Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
File:                     E3g31dF5adK8DUTlY0qUv3006Qs.mft (raw, json)
Hash identifier:          jXnhv+kAh7dTDuyj3N6i3iLy4nGSNkoazkqMVo4cDz4=
Subject key identifier:   48:D9:99:82:9A:75:F7:3F:EE:DD:4F:F2:C1:87:FF:82:A7:9B:A9:F2
Authority key identifier: 13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B
Certificate issuer:       /CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b
Certificate serial:       019E2F602B8528637B5A7C09E40621ED1F80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
Manifest number:          1278
Signing time:             Sat 16 May 2026 06:01:32 +0000
Manifest this update:     Sat 16 May 2026 06:01:32 +0000
Manifest next update:     Sun 17 May 2026 06:01:32 +0000
Files and hashes:         1: E3g31dF5adK8DUTlY0qUv3006Qs.crl (hash: /+3TWQ70brgKEPS8dNizN31D9llS4zGJ12UAo9eXRgY=)
                          2: da3VworWvFmFbR1FufRr5CMYvkc.roa (hash: hwa/D4Vf8y1DVcvliVC0sWu2QdlvVDaI6hD4bxSYxVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 06:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:60:2b:85:28:63:7b:5a:7c:09:e4:06:21:ed:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b
        Validity
            Not Before: May 16 06:01:32 2026 GMT
            Not After : May 17 06:01:32 2026 GMT
        Subject: CN=48d999829a75f73feedd4ff2c187ff82a79ba9f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3b:a3:91:51:d8:5a:fa:f1:d5:19:3a:1e:21:
                    e7:a6:1e:4a:68:ce:7c:e8:77:0c:42:ab:9d:f0:1a:
                    c6:94:10:01:a6:1d:14:24:4b:f2:f2:14:6b:3d:13:
                    bc:18:db:e6:c4:32:e4:72:0a:75:54:5d:94:7d:97:
                    d1:03:1c:72:d8:b1:3a:bc:b5:f2:56:9e:98:95:dd:
                    ca:23:28:89:24:75:26:f4:52:7a:fa:61:ee:8e:1b:
                    21:80:12:25:ae:c3:4f:47:83:e5:4b:cf:bf:d7:bb:
                    da:50:3d:48:92:3c:22:9f:92:47:8a:17:81:58:91:
                    46:aa:33:d5:89:cf:9d:a2:76:c4:9a:12:f5:d3:3a:
                    65:c8:49:e1:24:64:dc:8e:9f:05:6e:09:b1:a6:76:
                    3b:21:d1:41:5c:7d:8c:63:a4:89:c8:b7:53:f1:24:
                    91:d9:64:48:07:50:7b:e2:5b:aa:65:0e:06:6b:a0:
                    dc:4c:d0:e6:26:e3:2e:16:ca:fb:ec:b8:45:34:71:
                    dd:1c:5f:fd:0f:1a:3a:97:f3:f2:8f:be:01:39:0c:
                    f9:1c:b8:b3:4b:f4:95:34:36:d4:2a:24:07:55:41:
                    b4:2c:26:0a:8c:39:22:09:5f:30:52:3a:b6:29:ec:
                    58:1c:10:af:0b:95:a8:dc:71:cb:ef:26:6b:16:a0:
                    f5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D9:99:82:9A:75:F7:3F:EE:DD:4F:F2:C1:87:FF:82:A7:9B:A9:F2
            X509v3 Authority Key Identifier:
                keyid:13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:da:70:56:97:55:14:49:fb:2f:62:b5:3d:5a:c5:a1:21:90:
         d5:a6:ea:e0:f8:46:db:70:2e:7b:88:cd:62:53:de:c4:41:fe:
         5a:97:24:e0:3d:6f:f8:18:9a:a1:ee:e5:06:cf:e0:f1:d8:82:
         e7:c2:a1:92:54:94:97:69:71:68:cd:51:81:e8:47:c2:d6:7a:
         b6:df:f1:f6:4e:77:4a:49:47:09:79:0e:f7:b8:55:ec:56:90:
         de:fd:2a:78:56:25:0b:8c:11:bd:dc:c5:ee:f4:16:b9:20:01:
         65:1a:1d:73:86:eb:d8:24:d9:95:6f:4c:07:11:8d:cc:3e:1d:
         25:da:ae:ad:ae:3b:64:75:6a:e6:0f:19:10:38:06:99:0b:c1:
         e4:7a:27:30:1d:40:50:cf:29:fc:67:40:76:19:3a:f6:63:63:
         93:58:6f:7f:7f:89:f1:23:04:8f:03:ef:d1:30:45:f3:b8:01:
         e0:b7:98:70:c0:24:d8:d5:02:c7:b9:6d:bb:03:5e:23:2a:81:
         8a:31:8e:20:d3:e9:10:c0:87:9f:fe:d9:2d:1c:bd:95:8f:e7:
         ba:e2:c3:9e:ee:34:18:86:b5:96:7e:f7:02:a7:9a:a2:d8:6d:
         58:5a:a1:7a:83:93:a6:41:b0:2f:e4:61:ce:37:93:1f:73:e6:
         6a:bd:60:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:26:17 2026 by rpki-client