Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
File:                     1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft (raw, json)
Hash identifier:          UnMurdJ2BqpL6yqzLMKb/cpYjnG+Je2JTar1kouJeCk=
Subject key identifier:   7A:83:CA:7B:BA:A5:B8:52:3F:05:5F:38:77:D3:71:DB:53:7E:40:D4
Authority key identifier: D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5
Certificate issuer:       /CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
Certificate serial:       019E2F969BEEBA689311A340C6E047DE9B1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
Manifest number:          0E55
Signing time:             Sat 16 May 2026 07:00:59 +0000
Manifest this update:     Sat 16 May 2026 07:00:59 +0000
Manifest next update:     Sun 17 May 2026 07:00:59 +0000
Files and hashes:         1: 1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl (hash: XT1ErlMJanbxRXI/cBMVymkbYWr++ZJ7mGO4sLjfW4Q=)
                          2: QZaZGDE-cuakmV83Cz5Lef8Azck.roa (hash: 2PUB2C+ejT//n1dG/GiuAYrRsrfPippeNMItlWaifDM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:96:9b:ee:ba:68:93:11:a3:40:c6:e0:47:de:9b:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
        Validity
            Not Before: May 16 07:00:59 2026 GMT
            Not After : May 17 07:00:59 2026 GMT
        Subject: CN=7a83ca7bbaa5b8523f055f3877d371db537e40d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7f:fa:43:74:f5:5e:16:fe:b7:14:b7:7a:7f:
                    32:2e:a0:0c:bc:25:c3:70:5b:15:04:25:ed:f6:cf:
                    a5:13:25:50:c6:a8:05:e3:69:f4:41:86:ea:3e:8e:
                    9c:40:d6:8c:f6:c1:4c:7c:7f:35:65:fe:d0:35:e5:
                    28:a0:f4:10:6d:78:6d:9f:88:e2:1c:5e:f8:b5:3b:
                    a7:77:5e:bd:52:e3:5c:f4:d4:83:15:3a:77:c2:61:
                    d4:b6:88:ac:14:80:7e:a9:b2:de:2d:24:d1:9b:c8:
                    91:75:3f:3e:26:e4:0c:cb:bf:37:88:58:45:fc:65:
                    8c:ab:cf:e3:e5:53:35:14:f7:b3:0d:20:0f:e3:de:
                    b7:08:6b:c2:32:68:56:97:df:f7:86:a9:91:21:29:
                    4a:57:c6:94:75:57:00:a3:94:18:01:dd:34:c3:7c:
                    ae:9f:fb:96:2c:e8:e0:a3:37:46:fd:50:c2:17:54:
                    d0:c8:7d:61:49:5f:bd:26:af:e4:2f:de:82:0b:e1:
                    0c:f4:2f:72:7c:ec:73:df:93:b4:30:4b:30:48:d1:
                    b2:96:8b:23:db:13:30:fe:44:f8:a9:66:09:02:d4:
                    dc:57:f8:17:6d:2b:56:d5:1a:44:c4:61:b1:ad:f3:
                    d2:58:2f:65:64:89:ff:73:a0:6b:3e:0c:b7:5d:cb:
                    d8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:83:CA:7B:BA:A5:B8:52:3F:05:5F:38:77:D3:71:DB:53:7E:40:D4
            X509v3 Authority Key Identifier:
                keyid:D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:9c:60:2d:f2:8e:60:66:e3:32:b7:66:7d:4d:89:d1:dc:86:
         a3:91:61:81:ff:0b:86:37:1a:52:06:b8:83:ec:24:aa:d4:f7:
         f3:f1:25:c9:86:39:08:b8:df:92:0b:68:4e:4f:61:9e:b9:f5:
         04:83:b3:c1:81:cd:f2:0f:93:ef:5e:54:79:f3:63:17:80:15:
         df:bd:be:9c:d4:54:10:99:04:cc:51:ad:dc:c6:79:5d:f1:43:
         fc:fc:d0:d0:84:61:81:56:55:34:6b:8a:61:55:14:40:a2:7f:
         aa:09:3a:cd:da:0a:cb:67:f9:af:a9:ff:90:ec:ad:05:94:65:
         79:26:a7:52:f3:59:ed:2b:a5:c8:8f:51:77:cd:c0:85:24:8b:
         30:01:32:55:04:16:8d:68:2b:78:69:c6:fe:1d:33:a0:31:cf:
         75:cd:6b:ba:ff:a3:8c:bb:7d:0e:d5:7f:c9:bf:a8:77:b7:9a:
         74:f9:9c:80:1f:6d:e2:ce:9d:c0:02:44:8b:37:c0:9e:f7:18:
         74:1e:81:54:19:20:59:64:45:51:26:97:f0:7f:c3:41:e0:75:
         72:de:df:ec:b3:83:ac:1b:9c:62:85:7c:3f:f0:0a:35:26:93:
         51:88:04:fa:a9:82:d6:75:fb:7e:b2:40:56:dd:2c:ad:a7:b5:
         b0:4b:58:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:04 2026 by rpki-client