Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft
File:                     81TlIOe7fhP1Ms7PBagtK3l5UqI.mft (raw, json)
Hash identifier:          ++G5M0AJD1L5MKdMAjFVpI6GlAxXO9qJUFf3C7Ez8Lo=
Subject key identifier:   C5:48:F7:EE:BD:AF:19:93:18:88:EA:7C:1D:A3:EA:F0:D7:77:66:F3
Authority key identifier: F3:54:E5:20:E7:BB:7E:13:F5:32:CE:CF:05:A8:2D:2B:79:79:52:A2
Certificate issuer:       /CN=f354e520e7bb7e13f532cecf05a82d2b797952a2
Certificate serial:       019E04080C742BE0F9813BC48152F3063410
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft
Manifest number:          0E51
Signing time:             Thu 07 May 2026 20:01:36 +0000
Manifest this update:     Thu 07 May 2026 20:01:36 +0000
Manifest next update:     Fri 08 May 2026 20:01:36 +0000
Files and hashes:         1: 28zXLFeRXoHKQibLR_FN7To5SA4.roa (hash: 0h5lbt3CG3w27XHBcRA+PH1NQ7TLUhzbv0Xa/y3+zNw=)
                          2: 81TlIOe7fhP1Ms7PBagtK3l5UqI.crl (hash: bz8HQZ/1fkex6eCiLWKO+AuIeBjoKNG01eVtd5BVPCg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 May 2026 20:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:04:08:0c:74:2b:e0:f9:81:3b:c4:81:52:f3:06:34:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f354e520e7bb7e13f532cecf05a82d2b797952a2
        Validity
            Not Before: May  7 20:01:36 2026 GMT
            Not After : May  8 20:01:36 2026 GMT
        Subject: CN=c548f7eebdaf19931888ea7c1da3eaf0d77766f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a7:c0:fb:f4:09:87:5a:66:30:2b:78:b1:8d:
                    2c:47:b6:88:ad:fe:cc:97:5c:7b:2a:e5:d4:50:e5:
                    22:d7:f4:26:90:56:b2:d3:ff:ee:8d:1e:7c:19:b4:
                    fe:51:e9:b8:30:b5:8a:14:9d:3e:b1:31:ee:00:23:
                    ae:36:ef:3f:58:f2:2c:0b:d6:04:40:83:16:50:26:
                    3b:05:dc:04:4a:9e:a3:5a:12:da:73:cd:ac:7c:ed:
                    4f:e1:5b:fb:ee:19:49:01:1a:40:ca:8f:de:5b:bc:
                    fe:0d:8c:b3:ac:68:40:5d:ac:75:5f:29:a3:49:cc:
                    b9:e3:d9:47:48:f0:b5:05:c5:fe:ee:ab:84:8a:7b:
                    f9:fe:4c:19:87:f1:8b:e8:b1:4c:e5:ed:be:7d:20:
                    24:c1:ef:a9:3a:9d:0f:38:6a:bd:1b:c8:e4:10:21:
                    a7:e9:51:ea:bb:05:47:0b:38:f4:bb:a1:0f:06:7d:
                    dd:97:4d:9b:80:c6:c8:19:33:8a:b6:ca:97:be:a0:
                    32:af:68:e3:a7:1c:33:69:76:34:40:c6:d8:85:90:
                    de:b4:a1:e4:a8:79:00:2e:52:0a:19:03:93:9d:be:
                    d7:59:00:fe:0a:ae:6a:b9:c2:c9:b2:15:b2:f6:c9:
                    f4:4b:62:82:c6:e4:23:6b:23:70:26:e1:e4:29:ac:
                    86:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:48:F7:EE:BD:AF:19:93:18:88:EA:7C:1D:A3:EA:F0:D7:77:66:F3
            X509v3 Authority Key Identifier:
                keyid:F3:54:E5:20:E7:BB:7E:13:F5:32:CE:CF:05:A8:2D:2B:79:79:52:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:38:3b:8a:97:31:86:28:62:e9:77:9a:c4:a5:0e:6c:9b:53:
         1a:11:62:31:5c:bd:67:95:de:9b:09:45:37:41:a1:ca:58:05:
         de:25:ee:0c:88:e8:2b:f0:77:f4:b0:72:ea:d1:61:b6:f5:f5:
         1e:62:90:62:5c:8d:a2:cf:e0:f3:93:a3:77:8d:a7:42:f1:02:
         10:0d:8a:16:c5:9b:75:56:40:e5:16:3c:9a:e3:11:3f:c2:cc:
         dd:af:cf:77:49:d8:eb:d0:09:3c:f4:8e:3e:b5:a8:1c:66:1b:
         e8:f7:6d:2f:82:41:a3:fc:c7:25:0b:98:f2:de:fc:ba:e0:9f:
         c7:e4:82:bc:75:ef:c8:6c:9f:f6:53:21:b4:ff:ce:13:31:c9:
         d8:c9:d3:01:8e:87:95:f8:f9:86:86:31:b8:68:7d:94:6c:7d:
         08:c0:08:a0:be:b8:ac:95:95:8e:11:fc:9c:ad:5e:4e:ba:7c:
         4c:43:50:6a:5c:3d:35:5b:ef:e0:30:a7:58:69:4a:fd:13:e3:
         d9:3e:e9:8e:50:54:3f:cc:1c:1c:a2:90:d8:c0:08:12:67:35:
         d0:5b:74:86:b2:b0:32:ae:f0:24:1c:af:a3:06:81:0c:f3:09:
         66:a1:76:55:51:9e:34:6e:81:ef:c8:a7:da:0d:04:e3:b6:80:
         69:3a:54:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 03:18:44 2026 by rpki-client