Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
File:                     AvxcBk9RWcih-kBmyMuP9wFnHdI.mft (raw, json)
Hash identifier:          PeTBOz3X/+MQcg3+xRrNENkyYn0fGSSmgCNcpE1NJuQ=
Subject key identifier:   8F:B9:1D:18:63:59:2A:1E:F6:F1:81:1F:87:C7:E4:93:C4:7C:1F:49
Authority key identifier: 02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2
Certificate issuer:       /CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2
Certificate serial:       019E2881F2A0B13702381932D831032D3C09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
Manifest number:          0E2D
Signing time:             Thu 14 May 2026 22:01:05 +0000
Manifest this update:     Thu 14 May 2026 22:01:05 +0000
Manifest next update:     Fri 15 May 2026 22:01:05 +0000
Files and hashes:         1: AvxcBk9RWcih-kBmyMuP9wFnHdI.crl (hash: f1X//65Qr0RKab8R2nLqgdF5ccqIpIL1gdgf4CE4zIw=)
                          2: aieeYAXcHf6iZv5A5jAAy7zNKfU.roa (hash: +Mh/5aHvThjQydJerYwnqxyvk8cU5lJddJlC7wDae6g=)
                          3: pV8pE_cOHYJYSxBxGWWyjX19c8g.asa (hash: eS3GUrvb75q/7iupe8O+vpHF97RDhum8PqoVzv8QV5U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 22:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:81:f2:a0:b1:37:02:38:19:32:d8:31:03:2d:3c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2
        Validity
            Not Before: May 14 22:01:05 2026 GMT
            Not After : May 15 22:01:05 2026 GMT
        Subject: CN=8fb91d1863592a1ef6f1811f87c7e493c47c1f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d8:cc:58:90:7c:f0:cf:eb:e3:44:74:7d:fb:
                    a4:53:63:f8:d0:66:78:0e:44:82:e0:27:48:84:a0:
                    66:b8:a0:d3:ba:8a:d1:ae:8d:28:d8:a2:39:ef:61:
                    b5:20:84:76:b3:3a:5a:e7:98:3b:9b:27:1c:04:c3:
                    ae:0a:ad:da:ef:33:ab:2f:43:73:1f:aa:ec:33:99:
                    a1:89:d0:c4:ce:6f:bf:02:0d:d5:08:72:75:d1:5e:
                    28:1c:58:84:b0:98:59:e3:d4:fa:0c:8d:60:93:93:
                    65:e4:50:67:4e:8d:04:9f:1b:55:24:2b:8a:5d:b0:
                    b9:e5:3b:9d:c2:96:82:68:7a:1e:4a:cd:62:75:fc:
                    5d:5e:4b:e4:3a:1c:ed:9e:ee:7a:5a:76:49:f4:57:
                    db:31:7f:50:50:a2:11:01:f1:6a:64:f0:80:4e:0c:
                    00:b7:ee:cd:fa:bc:07:3e:72:f9:2f:f9:41:aa:d4:
                    b5:c4:81:a0:b2:56:2c:79:be:8b:a4:f4:1e:31:c1:
                    20:5e:fb:c8:93:0a:47:53:93:e6:8c:d5:92:61:94:
                    fa:c5:86:33:f9:49:ec:1e:51:ab:1b:11:7f:c9:21:
                    06:65:f5:c1:61:c5:dc:d9:42:c5:84:16:3a:70:4b:
                    ba:8f:48:1f:42:1f:af:06:5a:08:0a:9d:e3:22:a1:
                    06:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B9:1D:18:63:59:2A:1E:F6:F1:81:1F:87:C7:E4:93:C4:7C:1F:49
            X509v3 Authority Key Identifier:
                keyid:02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:44:5a:a2:5e:73:3d:73:a6:ec:12:8e:fa:cb:da:d9:a0:ba:
         5d:51:33:cf:bd:d5:69:42:4b:ea:b1:c0:bc:12:45:41:b0:1d:
         b9:31:25:f2:4e:ce:58:ad:60:9d:99:da:2c:dc:be:1e:f6:e6:
         69:0b:17:b8:22:82:cc:a7:66:c5:aa:24:26:ba:8e:4b:77:75:
         bb:b2:9b:70:59:e0:05:8b:74:66:88:53:c0:26:cb:e7:bf:10:
         ea:66:b1:6e:67:ea:68:02:e1:dc:5b:a0:34:97:2f:bd:41:cb:
         ab:a3:44:8d:6f:4b:f5:60:67:48:b1:c7:9e:ab:ef:9b:13:84:
         9b:37:a2:21:27:a8:50:05:73:44:cb:fd:48:3f:da:05:f6:95:
         65:6f:d8:fa:7a:ad:5a:2f:e3:44:7d:78:72:8c:04:ae:d3:44:
         87:29:18:8a:e8:08:79:5c:64:dd:6b:f2:fa:71:51:1f:24:b3:
         dc:ba:c6:4d:b5:16:30:d9:cb:e3:31:5a:64:e2:7e:cd:a9:1a:
         07:b1:44:1b:99:45:1d:a0:44:0a:6e:cc:3b:b7:43:43:a8:6b:
         6e:e6:17:74:4c:7b:c5:4b:eb:c2:c3:b0:0a:d0:77:2d:0d:a3:
         8b:25:ea:84:e7:f1:65:17:70:8d:39:31:45:70:b0:8c:29:dd:
         b8:13:a1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:58:10 2026 by rpki-client