Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
File:                     71VFlkWXnEE9C8b3RU8NNuQOmfk.mft (raw, json)
Hash identifier:          vsbTeLg9szAhjqYGEMQu1eHpI1YQQMfM3B9tuFbMo3M=
Subject key identifier:   3A:6A:AC:AE:30:15:97:85:79:B4:CF:CE:B4:47:F4:58:F7:1B:57:71
Authority key identifier: EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9
Certificate issuer:       /CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
Certificate serial:       019E284AE99A88DE12FCD9BB91373BCA45C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
Manifest number:          05F7
Signing time:             Thu 14 May 2026 21:00:58 +0000
Manifest this update:     Thu 14 May 2026 21:00:58 +0000
Manifest next update:     Fri 15 May 2026 21:00:58 +0000
Files and hashes:         1: 71VFlkWXnEE9C8b3RU8NNuQOmfk.crl (hash: 7OO6MnC/rCAvsv9B+hOX+1JIbFtOJnW0OGlhaOpE+Sk=)
                          2: 9qV0mW2ia-2OR-SkYKC9xwGTJ6w.roa (hash: SoSvqfnQLKFn05LffsfjlMnv43OqaQmrvJqr1M8+Itw=)
                          3: Du79ji7HHfBba4InbN4bIGS0_iA.roa (hash: tcL+qNRXPaCLc8dP3FfLSCO8N4UwsOC7d+xUqdSxXTQ=)
                          4: O5W4X-XBYeWAvMUfvIjNuACgFkg.asa (hash: 7Z8pxKRz4YvwT86qT++qRx70dU1ZdttXNNnewjJqgt0=)
                          5: iXmoB-hRblPDcJ-8Lbzjw5FJXeE.asa (hash: KlQBY6M94I1QY6KQo3uEfY4PPExUBLB4IqDYeIRa6Gw=)
                          6: yoNR3031t1c5fIpSVbBNiZg-fgU.roa (hash: WFBkEZbt/RtOe+ZGOFWHx7RKyRoySV4z75BvLA08kjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 21:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:4a:e9:9a:88:de:12:fc:d9:bb:91:37:3b:ca:45:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
        Validity
            Not Before: May 14 21:00:58 2026 GMT
            Not After : May 15 21:00:58 2026 GMT
        Subject: CN=3a6aacae3015978579b4cfceb447f458f71b5771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e4:7d:0b:5d:96:18:7d:3f:bf:a4:72:e3:f0:
                    bf:ef:3e:a9:ca:05:70:c4:2d:7d:8d:38:b5:c5:97:
                    aa:6e:ee:1a:7b:55:1c:a2:0b:dd:ff:8c:21:e8:86:
                    21:53:d8:b7:94:0d:19:05:ec:97:87:69:fb:45:5c:
                    78:72:93:4b:2c:36:04:9b:5a:b8:eb:85:ee:3b:b2:
                    ff:56:a7:08:ae:ac:b9:07:5d:ee:af:75:2a:8a:a1:
                    b8:89:8d:fa:fa:38:61:61:7c:45:cb:1d:f3:c5:3e:
                    aa:1f:64:44:30:02:27:86:61:eb:d4:2f:02:3f:49:
                    1c:22:31:13:ad:0d:e8:cf:85:f5:bf:1b:4d:24:fc:
                    13:70:4f:05:64:2f:51:a6:bd:31:13:c5:ee:10:99:
                    a2:67:a8:eb:e2:ae:2b:dd:ff:e8:d6:61:b8:a2:59:
                    a0:79:76:73:c5:f9:4c:3b:14:d3:be:db:86:55:31:
                    12:83:14:24:dc:cf:c2:a7:15:b7:14:5e:98:78:2d:
                    20:62:62:d3:d6:81:b0:54:d7:4c:a7:ff:cc:c4:ce:
                    c2:c3:d2:3c:5a:56:65:6d:13:75:25:8e:a1:3a:02:
                    39:14:c0:e4:37:09:9c:aa:07:86:60:da:fc:2d:c1:
                    48:da:eb:91:03:c8:79:80:19:11:a0:15:a4:8d:a8:
                    f9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:6A:AC:AE:30:15:97:85:79:B4:CF:CE:B4:47:F4:58:F7:1B:57:71
            X509v3 Authority Key Identifier:
                keyid:EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:07:f7:13:fd:69:92:a1:57:8e:98:52:dd:7e:54:96:a0:05:
         d9:b2:44:12:90:67:92:82:49:c0:23:85:dd:63:fe:dd:e9:73:
         09:49:b8:b6:d0:77:e2:9c:10:24:ff:3c:d5:f0:a8:8b:41:c3:
         c2:81:83:cb:3f:bd:fa:ba:4a:8e:33:23:67:00:bd:51:4b:8e:
         e7:de:0a:a4:d9:09:03:cd:74:07:41:95:43:e0:1c:d5:02:1b:
         f0:b2:27:cf:a7:46:9f:58:6b:b7:7d:d8:94:ac:f9:d0:3b:07:
         e3:ad:1d:e0:b6:0c:ee:34:d4:7e:27:38:c2:89:e7:37:c4:9a:
         d6:d1:f0:5c:38:35:81:9b:14:3b:9f:b3:c8:6b:d5:77:fb:a5:
         3e:61:33:10:8c:70:2a:45:4f:bf:41:09:a5:ee:de:18:b3:01:
         80:f2:fb:d2:47:d1:0f:f3:89:d5:c8:66:85:ea:b6:9b:94:c9:
         61:4a:0a:f4:f8:81:c9:7c:c7:0a:7c:00:d8:79:91:d9:10:e3:
         4d:95:d7:7b:5c:9b:d7:c6:eb:e5:ee:e1:42:99:44:2b:0f:4c:
         4d:51:c1:f8:ce:3c:3c:14:2d:a3:65:eb:38:69:9a:e5:d3:17:
         94:80:ca:b3:9c:80:46:c6:e3:0d:d2:40:5a:c0:42:99:67:2a:
         32:ef:37:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:46 2026 by rpki-client