Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft
File:                     abfzv44Ke1kKD_qhycCsWAoLEZ4.mft (raw, json)
Hash identifier:          z+oPNTgrbxbchUbmpBSRanBQqyYSwXe3BCpWbP82AHQ=
Subject key identifier:   D4:39:21:CC:FD:7B:28:79:8B:AE:83:46:6C:08:E8:98:F9:8D:77:81
Authority key identifier: 69:B7:F3:BF:8E:0A:7B:59:0A:0F:FA:A1:C9:C0:AC:58:0A:0B:11:9E
Certificate issuer:       /CN=69b7f3bf8e0a7b590a0ffaa1c9c0ac580a0b119e
Certificate serial:       019E29CBC8A26096FB5D5532A4E280B7FE9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/abfzv44Ke1kKD_qhycCsWAoLEZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft
Manifest number:          0237
Signing time:             Fri 15 May 2026 04:01:21 +0000
Manifest this update:     Fri 15 May 2026 04:01:21 +0000
Manifest next update:     Sat 16 May 2026 04:01:21 +0000
Files and hashes:         1: ZckkoNHt2DvjlU2WvYDlIclH-DI.roa (hash: xy5JGKAo4mAfLH66AX9gOwR/ragqzfbDNJ5R5SMZh1s=)
                          2: abfzv44Ke1kKD_qhycCsWAoLEZ4.crl (hash: 515xJ7PTXdZi+8Cr5r+IWDweuxq3H7UZzmQ39PVl7IM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/abfzv44Ke1kKD_qhycCsWAoLEZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:cb:c8:a2:60:96:fb:5d:55:32:a4:e2:80:b7:fe:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69b7f3bf8e0a7b590a0ffaa1c9c0ac580a0b119e
        Validity
            Not Before: May 15 04:01:21 2026 GMT
            Not After : May 16 04:01:21 2026 GMT
        Subject: CN=d43921ccfd7b28798bae83466c08e898f98d7781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b4:df:bc:f6:3f:58:f4:9c:96:cb:03:6a:7a:
                    36:6a:af:b3:24:f7:4c:b9:d3:67:4a:7d:11:3b:e9:
                    79:86:7e:3e:e2:d7:23:7f:86:06:35:a4:bf:f6:5f:
                    83:b2:23:82:9c:7c:0e:b7:bc:4c:66:2b:a2:08:7e:
                    00:26:c1:51:ad:89:92:57:18:54:05:ba:35:b8:c9:
                    f9:cc:91:5b:41:8e:1c:88:fd:bc:a5:8a:74:1b:42:
                    8b:dc:93:22:10:75:ea:0a:68:b2:26:3d:32:e1:57:
                    b7:ac:cd:cd:59:37:ed:e2:6a:bd:f1:58:f6:a4:92:
                    85:e0:35:1b:3d:e2:a5:a1:59:7c:7e:fb:39:c5:6f:
                    bc:75:81:b2:48:3f:b7:25:e6:72:02:be:94:32:96:
                    df:7f:55:86:f5:ee:5b:0d:57:26:dd:50:d5:ba:12:
                    b7:d8:88:5a:a7:df:f4:b2:9d:98:0b:80:bb:a9:63:
                    a4:46:ea:ec:e8:25:19:cf:82:b4:d7:12:3e:c6:ca:
                    67:7e:e9:60:a8:ff:63:d3:80:78:39:4e:00:62:ce:
                    93:7d:48:3f:35:f6:f1:cf:0b:77:2a:4d:1b:c0:e0:
                    e2:1c:8c:38:a6:ab:bd:88:74:e5:49:a9:68:d2:8f:
                    30:0e:e8:7e:3b:a0:b8:5f:4c:d3:05:70:a5:67:cb:
                    28:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:39:21:CC:FD:7B:28:79:8B:AE:83:46:6C:08:E8:98:F9:8D:77:81
            X509v3 Authority Key Identifier:
                keyid:69:B7:F3:BF:8E:0A:7B:59:0A:0F:FA:A1:C9:C0:AC:58:0A:0B:11:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abfzv44Ke1kKD_qhycCsWAoLEZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:62:f0:be:ca:b2:9b:9a:50:95:6a:33:7e:0d:cf:07:d6:8e:
         c3:9c:c9:b8:d3:f4:48:1b:3c:e7:97:9c:68:d4:18:51:8c:a8:
         25:cc:3f:7c:b0:a9:be:8f:62:6c:f2:2b:21:38:96:c3:c5:f5:
         80:77:3d:84:98:0d:b9:bd:05:64:10:c2:74:67:15:e6:20:e7:
         45:6b:19:b2:b8:06:2a:4b:0c:3f:fc:e2:c3:db:2d:37:34:5a:
         96:ea:b5:16:c3:9b:8c:54:99:af:bc:8f:18:c4:0b:0e:75:18:
         12:8f:1f:9d:41:5a:20:46:14:bf:ad:a3:66:53:63:93:86:87:
         52:06:12:aa:f1:33:2a:9e:2a:db:b4:e4:fe:06:16:d0:ee:29:
         5f:35:4e:84:a9:45:85:b7:0c:b2:97:d0:b3:7e:95:1a:73:04:
         f3:cc:58:21:32:d5:4a:a0:ff:3f:0e:d5:9a:2d:d7:fa:16:b3:
         64:e8:94:73:b7:29:87:24:92:a8:7c:6b:e9:ad:9c:82:56:c6:
         83:d5:e7:0e:f7:40:2e:13:ed:a6:7b:5c:29:22:2e:50:1c:c0:
         5d:e5:26:18:cf:a6:10:e9:d2:c0:c5:b0:d7:db:3e:25:83:fe:
         07:a3:c0:7d:52:82:ea:f3:46:a5:99:2c:42:5f:85:1e:ee:cf:
         ca:27:b1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 10:15:03 2026 by rpki-client