Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
File:                     F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft (raw, json)
Hash identifier:          74BcWSBkydWcliPlWxcOllodNNnfctMcO24neEnuPMc=
Subject key identifier:   F6:7C:69:B5:23:8F:CA:FA:A6:26:B7:E7:9E:AF:2A:BA:4A:3C:C4:BE
Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
Certificate issuer:       /CN=17526ccac4f9064e058549b30172c84439787fbc
Certificate serial:       019E326138D1C5F5E195D5EB1A5EFB71989F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
Manifest number:          1314
Signing time:             Sat 16 May 2026 20:01:32 +0000
Manifest this update:     Sat 16 May 2026 20:01:32 +0000
Manifest next update:     Sun 17 May 2026 20:01:32 +0000
Files and hashes:         1: 1-earsS0WLz1IJKO-WJXouPRRDc.roa (hash: 0PMS6Wj9PBe3RqKaVauppM1NP8rM+o6ZHX9nxGiIcug=)
                          2: BQMAZ1-GEH5r12U7WPk6XQ_xa2o.roa (hash: hON2VcGx2tnVP3W4DtWqeENmyb4FIH7O20nZquH7iUI=)
                          3: F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl (hash: nAPCxx0I8b01j/7PXFTSvt+FszORwVgYZ9htYH10Uck=)
                          4: Nffyfowdb4DCXyl-CUibDbck5aw.roa (hash: +korLpH5t+ySKaX06qHUvdV0iVtoQyoQxEXvg5jMwS0=)
                          5: zYExE-CWB4WrYD1j1mlYKlry5zU.roa (hash: aQw4vgQl/XUfRZ1hivO701ANJNV8KUYzIDEJLZE7u/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:61:38:d1:c5:f5:e1:95:d5:eb:1a:5e:fb:71:98:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc
        Validity
            Not Before: May 16 20:01:32 2026 GMT
            Not After : May 17 20:01:32 2026 GMT
        Subject: CN=f67c69b5238fcafaa626b7e79eaf2aba4a3cc4be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ae:bd:b5:f1:1a:4e:23:b0:c2:02:88:65:9a:
                    4c:b8:02:ce:c5:46:5d:a7:94:34:66:fc:23:86:b0:
                    70:ff:5f:92:6a:cd:75:b7:37:a5:f4:40:95:7a:b8:
                    a0:03:a9:10:05:6c:2a:4f:90:dc:cb:b9:79:42:a0:
                    09:08:fd:a7:60:d1:85:de:0a:c1:98:14:2b:2d:2c:
                    40:1d:48:b2:a0:e0:81:5b:48:16:d3:80:96:81:34:
                    3d:9a:73:8e:27:46:eb:cb:9f:58:17:13:c3:90:84:
                    88:6b:bb:0e:97:f5:ea:0f:b5:8c:d8:7d:98:1b:bd:
                    9f:4a:84:17:5e:15:90:65:c5:e5:c5:f0:5f:bf:c7:
                    8b:26:b8:35:73:16:25:46:ac:27:0a:e1:7e:ad:d8:
                    f8:c1:6b:ad:c7:d2:50:13:a1:57:b0:cc:7b:73:ca:
                    6d:c4:fd:a4:95:f1:a2:93:ce:ee:db:01:bf:84:50:
                    6a:c7:11:74:ea:ee:15:4a:16:7f:a7:7d:f7:ca:38:
                    13:eb:f9:ba:95:4d:2c:77:af:b2:c3:ce:69:7d:b0:
                    ba:3e:a6:de:59:9f:f4:fd:21:ff:bd:85:c9:f8:27:
                    05:43:09:8a:c5:df:2b:58:c9:17:cf:bd:3e:94:da:
                    21:a9:5d:73:ec:71:9e:70:41:76:1e:c3:35:f0:99:
                    04:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:7C:69:B5:23:8F:CA:FA:A6:26:B7:E7:9E:AF:2A:BA:4A:3C:C4:BE
            X509v3 Authority Key Identifier:
                keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:d2:d7:00:3b:d8:10:20:22:50:5c:7e:23:eb:26:0c:d2:58:
         6b:94:0d:fe:a3:d9:cb:8a:a1:9c:29:72:bf:2f:a2:e6:9c:b8:
         81:ad:d3:20:52:b8:78:ff:74:9a:b9:13:11:9d:11:65:fa:c8:
         45:20:b1:90:1c:f1:7f:94:20:26:7e:66:b6:54:41:3d:69:03:
         99:53:fd:00:67:6c:c7:38:3f:d0:a2:69:01:83:1b:49:9e:45:
         1d:fc:02:33:3b:56:83:8b:f5:cf:45:02:9d:1b:7c:44:12:98:
         f6:ef:60:b9:da:3d:71:37:e6:3a:3e:09:00:18:b6:95:db:b0:
         a2:8e:68:96:25:e7:d3:e0:2f:7b:45:fa:8b:eb:29:89:9a:50:
         e9:2f:f7:0a:2e:f0:f2:2c:6e:01:a0:e4:5c:e5:59:a0:df:c1:
         5d:fa:98:42:19:31:7c:06:81:1b:17:37:b1:69:24:67:5a:ce:
         3d:77:fb:8a:b3:27:c0:8b:d4:66:54:6b:88:68:c0:45:b9:c6:
         27:37:53:5a:d5:c8:e0:4e:89:78:8e:34:f1:2e:0a:22:26:02:
         d5:6e:29:b0:ae:8a:75:29:bc:38:0c:b5:eb:36:fe:4f:a9:9c:
         bb:f3:fa:07:59:f1:4f:22:d5:89:42:66:4a:94:53:62:31:eb:
         70:74:c1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:01:14 2026 by rpki-client