Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
File:                     sDmrgpj6NjroN-UwAolpzFy_EE4.mft (raw, json)
Hash identifier:          djBFs4N8HvL27LFLMi9Yj9py4SApgwwGs53lbRpcMkg=
Subject key identifier:   DD:A7:5A:A2:6A:CC:24:12:BB:4A:B8:F1:0E:F9:FC:3F:21:52:50:9E
Authority key identifier: B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
Certificate issuer:       /CN=b039ab8298fa363ae837e530028969cc5cbf104e
Certificate serial:       019E299525EF8AC7CAA54DED573F61C3E894
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
Manifest number:          076E
Signing time:             Fri 15 May 2026 03:01:40 +0000
Manifest this update:     Fri 15 May 2026 03:01:40 +0000
Manifest next update:     Sat 16 May 2026 03:01:40 +0000
Files and hashes:         1: pIFip_1IBLSOvbShbCzJqPR3ISA.asa (hash: km1Ndz8NVjDLwyeoYrd5hZq5MPQnd5mMrU9kZpY/Ge0=)
                          2: sDmrgpj6NjroN-UwAolpzFy_EE4.crl (hash: cthqAWljZtH0uJG5yU9SFuQuizMSlI0HvEPurBoE8AQ=)
                          3: zfEmQThXQQemumuyrh4dc64Ljpo.roa (hash: l1StJqEcmI3IdHWyUspZlBSORRI1cMJESHxgjnRlaoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:95:25:ef:8a:c7:ca:a5:4d:ed:57:3f:61:c3:e8:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b039ab8298fa363ae837e530028969cc5cbf104e
        Validity
            Not Before: May 15 03:01:40 2026 GMT
            Not After : May 16 03:01:40 2026 GMT
        Subject: CN=dda75aa26acc2412bb4ab8f10ef9fc3f2152509e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b9:e4:be:37:da:2a:06:96:48:ad:b6:13:97:
                    3b:eb:0d:5f:4f:c2:98:c5:c4:c6:77:d6:8f:39:5d:
                    10:6a:09:b0:ad:ff:2b:04:6d:50:00:4c:89:0a:f0:
                    fb:2d:4f:88:f4:2d:a9:82:cc:d8:43:1d:2a:57:59:
                    51:3d:69:a3:e8:1e:09:bc:7f:b6:d0:5f:1b:c2:64:
                    13:97:c0:f8:76:5a:57:51:fa:60:78:c5:9a:68:17:
                    8f:15:aa:3b:13:13:56:a0:5f:7d:5a:e7:07:d8:69:
                    cf:82:51:0a:66:c7:47:63:79:1e:cf:81:36:fd:d7:
                    f3:81:6f:ea:f1:99:cc:3d:a0:db:39:d0:07:dd:64:
                    f1:6b:b1:55:83:60:a7:59:cd:75:4c:50:00:a4:e1:
                    b8:ba:f1:f6:02:61:7f:79:a0:64:32:f4:be:f4:58:
                    81:07:aa:89:c3:73:e6:d2:ae:21:a3:0a:82:4f:51:
                    9e:9f:94:24:7c:19:f3:2d:f5:ac:b2:24:4f:df:be:
                    d2:34:ed:f1:64:dd:2c:ac:be:97:c4:f8:6e:4e:64:
                    ba:5b:8a:21:d6:27:96:ce:f0:be:55:60:dd:e2:86:
                    ba:81:fa:9c:ab:bd:ac:7f:9e:a4:b4:45:d4:2d:81:
                    2d:a5:10:63:1f:4a:a7:f2:40:69:46:1e:f8:bd:8b:
                    b2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A7:5A:A2:6A:CC:24:12:BB:4A:B8:F1:0E:F9:FC:3F:21:52:50:9E
            X509v3 Authority Key Identifier:
                keyid:B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:d1:b8:48:2e:9a:de:63:bf:a6:a2:61:d7:93:b4:4e:3b:7e:
         3a:c9:6a:8c:b6:dc:4e:00:ca:80:a6:b6:23:37:c6:51:62:12:
         46:4f:7c:42:90:d9:b2:0b:42:6f:90:65:2b:ea:26:a3:a5:d4:
         95:3b:da:9d:99:91:cb:69:6d:3e:3b:80:98:2f:eb:80:b8:9a:
         9e:57:9a:89:df:41:07:63:51:ad:f5:27:b3:10:3a:67:9d:25:
         4d:45:93:cd:c6:da:24:48:11:e6:2d:ab:3f:f1:e5:17:d1:04:
         ba:1f:22:16:4f:bd:76:00:ea:fc:3a:0c:50:5d:27:de:19:50:
         93:a1:f0:56:1b:9c:39:07:89:c0:ce:d9:9b:ed:0c:c9:f0:12:
         e7:cf:3b:f8:43:6f:4c:d2:76:0b:5c:f5:45:00:61:60:6f:0d:
         94:14:5f:62:ad:a1:a5:9b:39:e3:dd:de:c5:f3:4e:a5:e7:11:
         5d:13:a0:a8:bb:44:58:e1:ac:06:3e:5a:31:7e:b5:9b:38:ed:
         fb:b3:8f:62:46:0b:00:ce:56:a5:47:8f:71:d2:4e:e0:46:0c:
         af:55:bd:f6:d1:7e:58:dd:a2:c3:ce:1c:1a:85:a6:b1:79:46:
         cc:21:3e:3e:c5:59:3e:f4:f2:4c:07:b7:76:10:dc:4b:65:47:
         13:e1:f8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:03:42 2026 by rpki-client