Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
File:                     bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft (raw, json)
Hash identifier:          2DUCAofxb3w1qtvt7Lq3rzwt48dAjfwTFIKRg+jT4hE=
Subject key identifier:   A3:C4:9E:0D:3C:54:39:73:D9:3F:E3:3B:9A:D5:6A:C5:E8:35:65:AD
Authority key identifier: 6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
Certificate issuer:       /CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Certificate serial:       019E31F375AF11E630F0517C1F1A444E30B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
Manifest number:          16F5
Signing time:             Sat 16 May 2026 18:01:39 +0000
Manifest this update:     Sat 16 May 2026 18:01:39 +0000
Manifest next update:     Sun 17 May 2026 18:01:39 +0000
Files and hashes:         1: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl (hash: uG2uoyBX/4eO0OsurrPNYxOpforhxgcJE5Xksy/2oEQ=)
                          2: d-ZgCOBX-bnyXymKa1SuDj5rBlw.roa (hash: y//RDl/N7uwiS3ix7FguqOqN3XfD3i8I9nlyndyoqYQ=)
                          3: j9ojRqA8hjMwSRYUCcpjNJf9hKs.roa (hash: wQ5cGmc4TT6YDfuWa820fpVGpW1HF0ecpTjnTfQVH14=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:f3:75:af:11:e6:30:f0:51:7c:1f:1a:44:4e:30:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
        Validity
            Not Before: May 16 18:01:39 2026 GMT
            Not After : May 17 18:01:39 2026 GMT
        Subject: CN=a3c49e0d3c543973d93fe33b9ad56ac5e83565ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:df:05:81:b6:d2:e8:f4:58:a5:12:57:a1:52:
                    34:65:a5:8a:68:97:09:63:3a:76:96:5a:bd:f3:a8:
                    13:7a:25:20:37:63:2b:cb:ab:af:60:0d:f2:df:3a:
                    11:72:75:0c:ab:78:4a:c2:f7:67:ea:49:7f:74:c3:
                    87:d2:78:fa:5e:2a:98:04:ed:05:34:ed:8e:c8:ef:
                    38:68:61:43:46:2a:1a:79:67:70:e0:b3:f2:a7:7b:
                    35:20:e0:b2:4a:51:b5:89:52:0b:a8:41:5f:24:13:
                    9d:50:85:1b:8a:4b:0e:76:c3:f1:b1:c5:9e:78:90:
                    39:cd:e8:5f:4a:53:c5:1e:40:1f:e0:37:a2:ed:e7:
                    0a:04:b3:40:e8:f0:71:2c:24:c7:4b:6f:96:e5:1c:
                    70:a6:b7:53:7f:e6:5d:79:fb:b3:43:26:43:de:3c:
                    38:4e:a6:e3:2f:b9:3a:11:14:96:65:7b:7b:c4:71:
                    3b:f0:1e:40:22:06:8a:04:a6:bc:92:86:d1:af:3e:
                    09:ce:64:de:8e:53:03:d0:cf:96:71:01:c4:8d:31:
                    9d:38:d1:19:41:1d:1b:2e:18:ee:4f:fe:8c:42:b9:
                    86:9d:83:59:3e:3f:b0:40:22:7e:ab:da:91:74:54:
                    46:89:c4:3c:01:2e:e4:5c:cf:fd:d0:ce:33:b0:56:
                    38:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C4:9E:0D:3C:54:39:73:D9:3F:E3:3B:9A:D5:6A:C5:E8:35:65:AD
            X509v3 Authority Key Identifier:
                keyid:6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:21:8d:84:9c:d5:4f:f7:eb:62:a1:68:56:3e:5a:4e:51:4a:
         58:d7:4b:51:58:9e:23:ea:0c:78:6d:e6:e9:e5:e1:77:9e:02:
         34:dc:be:36:c4:78:7a:8f:1a:7c:26:6f:2e:64:4a:40:74:53:
         0a:c0:db:7f:85:d5:a1:5f:b1:c5:9a:7f:4b:6e:49:8a:94:95:
         41:43:d2:9b:5b:3e:2d:a3:5d:7f:17:46:0b:f3:fa:be:07:fc:
         bb:89:d6:6d:1e:ed:30:ce:1f:3e:fe:5e:9a:aa:e5:44:19:a2:
         ac:59:8d:f5:05:0e:65:1a:bb:7b:4f:1a:df:24:0e:b0:7d:21:
         3a:22:d5:ad:89:8a:79:8c:f0:42:74:60:42:0f:2b:f2:52:b8:
         39:39:33:a4:fd:e6:04:bd:0f:6a:23:27:5f:90:9d:d4:1b:69:
         40:6c:64:0e:46:f0:c8:c6:7f:0c:bd:76:ac:6c:4d:98:b8:d0:
         1f:e2:f3:52:95:32:b9:3c:3b:32:9f:78:2d:ab:d3:f7:56:f8:
         24:06:3a:9b:04:9c:ef:60:73:18:76:ee:b5:03:27:d9:8c:15:
         f5:c5:43:d1:b9:40:e0:b9:13:f4:40:a2:c5:cc:a8:70:9a:f6:
         b2:91:87:ec:af:bf:7a:34:b4:d6:d9:08:a1:4e:e9:2c:e7:9e:
         2c:7f:fb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:28:07 2026 by rpki-client