Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
File:                     fD5YWlm1I7uG1mCnFo4cHroJTaA.mft (raw, json)
Hash identifier:          sa7u9OMqAHbMCqnkv1ruSNXuwN0iW1b8CynjAbKQrrs=
Subject key identifier:   6C:36:B3:23:63:FC:9A:01:2B:2F:EB:98:77:61:9F:26:1B:E1:8F:60
Authority key identifier: 7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
Certificate issuer:       /CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Certificate serial:       019E30E036CA0E622C41D32BE3154A192D71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
Manifest number:          1024
Signing time:             Sat 16 May 2026 13:01:00 +0000
Manifest this update:     Sat 16 May 2026 13:01:00 +0000
Manifest next update:     Sun 17 May 2026 13:01:00 +0000
Files and hashes:         1: CUW86B2DR7frkjRXhMj0tpGfzR0.roa (hash: +AMltbCrgBtIU8+BHyMcK4ZbfgEd7AgGyNWp1F2ZA24=)
                          2: FG6edaLthXtNRXgQz784XZNgYd8.roa (hash: 5nX8hTmpLoy7w0liaeZHVLXCjdNjFlEQzahTMpZo9sE=)
                          3: FOLDqKxEVMdWWcpgZnPDCyuO3M4.roa (hash: 0gkvmBgKUujlvBMJPfV/1P6cRqx430AdiJwroTPunR0=)
                          4: fD5YWlm1I7uG1mCnFo4cHroJTaA.crl (hash: t/33aBT+vwujVWqWFXJcsudF0H5T34H8cU0vVzVXeA4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:36:ca:0e:62:2c:41:d3:2b:e3:15:4a:19:2d:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
        Validity
            Not Before: May 16 13:01:00 2026 GMT
            Not After : May 17 13:01:00 2026 GMT
        Subject: CN=6c36b32363fc9a012b2feb9877619f261be18f60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b2:64:24:50:68:af:00:4d:8f:0b:72:0f:06:
                    fd:29:ba:26:15:da:cc:3f:e0:af:cd:21:73:88:e8:
                    68:35:53:35:12:b1:eb:77:6e:b2:de:84:6e:da:27:
                    90:3b:ed:3d:1b:8c:45:2f:42:1b:e5:d4:64:1d:0f:
                    df:b1:af:76:45:69:6e:6b:f3:9a:dc:1c:38:d9:21:
                    38:bc:08:04:9f:10:51:6d:d3:4a:14:02:bd:98:7f:
                    06:56:39:b2:21:d5:6f:c0:73:03:4d:fc:c7:e1:62:
                    4f:3b:f6:dd:09:34:bb:d7:dc:09:1c:6c:0a:4b:d5:
                    8b:34:29:9c:03:f6:be:b2:41:b8:01:09:d6:72:32:
                    4d:39:59:42:b3:8c:e8:37:f1:1b:15:ba:7e:7e:e9:
                    be:01:d1:7c:cb:e2:4e:83:8b:e4:a7:a1:5c:99:2b:
                    8f:00:ed:0b:e3:f6:2f:6d:cb:a2:75:c1:14:6b:3f:
                    76:a5:55:87:05:e5:53:4d:0b:1f:f3:c6:4e:ef:05:
                    b5:ef:fc:77:78:f8:cd:37:d7:b1:13:d0:ec:a8:26:
                    a3:20:6f:da:a5:26:d3:bd:cd:a1:23:78:82:e8:d2:
                    7f:5e:be:23:c1:89:21:ab:03:5c:0f:27:cd:56:78:
                    38:ba:9e:bf:ee:9e:cb:1c:4e:94:27:85:70:66:49:
                    73:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:36:B3:23:63:FC:9A:01:2B:2F:EB:98:77:61:9F:26:1B:E1:8F:60
            X509v3 Authority Key Identifier:
                keyid:7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:a4:8a:4d:6f:eb:70:d4:9c:e6:ce:40:81:68:06:85:d2:6f:
         a8:e9:86:31:e7:11:90:b1:ac:d8:39:6e:c8:cb:af:43:ca:a8:
         fe:11:af:6b:02:aa:57:d4:17:a2:92:72:c3:31:0a:c0:9f:27:
         5b:ce:0f:90:29:ad:67:4e:f3:67:5c:0e:ce:cd:48:d1:c8:87:
         54:f7:d6:e2:8e:ef:1e:8b:f8:36:f4:57:0a:b8:76:ae:fe:e7:
         97:a4:74:26:f4:54:b7:b5:02:05:21:88:12:72:20:77:aa:92:
         09:bf:53:32:88:c5:dd:b3:31:67:e7:48:e6:7f:7b:50:34:bf:
         40:76:7f:23:87:b6:63:6e:65:1a:f8:c3:6e:23:c7:99:63:06:
         0b:82:57:ee:2a:4b:77:70:8e:b2:6e:98:ba:1c:24:d4:97:42:
         3b:57:25:ca:c3:fa:ea:a8:d8:1f:be:80:19:c4:61:6a:36:23:
         63:6c:36:64:cd:3a:50:b7:4a:be:6f:24:11:d0:14:6a:b2:37:
         77:7e:82:5b:62:64:8a:e9:cd:fa:fc:fc:a3:06:ba:55:ad:d5:
         8b:9c:c2:95:10:88:f7:73:68:fd:9c:57:49:c3:1a:d5:74:f4:
         04:6f:d5:40:c8:cb:05:a8:43:5a:71:ba:89:ba:62:7e:8d:6d:
         2e:1e:7b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:13:42 2026 by rpki-client