Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
File:                     A-7ifdtJC7lmnuug4RaUFkyi6Og.mft (raw, json)
Hash identifier:          R1y4KnQfEe2Xt+PaMZLjM9MMXhyzLo6Qdc18jgYEWt8=
Subject key identifier:   15:6E:C6:A7:96:40:5F:3B:C3:94:E6:38:30:46:54:0F:09:DA:A7:9D
Authority key identifier: 03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8
Certificate issuer:       /CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
Certificate serial:       019E2FCD3E7F8C2529EB9B72B41202B528C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
Manifest number:          05CB
Signing time:             Sat 16 May 2026 08:00:40 +0000
Manifest this update:     Sat 16 May 2026 08:00:40 +0000
Manifest next update:     Sun 17 May 2026 08:00:40 +0000
Files and hashes:         1: A-7ifdtJC7lmnuug4RaUFkyi6Og.crl (hash: O7MrzNz1Y+Wn0f735astNlZsJJFa6dkyz8GQYuk8VTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:cd:3e:7f:8c:25:29:eb:9b:72:b4:12:02:b5:28:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
        Validity
            Not Before: May 16 08:00:40 2026 GMT
            Not After : May 17 08:00:40 2026 GMT
        Subject: CN=156ec6a796405f3bc394e6383046540f09daa79d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:23:fa:c9:bc:14:5a:1e:8a:ef:10:d8:14:5f:
                    1c:6d:71:fa:5e:cf:85:ed:9a:6d:08:d6:af:f9:d6:
                    99:88:1f:8a:dc:e0:76:3e:bd:19:c6:6d:fe:13:07:
                    78:2e:4c:ed:50:87:67:56:41:ca:1d:ab:dc:e5:39:
                    0f:2e:34:20:87:17:ab:cc:65:95:7b:5d:ea:99:70:
                    86:1e:f1:fe:74:38:17:33:62:b3:43:2a:31:b9:31:
                    e6:44:4b:4f:01:ae:a3:1b:15:c2:7d:76:49:2c:d8:
                    e8:71:d3:24:fe:3b:38:1a:8b:d7:5d:14:54:2e:c1:
                    7f:bf:9b:e5:ef:f1:51:ab:92:75:ae:35:c6:de:cc:
                    85:cf:31:46:c3:c3:6e:71:9a:25:70:18:50:99:0f:
                    37:90:01:f5:a3:0b:9c:c3:e7:61:3d:a3:0d:4a:e7:
                    10:ac:90:be:35:d9:98:b3:4b:9a:98:23:74:2c:62:
                    45:bc:4e:47:36:61:84:b9:c3:1d:79:0b:35:c9:d4:
                    af:4b:04:98:f4:63:d7:53:fd:50:63:c9:22:b9:cb:
                    81:8c:ec:03:25:3d:f7:a8:54:cc:6d:93:b7:2a:52:
                    1a:99:01:16:a6:93:d1:91:47:1e:45:e0:40:91:3c:
                    08:3f:b0:18:13:6d:9a:78:73:28:09:ba:79:c7:e5:
                    16:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:6E:C6:A7:96:40:5F:3B:C3:94:E6:38:30:46:54:0F:09:DA:A7:9D
            X509v3 Authority Key Identifier:
                keyid:03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:3b:0f:69:21:09:03:b7:ce:5c:0b:5d:57:10:eb:37:04:f2:
         ff:4d:1f:d5:24:f8:69:4f:58:bb:30:b3:a3:1f:97:7b:b2:db:
         fb:d3:52:bb:68:94:a4:3b:3c:01:00:a1:f1:9f:d0:e9:65:cc:
         b4:f9:b5:67:8a:2e:74:a9:1d:a7:1a:c3:4c:e0:71:70:82:89:
         cd:06:c0:e5:c1:1f:f5:d6:b2:3f:32:b7:96:55:66:fb:77:b2:
         ed:60:c6:b2:92:c5:31:75:bb:f4:d4:1d:3f:e0:08:69:45:3f:
         2c:c5:ff:ba:13:c5:68:5c:5f:bb:e9:d5:11:ad:43:97:aa:a8:
         a3:21:18:e3:1c:b5:7a:d8:01:ad:56:6a:69:54:15:1a:91:51:
         21:bc:c7:64:3c:ef:83:0a:8b:e8:ca:8d:90:64:a4:d5:46:46:
         ce:ee:78:45:50:bf:12:a1:da:0d:66:f0:64:08:59:ed:4c:2a:
         32:39:84:66:7e:0d:64:3d:1d:d5:71:3a:a9:04:83:35:ca:68:
         58:3b:61:b0:63:d3:e7:7a:6e:5a:3b:b3:a9:b0:f4:9a:6d:7b:
         8f:69:87:31:62:46:4e:f7:ae:02:44:a2:77:07:65:32:9d:82:
         ae:2b:52:56:b3:7c:64:f5:f9:5d:1d:b6:38:5c:8f:94:56:a4:
         dc:0d:fc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:43 2026 by rpki-client