Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
File:                     Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft (raw, json)
Hash identifier:          KvSTgSp3SCAQyp1x33P2tp7IBZoQb25mSdmjXbXoU6E=
Subject key identifier:   45:BE:AB:38:60:78:C2:32:3A:B0:BC:CF:8F:CF:4E:8F:9E:89:B5:92
Authority key identifier: 09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
Certificate issuer:       /CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Certificate serial:       019E24A54EF0E2775DC0E8F4A6DA5354A199
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
Manifest number:          0A52
Signing time:             Thu 14 May 2026 04:01:13 +0000
Manifest this update:     Thu 14 May 2026 04:01:13 +0000
Manifest next update:     Fri 15 May 2026 04:01:13 +0000
Files and hashes:         1: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl (hash: 464z8H2qDXThA+jppqPGb87h/RC0DCVOd1IhMG6IoYY=)
                          2: UyoOwt_mkkio7rcKttEYqMqc4tE.roa (hash: 3ZPFWtYV3D6s10XCwOHklQ6Iqj8jHJrAUWODxNNBQcY=)
                          3: u7wi03kSUsP8y2tILiBs4RyN014.roa (hash: pYeJLWg472+6gUx7OvkaeELMhWeboOiwVGtw7KA43sM=)
                          4: uaEkmuhb7WRqiclbUmM34EjbO5o.roa (hash: h2MPog8U0B3WrxFfdEojnmYSGAZiWQIlg+muWLvtr1s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 04:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:24:a5:4e:f0:e2:77:5d:c0:e8:f4:a6:da:53:54:a1:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
        Validity
            Not Before: May 14 04:01:13 2026 GMT
            Not After : May 15 04:01:13 2026 GMT
        Subject: CN=45beab386078c2323ab0bccf8fcf4e8f9e89b592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c4:ae:92:1e:e3:a6:74:64:30:c0:9c:9e:d8:
                    46:75:1d:46:c7:a4:3c:03:cb:78:95:ab:36:79:4a:
                    3e:fa:84:e6:77:b4:a9:e5:4f:84:cf:9f:e6:25:6c:
                    3a:95:c3:5e:9f:63:03:46:f2:3e:4a:3a:f7:9e:dd:
                    aa:3c:52:98:e1:e3:f4:24:ae:92:20:dd:b3:3b:81:
                    96:6e:0e:98:21:d0:db:4b:36:a8:76:ba:41:f5:bf:
                    52:e6:9c:35:24:6d:dc:18:46:0b:ad:20:0c:21:db:
                    c4:53:61:29:cc:8c:40:81:94:41:0d:1b:6f:55:05:
                    ce:21:9f:37:3c:1d:ff:c1:72:39:34:d9:c3:89:04:
                    29:06:48:7e:e8:5a:09:14:91:4f:ce:ee:93:17:5f:
                    c9:92:df:4f:f4:99:dd:ef:45:4a:04:94:e4:2f:84:
                    2e:d7:87:5e:de:60:e2:ef:39:1f:b1:21:33:a5:a9:
                    3a:c4:f9:af:88:80:35:70:b2:24:17:44:24:b9:1d:
                    63:b2:96:82:e0:a7:4d:97:37:66:84:fb:e8:80:c5:
                    ec:81:7e:14:b6:bd:05:48:15:7f:2d:76:f4:65:42:
                    60:ed:d3:d1:e1:3a:2d:b4:b9:42:1c:38:3f:9a:37:
                    0e:16:9c:5c:65:f7:07:c5:01:cb:ea:eb:8d:89:09:
                    dd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BE:AB:38:60:78:C2:32:3A:B0:BC:CF:8F:CF:4E:8F:9E:89:B5:92
            X509v3 Authority Key Identifier:
                keyid:09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:71:df:28:34:47:5e:44:28:ab:6b:2f:e0:4c:31:56:bc:c2:
         20:51:76:35:14:e1:76:84:d6:e4:cd:0e:73:a8:5a:8c:3d:71:
         7d:65:c3:a2:ff:f3:31:91:de:b7:43:ed:0c:88:8b:ce:02:84:
         8a:c3:d4:68:98:b0:8b:5c:f8:20:bc:37:77:5a:3f:a7:c0:0a:
         cd:d3:b1:7b:4f:c8:3c:3a:fd:0c:b3:96:1c:ca:dd:41:72:97:
         b6:5e:a1:86:ed:6a:93:03:6c:06:4b:b7:89:87:a4:29:05:c3:
         d8:c5:9a:80:66:68:7e:13:0a:00:9b:c7:1b:60:b8:5f:60:28:
         de:97:58:c6:a8:00:fd:28:a4:cf:f8:ac:26:e3:8b:ef:c3:c5:
         b1:d4:ac:b3:94:f5:8d:24:34:d5:b2:e1:ea:e9:fb:c1:41:7e:
         6b:54:27:0a:46:3f:76:06:4e:7f:d6:73:68:ff:b0:76:0a:74:
         48:d5:73:8b:be:60:3d:29:45:3e:f3:f6:59:f0:51:9a:96:a8:
         65:08:0e:80:ed:4d:31:0a:9e:2d:de:b0:52:43:cd:83:fd:e7:
         9e:c8:49:64:22:16:6f:76:c9:f8:43:0f:e4:2d:ec:1c:c4:9c:
         66:51:0a:1c:8b:df:c9:a7:39:d6:96:3f:bd:0c:6f:63:6f:42:
         68:1b:23:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 12:17:46 2026 by rpki-client