Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
File:                     mAScy5olSKAa-jAXQVFXSgx6QSw.mft (raw, json)
Hash identifier:          2gfIdMFTU3QhG5EazPsUXlRzzbpB5+kErpWq53CPNjE=
Subject key identifier:   82:5E:B5:C9:7A:27:FE:5E:9D:9A:A9:A3:BA:7B:03:7F:2B:38:AE:03
Authority key identifier: 98:04:9C:CB:9A:25:48:A0:1A:FA:30:17:41:51:57:4A:0C:7A:41:2C
Certificate issuer:       /CN=98049ccb9a2548a01afa30174151574a0c7a412c
Certificate serial:       019E2813DA32C20DE31399B07CB52B041E38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mAScy5olSKAa-jAXQVFXSgx6QSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
Manifest number:          9D
Signing time:             Thu 14 May 2026 20:00:50 +0000
Manifest this update:     Thu 14 May 2026 20:00:50 +0000
Manifest next update:     Fri 15 May 2026 20:00:50 +0000
Files and hashes:         1: mAScy5olSKAa-jAXQVFXSgx6QSw.crl (hash: U2neUM4l4BfytO494HbtDNKee89DLt08vSRg6M8Jdq0=)
                          2: v3rr5t_ahN3SGVp2ApT1qF3-fwA.asa (hash: RejTRkyxSV+Llox1LpfU1092WFQtRS38pK5lWPMIQNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mAScy5olSKAa-jAXQVFXSgx6QSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:13:da:32:c2:0d:e3:13:99:b0:7c:b5:2b:04:1e:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98049ccb9a2548a01afa30174151574a0c7a412c
        Validity
            Not Before: May 14 20:00:50 2026 GMT
            Not After : May 15 20:00:50 2026 GMT
        Subject: CN=825eb5c97a27fe5e9d9aa9a3ba7b037f2b38ae03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:58:fc:6d:49:da:70:2b:37:c6:20:47:cf:20:
                    45:e5:eb:32:7e:29:ac:2f:d8:f1:68:6a:37:a2:fe:
                    d7:47:61:59:9d:34:34:b7:20:9b:21:29:44:21:d4:
                    48:05:1e:f9:6f:4e:b9:39:80:a7:ff:35:ed:5f:c9:
                    1c:a4:55:4c:d6:e5:cb:31:10:bb:96:3d:19:3d:db:
                    27:f9:da:33:2c:45:a7:af:84:a3:84:32:30:73:fd:
                    11:b6:63:35:cf:5a:0f:c7:4e:c1:b1:c9:b0:ff:17:
                    05:63:5d:ca:0b:ec:3b:97:f7:31:a1:14:c3:72:5f:
                    ba:13:f8:eb:93:ae:0d:ba:9f:2e:7c:c6:d8:5f:51:
                    43:f0:43:a6:54:08:e7:ac:70:13:f5:fb:85:7b:b2:
                    85:4a:64:59:0f:db:60:aa:4e:bb:ee:40:53:ef:38:
                    a1:0e:bd:cf:5e:91:7c:f0:2b:a8:10:52:55:4e:1f:
                    9e:4f:29:20:b7:e3:41:d2:81:ce:42:be:0f:91:2b:
                    26:6e:21:b4:bf:6a:9e:92:8f:89:50:a0:47:2a:cd:
                    9f:1e:73:be:e2:18:6e:2a:1d:c7:7a:4a:2c:9b:c6:
                    1f:97:a1:4c:2f:ba:a4:0a:c6:d1:99:58:e3:b5:f4:
                    b8:89:4a:1d:69:ac:5b:35:f4:7f:c2:46:56:c7:a9:
                    92:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:5E:B5:C9:7A:27:FE:5E:9D:9A:A9:A3:BA:7B:03:7F:2B:38:AE:03
            X509v3 Authority Key Identifier:
                keyid:98:04:9C:CB:9A:25:48:A0:1A:FA:30:17:41:51:57:4A:0C:7A:41:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAScy5olSKAa-jAXQVFXSgx6QSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:c6:f9:f1:6c:c2:3f:43:aa:83:1e:30:89:1e:72:bc:19:f2:
         06:aa:4a:17:eb:5f:97:54:23:a2:a8:9a:53:fc:79:c8:a3:f6:
         0b:ef:19:97:dc:0f:3e:7f:bc:16:0a:d1:c3:93:9d:36:20:c2:
         66:7c:60:94:12:ed:59:f7:8a:93:c6:4c:f3:c2:2e:ca:fb:0b:
         2d:a6:25:65:a6:25:48:18:a4:c9:d2:00:e1:f2:85:dd:f0:cc:
         fd:1c:4d:da:ae:25:21:67:45:cf:4b:12:69:0f:ea:75:5c:64:
         23:47:d9:4c:f7:ce:88:be:41:32:d8:bb:b1:7a:ee:6c:53:99:
         83:3f:91:cc:37:c6:dd:ec:4b:53:61:53:93:61:a5:04:31:fd:
         35:d1:db:3d:8f:48:a9:f0:23:e9:68:06:3b:e8:ce:64:75:9f:
         4e:93:db:4c:80:81:07:38:a5:b7:4f:16:f3:05:11:e1:07:5a:
         ae:0d:ab:89:80:9a:80:79:a7:6d:aa:c0:31:8b:16:3c:bb:5f:
         ea:8a:b9:b4:07:09:42:a1:c0:3c:4c:23:d4:e3:39:9f:82:1e:
         c2:92:6f:72:f1:ef:1f:f4:1b:e8:9b:55:a0:43:53:40:44:1a:
         a8:af:4f:b6:33:42:cc:15:53:28:d3:26:29:22:70:a4:d8:e2:
         c6:22:f5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:19:46 2026 by rpki-client