Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
File:                     AH5rWqQ302kxUVAqIRSW431K4sU.mft (raw, json)
Hash identifier:          G3X3tkt5eqiPULD9KgwJvLeeOpee1g1oa6mreWY7jpg=
Subject key identifier:   05:5F:08:A7:5F:94:BE:3C:D2:D2:55:0D:82:A2:C3:FA:2A:E9:7B:BC
Authority key identifier: 00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5
Certificate issuer:       /CN=007e6b5aa437d3693151502a211496e37d4ae2c5
Certificate serial:       019E3072D6CC744C0A8758F6126F81596CF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
Manifest number:          168E
Signing time:             Sat 16 May 2026 11:01:32 +0000
Manifest this update:     Sat 16 May 2026 11:01:32 +0000
Manifest next update:     Sun 17 May 2026 11:01:32 +0000
Files and hashes:         1: 0UtZJpaH9ZhWJzvOUmqS1m2r370.roa (hash: UdeibxbzHWRgn3KJEu2PyWPjfgCf2fUauCUDT1MFzeU=)
                          2: 2i6ET0xmeFNNwjckPtEiXMzR1A8.roa (hash: RMMo6cNDlmb7w7WUvvn6btB8oEeGkC5RlJSJmweHPSg=)
                          3: AH5rWqQ302kxUVAqIRSW431K4sU.crl (hash: KcEoQSwPRaR3DChAZvlZf7Wo9cC/H3HZaY7tqO9E2SE=)
                          4: R1KgvQsI1PNvvWsNYjSHXjmCUko.roa (hash: eSfdxnu6Fm6Qr8tRqOcchhcxy/tWOkcHERSE8N3r8uI=)
                          5: XdtoN-G6_JHehbj0D7l71OQKEXE.roa (hash: bDoA0XebMdpMlFP6CJH1fk3V+NG+IRgcZpROF4NtHwY=)
                          6: Yx7l960TQn9HM_7QR6gs0XY-qcA.roa (hash: O+2F1pg3A5EVSk1DJbaRJDwXaNusK4Cx5sLgaLCJXdM=)
                          7: vV4kfM7-tPnyYx_K2ljxEExtxso.roa (hash: iQoz4P+KRDJgWwM5+v9IkBekoevvl7t44wSOdaiYAvA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:d6:cc:74:4c:0a:87:58:f6:12:6f:81:59:6c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007e6b5aa437d3693151502a211496e37d4ae2c5
        Validity
            Not Before: May 16 11:01:32 2026 GMT
            Not After : May 17 11:01:32 2026 GMT
        Subject: CN=055f08a75f94be3cd2d2550d82a2c3fa2ae97bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d4:78:f1:6f:47:fc:a8:42:ea:e1:30:49:7e:
                    ff:93:0a:99:f6:9b:ca:6e:81:fb:6e:81:c9:81:ff:
                    4f:97:54:8d:55:ff:11:a3:a4:eb:39:3e:53:af:c9:
                    f8:fd:41:a2:c2:79:cb:7f:96:0d:d4:de:fd:ae:38:
                    8b:de:fb:66:ea:22:f9:44:84:d7:31:f8:21:d9:83:
                    98:ef:f6:d4:7a:e7:11:82:61:f9:c2:a9:56:1a:58:
                    55:f3:99:72:72:49:70:2a:53:a7:a2:f7:56:be:57:
                    ca:e9:f4:32:3c:47:61:df:00:bf:da:32:e0:ad:ec:
                    ca:d2:ce:da:ce:5c:67:35:a3:cf:fb:0a:4b:6c:d1:
                    fa:3a:0d:ab:fe:8a:83:ae:8d:4d:e5:2e:a6:9e:d2:
                    c7:f4:59:15:48:e1:62:f3:50:d9:80:2c:ae:25:9b:
                    db:16:f9:3a:f4:48:50:71:86:7c:b0:80:17:2f:f1:
                    9d:d7:04:22:43:4c:47:07:54:2b:2e:c7:e5:47:82:
                    79:4b:b8:b0:ed:b5:35:da:46:5d:6f:4a:56:b9:c1:
                    94:9d:21:93:c7:01:b9:b3:66:1e:cf:5e:c7:d0:e8:
                    a6:d6:86:49:f1:73:df:9a:75:7e:ab:8c:04:85:43:
                    9a:6f:af:4a:fc:63:28:7d:3c:62:a2:3a:90:91:67:
                    4b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:5F:08:A7:5F:94:BE:3C:D2:D2:55:0D:82:A2:C3:FA:2A:E9:7B:BC
            X509v3 Authority Key Identifier:
                keyid:00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:20:c7:5f:f8:4c:f6:b8:91:67:88:47:f2:49:3b:ff:40:b2:
         23:0d:01:e6:d4:ac:d6:9f:f6:ac:d5:5f:4e:dc:01:40:c3:75:
         2e:ab:39:9d:6b:8e:9d:db:c2:25:8a:7d:6c:64:b2:ff:61:5d:
         cd:2f:c5:a0:5e:60:cb:29:35:12:12:bf:3f:b1:fe:97:59:a6:
         9e:ab:0e:b7:40:37:e3:0e:7c:58:ea:82:c4:7f:5a:3f:fa:7e:
         6b:e0:b2:e3:e7:c3:0e:3c:07:3a:64:61:c5:90:2b:13:76:17:
         ac:fd:ab:1c:45:18:d3:93:bb:ee:9f:60:54:a0:b5:9a:dc:57:
         f7:85:a2:da:00:18:db:10:af:9d:29:28:fa:12:42:37:4e:e8:
         6c:41:92:1e:2b:61:e6:18:66:af:35:a9:03:14:64:ec:3d:fa:
         74:e0:bc:c5:1c:3b:91:37:63:60:af:fa:ca:c6:af:1c:90:8b:
         1b:21:a1:47:71:af:7e:d7:07:0c:96:1f:fc:a1:a2:92:7e:bb:
         1b:fd:f8:08:3c:5c:d6:79:3d:70:c6:14:23:21:18:b6:b2:81:
         a2:4d:75:74:18:57:bb:70:ad:cd:1c:8c:92:8f:fe:9a:bf:e7:
         9e:f0:17:6e:cd:b5:c6:46:53:e9:74:97:2e:81:62:7f:de:8c:
         c8:1d:33:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:57:04 2026 by rpki-client