Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
File:                     1aqcEWV9iipUzmcoFLa9uXlhiDA.mft (raw, json)
Hash identifier:          2e3WEqtfd4D3p8aZuFSeHJVq+wTdiCPKufVuMS9fOhg=
Subject key identifier:   8F:1F:6E:91:E6:A4:37:4C:85:A6:37:CB:23:0B:A5:04:38:AB:25:21
Authority key identifier: D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30
Certificate issuer:       /CN=d5aa9c11657d8a2a54ce672814b6bdb979618830
Certificate serial:       019E3004BB159D69196DFAC06FE61A7D0F36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
Manifest number:          083B
Signing time:             Sat 16 May 2026 09:01:16 +0000
Manifest this update:     Sat 16 May 2026 09:01:16 +0000
Manifest next update:     Sun 17 May 2026 09:01:16 +0000
Files and hashes:         1: 1aqcEWV9iipUzmcoFLa9uXlhiDA.crl (hash: JDWzz5Iq8sUBpzhfPz5O2DZxvTPFBg0FSCwdzn1f+Qw=)
                          2: 2QaZAgQ2BxUVFfg1aWYDEr7yowE.roa (hash: mrwPNewhrXBRjZ3xbz9XepEm0Cy1szvH8RFKVrkr1LU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:04:bb:15:9d:69:19:6d:fa:c0:6f:e6:1a:7d:0f:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5aa9c11657d8a2a54ce672814b6bdb979618830
        Validity
            Not Before: May 16 09:01:16 2026 GMT
            Not After : May 17 09:01:16 2026 GMT
        Subject: CN=8f1f6e91e6a4374c85a637cb230ba50438ab2521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:34:8e:86:28:d7:18:a0:5c:93:a6:04:99:f9:
                    a6:37:d5:b2:af:b8:e7:5c:6d:f9:36:1e:ba:c7:07:
                    cf:88:6a:2f:4b:6d:ff:7b:2d:96:61:c6:72:61:99:
                    c2:02:73:79:67:01:f7:6d:24:54:cc:10:06:ac:53:
                    ee:8e:df:77:84:82:a3:98:88:b3:35:c3:16:1d:72:
                    13:35:4c:bf:c6:bc:be:05:ec:fb:6a:62:42:27:cb:
                    54:95:34:cb:e0:dd:c4:12:5d:bb:09:57:2d:a6:4c:
                    f2:8c:6a:08:c4:15:10:b7:d6:69:51:44:bb:2e:db:
                    02:4c:02:6f:62:f7:74:4c:bd:49:45:a5:1c:04:8f:
                    19:23:7d:0c:5f:63:c0:ae:79:ab:f4:a6:0d:97:1a:
                    4a:a2:9f:5d:28:06:7d:5a:29:40:74:b4:10:df:d5:
                    73:4e:69:5d:84:00:66:df:00:00:47:96:0d:14:81:
                    78:bc:a1:59:8b:fe:09:40:dd:36:1b:f4:1a:02:3b:
                    14:92:cb:01:e8:98:f1:81:64:3c:1f:17:56:20:77:
                    eb:ec:3f:8c:dd:6b:d3:32:72:83:57:52:fd:83:78:
                    7c:04:37:60:40:7c:dd:e1:58:4b:dd:81:53:90:bf:
                    1f:09:0b:a3:49:bd:fa:3a:e5:8c:b1:91:0f:84:9f:
                    70:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1F:6E:91:E6:A4:37:4C:85:A6:37:CB:23:0B:A5:04:38:AB:25:21
            X509v3 Authority Key Identifier:
                keyid:D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:e0:6b:a6:4e:21:a5:1f:88:02:9f:c7:d0:76:b9:02:77:64:
         5b:38:e7:14:7f:f5:bb:53:82:b7:c9:e5:d0:8f:ca:7f:b2:18:
         6a:a0:1e:1f:82:57:0b:ba:09:2b:80:03:06:80:94:f6:87:df:
         3a:7b:b3:c8:3e:88:b3:82:48:5e:39:a4:91:1b:8a:38:74:03:
         78:60:15:c0:a6:1d:73:4a:8b:db:ef:b7:c0:c1:fe:29:1d:3c:
         1d:6c:87:9c:fd:c4:e5:24:1c:10:0e:4a:43:84:57:f1:43:6d:
         79:0f:6a:7c:ad:98:88:a5:7c:d5:38:fd:3a:bd:0c:94:9a:92:
         8f:91:ed:44:ff:df:b0:a8:22:d5:11:e6:f6:7e:f3:fc:6a:53:
         00:bc:70:72:30:4f:d1:94:73:fd:00:42:bb:f2:a2:38:a4:4c:
         a2:f5:93:99:d8:e3:21:ca:68:54:65:1d:6b:0f:d3:e0:eb:7c:
         95:d7:00:3b:be:cc:02:80:ae:fb:cc:77:a5:3d:cb:08:00:b4:
         95:27:2e:53:3a:aa:ab:68:ce:1c:17:ca:9b:51:71:c0:92:5e:
         a4:98:dc:e7:38:d0:28:fb:b6:b8:a8:b6:01:77:e9:da:fd:12:
         6d:67:b4:be:b6:01:51:6b:e2:8f:a0:a9:46:b3:f0:17:60:b3:
         8b:19:8f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:31:07 2026 by rpki-client