Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.mft
File:                     96Sm-g_D47k2V-7xCu2sD7LEU4w.mft (raw, json)
Hash identifier:          PiXArOZLRxZzVuXZgg10zYnrKdixmf3itZTYPJo2C1w=
Subject key identifier:   E2:FB:5C:7F:54:FD:FA:52:B0:A0:99:08:15:F9:94:FA:08:E6:C9:8D
Authority key identifier: F7:A4:A6:FA:0F:C3:E3:B9:36:57:EE:F1:0A:ED:AC:0F:B2:C4:53:8C
Certificate issuer:       /CN=f7a4a6fa0fc3e3b93657eef10aedac0fb2c4538c
Certificate serial:       019E314E7413C350AD2F301B80D4606298B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96Sm-g_D47k2V-7xCu2sD7LEU4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.mft
Manifest number:          0673
Signing time:             Sat 16 May 2026 15:01:25 +0000
Manifest this update:     Sat 16 May 2026 15:01:25 +0000
Manifest next update:     Sun 17 May 2026 15:01:25 +0000
Files and hashes:         1: 96Sm-g_D47k2V-7xCu2sD7LEU4w.crl (hash: RZjXuy9hOR5iIRan+KdX2t8MMtXn1czcOug+CQrGFWI=)
                          2: d4KrySsXtgR3TbJYSM5N4Uqx4KU.roa (hash: EHWSR+qUf6znYV7HsqlNW+Vcbs+/lAqwQEe/T0CiYVo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96Sm-g_D47k2V-7xCu2sD7LEU4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4e:74:13:c3:50:ad:2f:30:1b:80:d4:60:62:98:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7a4a6fa0fc3e3b93657eef10aedac0fb2c4538c
        Validity
            Not Before: May 16 15:01:25 2026 GMT
            Not After : May 17 15:01:25 2026 GMT
        Subject: CN=e2fb5c7f54fdfa52b0a0990815f994fa08e6c98d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ba:c0:ff:5f:7a:8f:a3:e6:31:18:34:ac:94:
                    09:7d:7b:55:34:95:b3:7f:60:c5:e0:7f:43:3a:f2:
                    11:41:b2:2b:2c:06:4e:d5:ef:51:8b:88:06:f4:17:
                    3d:df:fb:ed:52:77:d2:71:63:ff:d7:86:78:e6:b2:
                    f1:08:f8:8b:b7:ce:44:e6:47:5b:53:50:2d:ba:26:
                    ad:be:99:b2:62:06:42:a2:80:9f:8f:6b:78:08:25:
                    b6:6b:d3:23:c9:02:72:c2:85:08:75:05:07:17:fc:
                    42:b8:50:a3:15:85:71:50:86:34:64:ff:f2:76:1b:
                    0c:00:5a:b0:91:ce:90:a3:25:01:ee:85:54:30:63:
                    fe:a6:13:31:a4:ca:53:4b:25:ce:2c:d4:ba:bd:f8:
                    ea:2e:47:88:88:b0:24:d3:6b:ea:d6:0c:d1:67:eb:
                    df:0a:fe:4e:c6:18:71:e5:5c:e9:be:2f:58:97:8d:
                    ec:12:e1:02:8a:ec:2a:19:95:e2:ae:3c:47:e3:e7:
                    8c:2e:18:c6:31:4b:ea:19:7c:17:16:af:3b:ec:e8:
                    bd:53:29:85:58:e8:2c:f6:75:02:72:7e:cf:01:63:
                    15:15:19:64:35:8e:d9:cf:a3:95:a8:85:63:7c:ca:
                    2c:ba:94:9d:92:8e:d0:af:84:7e:c0:e2:e6:d3:ba:
                    50:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FB:5C:7F:54:FD:FA:52:B0:A0:99:08:15:F9:94:FA:08:E6:C9:8D
            X509v3 Authority Key Identifier:
                keyid:F7:A4:A6:FA:0F:C3:E3:B9:36:57:EE:F1:0A:ED:AC:0F:B2:C4:53:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96Sm-g_D47k2V-7xCu2sD7LEU4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/404ba5-c466-43c3-a616-9e0407626667/1/96Sm-g_D47k2V-7xCu2sD7LEU4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:21:cd:03:f2:7c:67:17:cd:10:3c:43:0f:16:e5:83:6d:d0:
         d5:7d:7a:f3:79:10:61:74:d1:ae:65:3a:77:87:d4:84:f9:6d:
         6f:ed:79:f5:ea:2e:15:13:e1:51:73:81:ea:5f:1a:98:e8:92:
         3a:4b:3f:11:43:40:fd:2e:03:1d:c2:de:7b:ce:0f:0b:6d:64:
         02:21:d8:48:5d:bb:d0:6f:c0:e8:81:6a:26:b6:fb:6b:7a:66:
         67:db:b5:29:e1:db:61:20:87:15:ea:34:87:15:6d:c2:cc:55:
         35:9f:51:4a:b6:75:7b:51:f0:d6:05:46:d2:0a:87:59:a4:83:
         99:ea:3b:9e:77:db:8f:d1:ee:06:00:3c:0e:06:e6:f4:73:8a:
         07:dd:b3:79:d5:31:27:89:8a:6c:e1:76:d0:71:a3:92:2d:bd:
         1a:ba:35:bc:5d:2b:41:c1:d2:48:43:4a:a2:68:d7:bb:ff:87:
         5a:f8:97:ea:a0:4e:6a:9d:e1:df:6b:99:29:3c:d5:7c:19:22:
         eb:f8:2a:b3:02:0d:de:49:91:cc:1f:d7:53:c6:80:33:31:10:
         68:f7:d9:b5:b3:ac:8f:2e:61:e1:4d:d5:e1:5c:58:ed:ca:4e:
         29:4c:c9:f5:10:ca:11:39:41:79:d5:d9:3b:3e:ec:87:a4:8f:
         b3:dd:28:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:56:07 2026 by rpki-client