Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
File:                     dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft (raw, json)
Hash identifier:          h9ZxhM0KuwQQtMJIQn9WdldPZaHwJkNP4a3/kGoa1ko=
Subject key identifier:   92:80:B2:C4:13:93:6B:9A:C5:0F:61:8E:D6:74:F9:E6:B8:BB:33:B6
Authority key identifier: 74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26
Certificate issuer:       /CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26
Certificate serial:       019E2A39CD329754F4C45930DA4934EC912B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
Manifest number:          087B
Signing time:             Fri 15 May 2026 06:01:31 +0000
Manifest this update:     Fri 15 May 2026 06:01:31 +0000
Manifest next update:     Sat 16 May 2026 06:01:31 +0000
Files and hashes:         1: dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl (hash: Wb/cBpKxMpxCyn6gAzDF3PmzBuce/oKKJJuqJxr/wvM=)
                          2: fe3bi-doKDNu4dmU6DR8DAdVKZc.roa (hash: OoARVSCOyCQLc2Hu8VCrhllOD8R6T0zZ8zONXrdJeEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 06:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:39:cd:32:97:54:f4:c4:59:30:da:49:34:ec:91:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26
        Validity
            Not Before: May 15 06:01:31 2026 GMT
            Not After : May 16 06:01:31 2026 GMT
        Subject: CN=9280b2c413936b9ac50f618ed674f9e6b8bb33b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:da:87:91:7e:ab:c7:13:4e:3c:e7:24:f6:24:
                    cc:6a:4a:ad:ee:5f:8d:46:23:ad:bd:fa:ea:c7:62:
                    a1:0d:ac:c4:e9:9f:1e:a5:47:22:2a:c6:1c:1e:13:
                    de:09:6d:c9:fd:f4:1e:00:55:f0:3a:3f:f7:08:05:
                    8f:72:44:2f:ea:ab:f7:2a:9c:cd:46:cb:50:d9:e3:
                    0f:ed:be:42:2e:a6:84:83:17:01:ed:12:16:8d:f6:
                    4a:40:57:df:17:17:5e:f6:42:48:3f:91:92:99:c4:
                    50:35:eb:4f:cf:3d:10:8a:ca:45:ef:6e:29:77:76:
                    c1:4a:3e:31:e0:8d:fa:25:ee:63:29:2b:2d:59:be:
                    8b:9c:c8:18:9a:7d:6d:14:52:0b:c3:95:af:7d:c6:
                    9b:ad:04:d6:6b:7b:91:24:48:07:b0:03:65:f7:77:
                    66:1a:76:0d:f7:3e:62:aa:26:2d:e6:a8:c6:6d:7a:
                    11:1a:2f:ea:51:56:39:e9:7b:09:c8:a4:57:2b:f9:
                    11:bf:77:b0:5a:df:1e:de:56:e7:2c:c1:6f:b6:4e:
                    e8:18:20:32:e6:05:4e:ca:6c:b4:a6:b3:9f:79:4b:
                    81:63:46:0a:69:3c:a6:f6:b1:52:09:fc:cd:3e:4c:
                    67:1f:2c:1a:d6:2c:29:54:a0:c2:30:1b:0f:14:e8:
                    dc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:80:B2:C4:13:93:6B:9A:C5:0F:61:8E:D6:74:F9:E6:B8:BB:33:B6
            X509v3 Authority Key Identifier:
                keyid:74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:30:e7:15:fa:ff:d6:16:6a:1c:4c:c1:c3:34:10:c1:bc:f2:
         46:52:4c:b5:94:c3:69:5a:eb:92:ee:4a:5b:ce:75:30:39:57:
         e1:29:f4:12:09:a1:64:11:c2:ae:a5:8c:af:e2:6d:eb:19:79:
         b7:be:3d:52:da:48:15:98:86:7c:bd:d0:36:8e:35:47:68:c4:
         d6:2e:92:f6:f1:53:cf:aa:09:32:30:a0:45:65:89:32:d3:5d:
         bc:3b:69:52:1c:49:4d:39:dc:2c:e3:e2:bd:41:67:83:88:4a:
         94:e6:6e:df:d8:6b:12:03:35:37:c9:50:4e:fb:b8:20:69:41:
         dc:c7:4a:25:ca:f7:35:bd:2a:16:f3:0e:a5:2f:0b:90:83:14:
         4f:cd:14:f9:4e:15:14:05:26:52:20:38:cd:3e:70:01:c1:cb:
         80:4e:58:6a:79:28:60:1d:b2:fe:87:52:82:f8:5a:1d:25:d7:
         ca:7f:5d:83:f3:e9:40:90:e6:44:73:ef:ed:72:bc:51:20:23:
         50:dc:f2:e1:29:d3:30:7f:96:07:2c:75:8c:f4:38:f6:77:da:
         0b:d1:b8:bf:ae:ee:af:e3:93:08:e2:a1:4a:dd:a2:31:1c:42:
         6e:41:7c:b2:d0:5c:cb:ea:00:6d:85:d6:cc:b3:b6:03:8c:a7:
         10:6e:dd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 13:21:47 2026 by rpki-client