Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
File:                     2sTLURUIAqQBjMJWrSn1RyBnXtU.mft (raw, json)
Hash identifier:          qe+cWGsVBO0ORmVd/MGyPoOdUmaVheRxTEaGOHj+CP0=
Subject key identifier:   27:73:CE:4B:40:CB:45:EF:8B:D2:EF:17:01:84:64:15:42:9A:59:72
Authority key identifier: DA:C4:CB:51:15:08:02:A4:01:8C:C2:56:AD:29:F5:47:20:67:5E:D5
Certificate issuer:       /CN=dac4cb51150802a4018cc256ad29f54720675ed5
Certificate serial:       019E3117D28D2F07FB9BAAE97A3D7FCD510F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
Manifest number:          1423
Signing time:             Sat 16 May 2026 14:01:45 +0000
Manifest this update:     Sat 16 May 2026 14:01:45 +0000
Manifest next update:     Sun 17 May 2026 14:01:45 +0000
Files and hashes:         1: 2sTLURUIAqQBjMJWrSn1RyBnXtU.crl (hash: 4Vvd29+bdM8ngJO2QKu7HN7xz4a3l3u/2D8kUj1M62g=)
                          2: 8JzTv1sEWJzgKBh6hP5zrOespe0.roa (hash: nGLxJDi43LNGHyCGN8ILdukMd6pDlSBvmxCeyBz73IY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:d2:8d:2f:07:fb:9b:aa:e9:7a:3d:7f:cd:51:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dac4cb51150802a4018cc256ad29f54720675ed5
        Validity
            Not Before: May 16 14:01:45 2026 GMT
            Not After : May 17 14:01:45 2026 GMT
        Subject: CN=2773ce4b40cb45ef8bd2ef1701846415429a5972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:50:1e:39:83:7c:c0:52:58:60:58:bd:30:03:
                    d6:dd:d0:31:0d:36:84:55:c9:38:ce:35:78:a1:18:
                    e4:79:95:f2:8e:d7:26:0d:d1:70:c2:a2:b6:45:4e:
                    c0:9c:93:e3:db:73:24:fc:ce:e5:9e:47:09:b9:a9:
                    63:ec:fd:03:64:41:5a:f6:a7:b9:e8:6e:31:cc:83:
                    6f:b8:37:a0:ce:97:c2:ba:55:6a:bc:9c:ea:b1:09:
                    2e:3e:44:a6:25:79:28:52:b0:39:26:07:8c:f0:13:
                    6c:2e:49:3e:28:95:c4:97:a9:4f:b7:a7:c8:a9:95:
                    94:d4:07:0c:9c:62:76:de:72:23:eb:98:2e:c4:c5:
                    68:19:40:95:c1:bc:40:56:f8:2e:18:bc:42:95:f3:
                    23:91:30:f1:5b:f9:c7:27:bd:2f:a5:9b:d0:16:83:
                    50:77:1b:6b:20:32:37:a9:11:83:19:34:e9:dc:22:
                    bd:50:07:49:dc:3f:1e:d2:c2:da:dd:bf:c1:54:91:
                    42:10:f3:b1:c2:bc:9c:aa:e0:bd:2f:8e:5d:8f:d4:
                    6c:c7:b0:d3:c0:d6:fd:70:86:0d:3f:86:1a:df:6f:
                    23:85:42:f1:38:69:21:b4:57:8d:42:df:b5:da:b7:
                    41:45:bd:01:d8:63:6b:f7:1c:8b:b6:86:23:13:a9:
                    9e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:73:CE:4B:40:CB:45:EF:8B:D2:EF:17:01:84:64:15:42:9A:59:72
            X509v3 Authority Key Identifier:
                keyid:DA:C4:CB:51:15:08:02:A4:01:8C:C2:56:AD:29:F5:47:20:67:5E:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:5e:9a:ee:4d:76:5f:1f:08:20:fb:a0:78:31:fa:c2:db:c0:
         a8:bb:7c:f1:b1:37:c7:3a:09:8e:b9:e6:1f:0b:6a:24:03:e8:
         80:c6:5b:c1:71:8c:fb:79:76:85:a2:19:54:3a:ac:d5:58:cd:
         cc:0f:4b:a9:e9:74:3f:fb:2a:48:a9:82:c1:97:94:14:43:7a:
         04:01:25:3f:ed:51:74:53:fc:1a:2a:85:3f:35:0d:ea:90:2a:
         32:f0:b7:0b:d6:f6:b7:78:a1:e8:1b:0d:4f:a4:75:16:c5:9f:
         8e:f1:5a:bc:fb:fe:22:dd:0e:59:45:ab:2d:9b:1b:34:3a:ba:
         53:57:cb:f6:4e:4a:1b:5c:2b:cf:f0:8c:1f:4f:72:a8:49:44:
         05:0b:59:ce:7c:e1:c8:80:fa:84:44:10:1a:a3:85:0a:fc:ac:
         9c:87:2c:c2:fa:df:38:96:c8:d0:74:41:40:51:7f:04:61:45:
         70:8b:6e:cb:6c:f6:f1:a7:9b:e1:f7:0f:17:62:35:3e:72:c2:
         93:b7:e2:3d:e2:98:b2:26:ca:73:4e:e5:aa:95:90:56:51:0d:
         7d:3d:a3:af:a6:50:0d:8c:6f:91:1d:6d:73:b7:27:da:b7:be:
         c0:f2:99:91:89:b3:03:3c:f7:5d:34:fb:85:d6:d8:d6:a6:bb:
         37:b6:c1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:55:10 2026 by rpki-client