2:da:cf:53:92:1f:3d:
                    4b:70:b8:9c:7f:16:13:b3:6a:4c:6d:28:24:a4:c8:
                    c0:0f:aa:f2:8a:11:c7:2e:8a:08:e7:b3:89:e5:5e:
                    ca:b2:3e:dc:76:eb:37:59:69:fa:5a:4d:84:a2:1e:
                    dd:d0:74:aa:e7:70:fa:ba:8e:b1:8e:57:ff:d9:57:
                    d5:9a:bc:9f:34:38:f8:72:21:df:b9:6c:60:81:6a:
                    e0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8D:9D:F7:A8:F0:DD:EF:29:3F:88:3B:9D:F1:52:31:BC:6F:84:48
            X509v3 Authority Key Identifier:
                keyid:FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:19:0f:97:18:24:86:e2:db:5d:d5:6c:ce:02:a4:c5:57:2b:
         3a:11:3c:d6:17:e4:3e:f0:b8:8b:d7:9f:2e:32:03:36:b7:64:
         af:49:70:34:d2:a9:c1:eb:e9:18:1a:e1:c6:e8:68:3d:e7:b1:
         bd:76:c6:5e:03:24:e5:4a:0a:01:f3:d8:41:5f:2a:9b:5b:2b:
         ed:b2:91:1a:e4:9d:d9:d1:f6:8e:6f:41:a7:ce:fa:84:37:45:
         2e:bd:9b:9f:c6:99:b0:8a:8a:ef:47:de:60:29:78:3a:fc:fb:
         f8:01:35:0d:5d:53:1f:86:a6:af:c2:f7:c5:33:5b:dd:9d:51:
         bc:59:0f:6c:42:99:13:73:ad:d8:e6:6b:f1:22:32:26:45:5c:
         a6:e4:17:3b:0d:06:b2:b6:91:99:ab:4b:c1:3c:4f:c8:58:dc:
         08:c6:e2:09:d6:6f:2a:df:32:c0:27:88:86:d9:27:65:e7:15:
         9d:c2:f2:c1:fa:00:8f:9b:63:2e:c4:70:fd:bf:04:4a:ac:4a:
         1c:d7:8d:62:81:11:cf:19:4a:a7:af:16:b9:5f:c7:d9:a2:76:
         81:ba:dc:e7:ba:df:e8:60:7b:d8:32:ff:b5:62:04:1f:39:c1:
         5f:f7:fc:af:83:3a:16:58:ec:ed:25:32:36:ac:29:45:d0:1d:
         eb:d5:87:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:56 2026 by rpki-client