Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
File:                     B5S3AHBeC6pzal3QkKzRy5EsFxk.mft (raw, json)
Hash identifier:          levelNBP5yAtQo169oR8tsP+kASG31AEcEzLx9PvINc=
Subject key identifier:   1A:ED:BB:D5:0B:F3:EB:AA:5B:31:9D:BB:99:8F:E7:29:52:4C:97:5C
Authority key identifier: 07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
Certificate issuer:       /CN=0794b700705e0baa736a5dd090acd1cb912c1719
Certificate serial:       019E284AC8EB9511CA1D4549E105AEF89355
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
Manifest number:          162F
Signing time:             Thu 14 May 2026 21:00:50 +0000
Manifest this update:     Thu 14 May 2026 21:00:50 +0000
Manifest next update:     Fri 15 May 2026 21:00:50 +0000
Files and hashes:         1: 2XpRI5kbe2GcxnCcvXnUxOpReg8.roa (hash: er8I9IPQk+o7pRxbPQb/bNgm7tOw9wB8trgzpv++Gow=)
                          2: B5S3AHBeC6pzal3QkKzRy5EsFxk.crl (hash: LIMS44tOsLDBHm968Cm845dbXVJvQF1zN9z0VGOhccw=)
                          3: zeWDjXMa5d0w5AALex0oOqBNvc4.asa (hash: HCrT/rSODMrRMJuTFQic3exBhgbdh+nyEk9+AkA7lQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 21:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:4a:c8:eb:95:11:ca:1d:45:49:e1:05:ae:f8:93:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0794b700705e0baa736a5dd090acd1cb912c1719
        Validity
            Not Before: May 14 21:00:50 2026 GMT
            Not After : May 15 21:00:50 2026 GMT
        Subject: CN=1aedbbd50bf3ebaa5b319dbb998fe729524c975c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:74:ac:8b:f9:75:af:d0:f2:62:88:e1:ba:cf:
                    5f:b1:ce:e9:be:e4:12:d8:5e:d7:88:f4:24:fc:cc:
                    d0:a5:4f:83:9a:94:93:08:ca:9c:13:c6:33:a0:b8:
                    43:f2:83:1e:48:b1:4f:0b:72:e3:e2:50:12:4d:7a:
                    a5:ab:8d:95:6f:6f:2a:a6:3b:dd:c1:a7:b3:ff:57:
                    eb:12:5b:0c:b6:88:d5:5e:6c:b3:48:06:35:01:7b:
                    57:42:2e:42:5a:e1:e1:1f:3e:e8:24:28:de:2b:7c:
                    78:85:fd:13:ca:5b:f1:0b:12:15:bc:af:20:69:b2:
                    d8:1b:5b:b1:5d:bb:75:f5:5b:35:b0:05:5a:5b:3b:
                    40:e7:4c:e2:49:d7:cf:96:b6:49:c4:c8:b8:a6:c5:
                    d3:92:9e:bb:b3:05:b8:fb:8e:54:51:00:dd:ab:73:
                    ef:2a:d6:a2:d4:34:df:80:89:c7:c4:79:13:f4:8f:
                    17:32:41:18:f5:8f:6e:93:7b:e4:fa:b9:c8:79:9e:
                    81:4f:a6:5f:75:5d:c1:e0:92:60:ab:d8:9a:27:a8:
                    97:10:42:6a:36:52:bf:6f:34:0d:26:2f:e3:62:fb:
                    83:0c:53:69:2a:aa:44:a2:36:9f:cf:41:90:da:9c:
                    6a:19:04:19:2e:fc:07:3e:75:36:24:0c:73:00:19:
                    ac:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:ED:BB:D5:0B:F3:EB:AA:5B:31:9D:BB:99:8F:E7:29:52:4C:97:5C
            X509v3 Authority Key Identifier:
                keyid:07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:c4:81:ff:ad:64:07:07:33:48:3a:ff:32:7a:1f:93:88:d7:
         23:85:ff:0b:8d:e4:59:66:a0:2c:c6:08:3f:57:46:a1:de:e0:
         44:bd:ed:94:27:48:c0:d2:f4:57:42:3b:41:ae:13:ef:ac:f8:
         6e:b6:94:54:e8:d3:d6:07:b0:44:5d:11:45:7c:1d:76:3b:e8:
         1a:1d:94:d3:41:b2:6b:3e:2b:00:41:e0:74:c1:08:4a:dd:d0:
         66:0d:d5:4f:3b:ef:73:ee:b3:e9:10:ca:fc:6a:2a:a8:17:20:
         71:2c:75:ae:94:74:cb:f3:d2:f3:45:ee:10:4b:18:9b:ff:c4:
         85:93:15:ed:86:79:f5:3b:ca:4e:0c:6d:ea:6a:e2:12:eb:1b:
         3a:0c:8f:2d:4f:8e:73:e6:ef:8a:b7:af:f4:16:74:ee:cf:33:
         6b:fb:f4:01:b5:b1:4a:3b:63:27:7f:6d:a9:cc:33:c8:7a:cb:
         d0:06:04:63:f9:46:64:14:59:dd:97:f7:37:47:28:3e:77:44:
         07:90:0e:30:0b:76:39:43:40:4c:d5:ee:08:e5:5f:40:df:63:
         d4:ae:85:fa:4b:05:d6:51:9b:ad:88:e5:4a:03:cd:6f:ea:a0:
         b0:a5:70:cb:98:8c:de:38:46:4b:c8:f1:ad:a0:c4:0a:88:8c:
         a1:ba:51:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:59:09 2026 by rpki-client