Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
File:                     9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft (raw, json)
Hash identifier:          Nxwgw3O4wGoZyGp5bkDPhS/XndyDrNxYqHWZI/5CP9o=
Subject key identifier:   ED:07:A5:F0:BA:C2:84:6A:F0:66:CB:CC:F7:03:70:2C:3F:49:80:CD
Authority key identifier: F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4
Certificate issuer:       /CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
Certificate serial:       019E52599FD3CF292320F0FC0FA38EB03BFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
Manifest number:          08F4
Signing time:             Sat 23 May 2026 01:01:05 +0000
Manifest this update:     Sat 23 May 2026 01:01:05 +0000
Manifest next update:     Sun 24 May 2026 01:01:05 +0000
Files and hashes:         1: 9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl (hash: L/lfHV/eYY4OBqw3WjkKNMK1Ll4rffp9BhoL/bjVTa4=)
                          2: HWnuH-Gn5xUl5QhqL6zeVOdcK04.roa (hash: 225qZobIl4s8wOpNa2LfC1cmoU+8O6pPdl1/SrqUvPM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 May 2026 17:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:52:59:9f:d3:cf:29:23:20:f0:fc:0f:a3:8e:b0:3b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
        Validity
            Not Before: May 23 01:01:05 2026 GMT
            Not After : May 24 01:01:05 2026 GMT
        Subject: CN=ed07a5f0bac2846af066cbccf703702c3f4980cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ad:5c:44:f4:d0:03:35:a6:89:3f:fe:1c:f7:
                    38:d1:dd:0d:80:ff:bf:98:f6:47:8a:7c:69:60:20:
                    ec:80:54:12:7f:3b:e3:0d:c5:1e:57:14:47:bd:fa:
                    f2:37:5b:88:ff:54:46:20:b7:d4:6c:7b:03:7d:65:
                    f7:3d:e7:c2:c1:03:5f:13:aa:bc:7e:97:e9:24:f2:
                    46:32:bd:0e:7e:cc:d9:93:22:d4:35:8a:5d:fe:ec:
                    60:50:25:81:f1:9f:54:21:e4:dd:be:bf:04:e5:89:
                    1c:64:44:54:32:1f:f5:a7:95:a6:2c:ce:8b:fc:08:
                    30:18:e8:b2:ec:df:89:2e:29:95:7b:0c:ae:f2:c4:
                    00:d2:b4:cb:fd:d7:03:42:26:0b:8b:d7:18:29:df:
                    c7:20:05:2e:0f:e3:c1:0d:76:33:ae:3b:54:7e:75:
                    92:0e:fb:50:08:53:af:80:80:ed:ce:bc:4d:6e:3a:
                    44:2a:c2:ec:2f:5c:ed:36:ce:58:73:0e:b1:b3:cf:
                    4b:4b:36:ae:95:78:27:3c:c0:e1:c1:2a:94:40:94:
                    d0:9a:bf:a1:f2:85:67:22:08:3c:2c:66:24:2b:34:
                    53:5b:d8:ce:1f:13:eb:1f:ab:cc:25:70:01:4c:3b:
                    07:5e:3a:78:1e:29:3a:20:1c:a0:29:3f:07:d0:89:
                    f0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:07:A5:F0:BA:C2:84:6A:F0:66:CB:CC:F7:03:70:2C:3F:49:80:CD
            X509v3 Authority Key Identifier:
                keyid:F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:f1:2d:95:ac:af:64:94:81:a2:99:30:05:89:44:0c:b9:8f:
         04:85:70:e1:19:2f:98:8f:41:47:d9:9e:28:b6:1a:65:6c:7d:
         68:7b:83:36:99:86:85:ed:cb:fe:bc:57:95:10:b3:52:37:d2:
         6f:b2:de:d0:a9:0e:0d:c3:d1:d5:01:80:16:ff:8a:bc:aa:32:
         e8:36:45:ad:64:be:14:ae:08:66:df:80:3a:dd:8a:3f:85:99:
         52:e1:29:5a:97:6e:96:69:b6:04:97:cb:13:aa:a2:69:3b:b3:
         69:6b:a2:40:2c:68:f4:d4:a1:c1:dc:bf:49:62:fc:22:f6:81:
         1e:72:e4:75:24:20:44:c1:8e:7e:7e:8c:84:e6:70:bf:a6:ff:
         3f:d5:fc:57:c7:0e:9f:b7:ac:01:bf:1c:62:15:62:d6:37:12:
         d6:a7:30:c7:f1:da:82:f0:9d:27:a2:47:2d:97:5a:d0:93:32:
         ea:db:e4:50:c5:c3:8c:58:52:66:61:68:ab:bf:51:bd:45:c7:
         c2:ca:ca:12:c3:74:99:62:66:44:d4:38:7b:9b:04:40:0e:bd:
         6b:ef:6e:02:e5:f3:b9:16:68:e9:0f:53:af:46:4c:6c:93:1e:
         10:b1:f4:46:2b:76:90:f2:b3:4a:57:ed:4a:cd:37:79:df:2c:
         ee:61:3a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:47:33 2026 by rpki-client