Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
File:                     Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft (raw, json)
Hash identifier:          6w+555pnK5Czb9+oA/8LZxpxa2liNM66FKyYzK0Ujfw=
Subject key identifier:   BF:E7:DE:F9:6E:74:AA:D7:E8:08:0E:2B:94:B0:57:87:17:4A:C7:13
Authority key identifier: 45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D
Certificate issuer:       /CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
Certificate serial:       019E314E51B054420D5E3837C3810318959D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
Manifest number:          1543
Signing time:             Sat 16 May 2026 15:01:16 +0000
Manifest this update:     Sat 16 May 2026 15:01:16 +0000
Manifest next update:     Sun 17 May 2026 15:01:16 +0000
Files and hashes:         1: EPMtahwabHgPl-W83_5vNZdf4gw.roa (hash: 0H56HrlbNZtyDi9oYIVx2+vNE4jYkmDivR3ycZsjoTk=)
                          2: R1nUUzzOw929lhAIpfJDOOJ-S-A.roa (hash: Tp1cYDsUeKBDmtrgetF5KzqUAJ8NNp9SsVUJU5MzEDg=)
                          3: Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl (hash: KQ32yLyAOM1PNSC2dbf/uW9oM20wmwT+FCXkihi7wfg=)
                          4: les8ej1VpPxKoITRniTQx3Kf-wE.roa (hash: tEw4ct/fRvtKjfw/ec52txtnKNrt4GJfraUVLHoBE0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4e:51:b0:54:42:0d:5e:38:37:c3:81:03:18:95:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
        Validity
            Not Before: May 16 15:01:16 2026 GMT
            Not After : May 17 15:01:16 2026 GMT
        Subject: CN=bfe7def96e74aad7e8080e2b94b05787174ac713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:5f:7f:71:ec:44:f0:89:cf:70:6a:b0:66:22:
                    24:36:c2:30:f3:7d:01:69:40:12:f8:71:0b:ac:ea:
                    93:39:8d:7d:48:a8:fa:10:c5:f6:ef:69:bc:07:73:
                    97:1b:22:38:a3:26:47:b2:f8:f6:21:bf:19:e6:29:
                    2c:6e:c7:64:1b:52:f9:b4:85:44:f3:41:9c:27:1a:
                    e4:15:6e:2d:e7:73:af:a2:4f:6d:be:29:ce:7e:cc:
                    3b:49:32:c0:29:c1:ec:c5:b4:8e:be:92:2d:f1:b6:
                    41:90:38:67:c3:70:55:75:81:f5:e0:ce:c3:0d:fc:
                    11:b6:38:4a:31:da:2a:87:9e:95:d4:59:17:01:7f:
                    7e:e9:35:86:46:bb:32:85:5c:fc:1e:30:83:98:cc:
                    94:16:a4:25:b8:83:30:db:33:9c:d4:2b:e2:3a:7a:
                    6c:b8:90:90:48:ba:e0:28:7d:5b:83:03:80:49:8b:
                    9e:01:03:c2:45:a9:8b:ed:a4:83:f4:4b:c7:9d:70:
                    22:4d:c3:54:86:2c:da:21:21:14:e1:73:d2:60:a3:
                    a1:eb:29:f6:f2:52:86:23:90:7e:e7:04:2f:44:f7:
                    3c:e5:c0:d2:01:6d:dd:3a:4a:26:5c:7d:34:52:2e:
                    0b:7d:dc:96:04:6e:ac:9d:a0:d5:6b:0f:44:c6:89:
                    9b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E7:DE:F9:6E:74:AA:D7:E8:08:0E:2B:94:B0:57:87:17:4A:C7:13
            X509v3 Authority Key Identifier:
                keyid:45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:04:d7:1d:9e:c6:8a:e5:39:0b:42:7b:b5:8a:d5:81:5f:e8:
         fb:f1:83:b2:39:6f:a3:b5:44:1e:d9:00:06:9f:42:d4:7e:88:
         e9:20:31:31:d2:b4:b8:37:4f:3b:02:03:95:3e:d7:69:fa:7d:
         a0:9a:c8:82:bd:0f:fc:fd:ed:f2:d3:3d:55:f5:cd:d5:f1:da:
         aa:5e:18:0a:eb:51:d3:96:c7:34:bb:0e:b7:59:81:30:12:48:
         5c:dd:64:08:9f:d4:0d:d7:38:e3:07:56:69:29:84:da:44:de:
         6d:f8:89:5e:2a:42:e6:4b:97:8a:ec:67:c1:0e:5f:d5:90:dd:
         aa:7a:f7:4b:f5:58:9c:23:ca:24:2b:55:8f:29:73:ab:a8:43:
         67:21:f5:e9:23:89:39:05:a3:31:d9:40:cc:eb:6b:ef:54:dd:
         64:c7:02:bc:18:d0:6d:7a:fa:0b:94:e2:b1:c2:2e:00:25:5b:
         11:14:99:6a:fc:fe:55:ba:da:ca:c6:da:7f:88:85:e9:2d:35:
         42:14:e3:b9:9e:cb:e1:42:de:fe:74:c1:69:89:72:84:b7:6c:
         1b:42:4e:30:8b:69:74:5d:d0:a4:71:bd:8d:d2:5e:45:bb:96:
         62:6e:2b:cd:f3:0e:57:53:fa:27:0d:8a:3f:4d:41:72:52:ab:
         95:62:0f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:12:54 2026 by rpki-client