Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
File:                     CAcCkygCwnQ9M19n1HpCOMMyRTM.mft (raw, json)
Hash identifier:          IyHfY16SsvpO0vbgeopGhJ7Q7orpsX3eeCkwR1OGBo4=
Subject key identifier:   7C:44:58:C8:8A:E0:29:FC:36:0C:02:1C:BF:59:7B:17:D8:AF:7E:AC
Authority key identifier: 08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
Certificate issuer:       /CN=080702932802c2743d335f67d47a4238c3324533
Certificate serial:       019E28B90496E4AC2DAE2BFC18FA1F616D77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
Manifest number:          054F
Signing time:             Thu 14 May 2026 23:01:14 +0000
Manifest this update:     Thu 14 May 2026 23:01:14 +0000
Manifest next update:     Fri 15 May 2026 23:01:14 +0000
Files and hashes:         1: CAcCkygCwnQ9M19n1HpCOMMyRTM.crl (hash: 6ApJPleRWLSB19LOnxwcH1vGOqZDjw3IAnCGj0GPMtk=)
                          2: iup8bZJXQWzi6WIn8KegueZOLKE.roa (hash: zSYxeBh1XdgerWZy0gplpGx/R0toVcfaeIhO/MDyw5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 23:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:b9:04:96:e4:ac:2d:ae:2b:fc:18:fa:1f:61:6d:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=080702932802c2743d335f67d47a4238c3324533
        Validity
            Not Before: May 14 23:01:14 2026 GMT
            Not After : May 15 23:01:14 2026 GMT
        Subject: CN=7c4458c88ae029fc360c021cbf597b17d8af7eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b7:79:6c:70:f1:95:00:25:69:66:ae:05:85:
                    ad:c2:fe:78:dc:f7:b4:c4:91:54:4a:1f:a8:35:3a:
                    d3:46:8f:8b:2d:09:b1:4e:3f:a8:dc:69:ed:e9:97:
                    19:4f:14:57:75:63:22:1d:49:e2:fe:0e:87:0c:49:
                    c6:68:b2:bd:b2:4c:1c:8a:22:e7:ee:a7:d1:ca:f5:
                    59:c3:8c:93:e2:18:8f:12:ab:81:d0:3c:93:76:46:
                    34:1b:5b:21:fd:43:bc:a7:c3:0f:1a:b3:53:96:8a:
                    50:ea:d6:b5:0e:1a:fe:3c:37:8f:ec:c2:43:b2:b9:
                    db:15:68:64:03:db:07:29:61:8a:20:43:3b:ba:cd:
                    ec:f3:bc:87:d6:0d:a7:a7:85:43:58:22:49:f8:e9:
                    91:1a:c9:30:4a:2e:2b:3e:43:e7:49:8d:d1:58:8a:
                    4c:0a:68:8b:8c:31:b2:b5:0d:59:00:12:2e:fd:51:
                    e4:a0:0e:b3:e8:84:32:3a:f2:d8:8d:a2:b1:5d:fd:
                    ac:90:1f:11:02:a4:35:b6:2d:ad:19:e2:cc:23:e8:
                    85:3a:34:1e:1c:a9:fc:a0:c5:04:73:6e:48:b6:47:
                    e1:3c:e1:dc:0a:85:87:c6:8d:1d:c9:ec:b4:d9:0c:
                    7b:64:34:e8:59:18:1c:41:56:cf:4d:54:9b:83:33:
                    80:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:44:58:C8:8A:E0:29:FC:36:0C:02:1C:BF:59:7B:17:D8:AF:7E:AC
            X509v3 Authority Key Identifier:
                keyid:08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:32:a1:6f:01:92:77:8b:22:75:d0:75:22:99:bf:4c:18:0c:
         dd:c4:3f:d3:67:e4:d9:42:29:77:14:a9:b7:4f:d6:0f:36:56:
         1f:76:fe:23:53:0b:09:f3:34:58:96:4b:db:20:b4:27:25:8f:
         0c:cc:f5:2a:6c:e4:58:3f:0e:f8:8e:30:68:4d:df:20:c8:60:
         d4:32:f2:eb:7c:7a:53:eb:4e:86:1c:7b:d4:33:59:10:95:08:
         1f:4d:23:34:a1:8e:51:c5:d3:91:df:8e:a7:df:03:3d:4c:93:
         47:07:15:42:98:80:2c:a4:ba:ab:19:a3:bb:bc:79:49:16:bb:
         c0:00:62:d7:25:9a:d4:26:08:58:23:f8:65:db:0a:f3:a5:c8:
         0b:a3:93:96:77:9a:c1:dc:b4:c3:fd:a5:42:9d:b1:dc:38:1f:
         a7:c9:e5:3e:8c:81:27:47:df:f5:8b:5a:77:f1:4b:e9:68:16:
         a2:3a:83:9d:51:65:f2:83:d4:50:96:ab:65:da:50:b4:a4:df:
         fa:05:6d:a4:e4:df:68:36:1a:63:c7:df:52:89:53:ea:62:ae:
         b5:f2:da:4c:13:28:b7:f0:eb:72:03:7b:b4:8a:b7:c5:65:d8:
         35:63:6d:c1:69:65:f7:11:9a:1a:ce:82:62:51:1e:53:77:64:
         2a:16:a5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:01:47 2026 by rpki-client