Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
File:                     97wp81OFLRgNI0EJl9DwR-wXeNM.mft (raw, json)
Hash identifier:          pFDkjGgKCoDRbtCpRsSAFLvtMQde+Q1p2sL8Or4sPKE=
Subject key identifier:   04:A3:40:9B:11:29:B2:49:42:45:6A:C4:B0:76:C7:8B:87:FC:B3:8D
Authority key identifier: F7:BC:29:F3:53:85:2D:18:0D:23:41:09:97:D0:F0:47:EC:17:78:D3
Certificate issuer:       /CN=f7bc29f353852d180d23410997d0f047ec1778d3
Certificate serial:       019E307261C3775A4BDC77ED74C672FBC98A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
Manifest number:          18A4
Signing time:             Sat 16 May 2026 11:01:02 +0000
Manifest this update:     Sat 16 May 2026 11:01:02 +0000
Manifest next update:     Sun 17 May 2026 11:01:02 +0000
Files and hashes:         1: 97wp81OFLRgNI0EJl9DwR-wXeNM.crl (hash: JxfOujpUKwpu58HY4nKxj33El5KujTEjrY3tFnzWlHk=)
                          2: DOD5qI-P3bpZWxbpEfJc0KLvVyo.roa (hash: W0rNIyBEFVhXx/n2AztKg7R5ocbVDsSXMidn5DVXJl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:61:c3:77:5a:4b:dc:77:ed:74:c6:72:fb:c9:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7bc29f353852d180d23410997d0f047ec1778d3
        Validity
            Not Before: May 16 11:01:02 2026 GMT
            Not After : May 17 11:01:02 2026 GMT
        Subject: CN=04a3409b1129b24942456ac4b076c78b87fcb38d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4b:e4:b0:7e:f6:0f:e0:c3:ba:05:8d:6c:00:
                    c8:b7:02:bf:08:28:b7:55:73:13:d5:95:f3:26:ff:
                    5b:8a:c1:c3:1e:0b:f1:04:fe:84:01:b1:fb:06:23:
                    e9:e2:ea:e7:d6:4e:41:9d:e0:0a:d6:96:9e:08:a5:
                    74:e3:88:b0:dd:b6:bd:ff:39:bd:0d:01:61:62:e9:
                    00:22:41:e6:0d:86:8b:0f:ca:82:9d:87:aa:30:f7:
                    72:5d:ab:38:c5:31:60:ab:f0:e7:20:3a:2d:f4:ea:
                    ae:a1:f2:82:c5:e4:69:cc:66:fa:61:be:83:e5:e0:
                    1e:7c:07:fd:72:1e:20:a7:b4:c2:53:b9:c3:6a:3e:
                    21:c6:72:d3:0c:5b:5c:ca:e8:a9:47:8e:73:50:c5:
                    41:57:9a:97:64:08:86:8d:40:fc:6b:64:24:5c:36:
                    ad:42:1f:27:82:34:1b:8e:60:1e:b2:fe:66:b7:71:
                    2b:c1:72:1e:54:aa:53:4f:d5:9b:b1:49:bf:a2:3b:
                    2f:68:c3:b0:62:b3:69:e7:e8:5b:34:56:15:c9:de:
                    1e:df:52:15:10:9e:a5:ed:52:9e:8c:24:80:b2:5f:
                    39:cc:a8:38:58:47:50:1b:19:04:99:25:23:be:1a:
                    9e:e7:db:13:93:de:c5:75:5a:9f:38:de:cd:31:c3:
                    58:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A3:40:9B:11:29:B2:49:42:45:6A:C4:B0:76:C7:8B:87:FC:B3:8D
            X509v3 Authority Key Identifier:
                keyid:F7:BC:29:F3:53:85:2D:18:0D:23:41:09:97:D0:F0:47:EC:17:78:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:96:93:c6:4b:73:d9:ec:ef:14:85:8d:ed:8d:42:f2:69:2f:
         47:77:df:3e:a0:92:4c:24:73:51:f9:f3:68:37:04:80:6b:1f:
         3d:f2:d2:0a:c6:df:f7:c4:9a:d9:83:02:d5:18:37:6a:c9:ec:
         41:80:b8:6c:b6:39:15:a7:bb:cf:41:e1:b4:ec:71:10:c4:f3:
         9b:ae:4a:00:69:90:3c:56:da:40:af:16:06:8c:3c:e6:85:66:
         d6:31:6b:7f:ac:48:b6:4b:a2:ee:cb:08:06:cb:ae:4d:a7:ec:
         0d:ff:5d:b9:0f:51:8a:d0:cf:4e:6f:a9:b6:c5:48:26:be:e7:
         9f:6e:07:14:c0:ab:6a:5e:7a:69:d3:ff:60:1e:c3:a7:cd:ef:
         2f:14:39:d8:1d:0a:6e:fd:ea:64:01:31:33:84:24:38:0e:9d:
         9f:5d:66:45:48:a1:9b:4b:db:38:a9:20:95:e4:ca:a4:0b:90:
         07:d9:50:86:47:ba:c2:df:b2:08:ba:c7:10:b1:06:f5:42:58:
         06:99:9e:a3:89:40:2e:80:1c:62:13:06:d0:cb:3c:eb:24:4c:
         d3:f2:4a:aa:91:4f:9d:82:ab:1b:6d:a5:ca:4f:a0:cb:51:a9:
         03:e2:29:c4:26:d4:30:7b:8f:4b:b5:99:78:4e:ef:27:52:6d:
         da:75:01:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:32 2026 by rpki-client