Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
File:                     ATx0EyWXFizbLdY3YKvZlx4wv2M.mft (raw, json)
Hash identifier:          BciitRtsbzL5BeFqFxVR/aBrNaafL7oxRe+NZ++h1Ns=
Subject key identifier:   B3:8F:AF:4E:7B:70:FC:FD:96:B5:CF:A2:AE:A5:B8:C8:50:F0:A8:1C
Authority key identifier: 01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63
Certificate issuer:       /CN=013c74132597162cdb2dd63760abd9971e30bf63
Certificate serial:       019E30E0B82FA7FA4B0340335ECC04B9C2AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
Manifest number:          0F91
Signing time:             Sat 16 May 2026 13:01:34 +0000
Manifest this update:     Sat 16 May 2026 13:01:34 +0000
Manifest next update:     Sun 17 May 2026 13:01:34 +0000
Files and hashes:         1: 5QIRXwbGdujxdQZQo1ogf2n4ECU.roa (hash: swE11M7pxffwm23eQGI729DPqze3M2Czs+U2Z9G7DZk=)
                          2: ATx0EyWXFizbLdY3YKvZlx4wv2M.crl (hash: 6B/ddzo8SRNENYoCbttpemEOn/GtDBazrf2luFj/oIg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:b8:2f:a7:fa:4b:03:40:33:5e:cc:04:b9:c2:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=013c74132597162cdb2dd63760abd9971e30bf63
        Validity
            Not Before: May 16 13:01:34 2026 GMT
            Not After : May 17 13:01:34 2026 GMT
        Subject: CN=b38faf4e7b70fcfd96b5cfa2aea5b8c850f0a81c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:35:93:04:e8:eb:ef:e7:e1:c7:47:1b:9c:e7:
                    7d:bb:1a:60:82:89:eb:de:99:63:17:f4:5a:1a:6b:
                    3f:58:ee:b6:f7:46:0a:ac:22:63:a6:e5:d8:0b:2a:
                    8f:93:b7:56:6d:f6:44:46:0e:5e:ce:29:f4:b9:c8:
                    5f:ea:74:fa:59:2e:8d:f9:32:f0:a6:b5:24:ce:05:
                    e4:24:aa:d8:38:ae:18:2d:59:75:82:14:6e:9a:ae:
                    13:bf:6f:8c:30:8c:69:95:71:d6:5a:0e:84:1d:75:
                    fb:3f:80:fa:fe:17:0b:b4:90:35:2d:13:4e:0a:5b:
                    a2:06:30:c5:18:ab:6e:a4:61:c8:3b:d6:a4:7b:7e:
                    a7:a0:a6:fa:85:85:08:ae:0d:db:64:1d:05:73:b6:
                    cc:66:3c:bb:c5:d3:2d:26:85:7a:e3:65:57:c7:08:
                    73:d7:b5:da:e9:46:59:58:eb:f1:75:10:1b:ad:1e:
                    6b:c7:0f:7a:96:ea:67:52:d3:e5:e0:0a:c1:51:ce:
                    f8:45:55:b9:98:bd:fa:40:53:12:fa:e5:7c:5f:ba:
                    0c:e5:7e:3e:a6:21:c5:a1:e3:03:d1:94:91:82:4e:
                    8b:49:47:cc:7e:05:b7:48:d1:df:7f:d3:fd:44:1d:
                    9b:4e:05:12:4e:3b:3f:12:39:af:fc:c5:64:3f:36:
                    71:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:8F:AF:4E:7B:70:FC:FD:96:B5:CF:A2:AE:A5:B8:C8:50:F0:A8:1C
            X509v3 Authority Key Identifier:
                keyid:01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:5e:cc:30:94:ba:6a:7f:d6:9b:cd:c3:b5:60:cc:cb:0c:ce:
         cf:17:f2:89:53:92:ec:af:cd:0a:5e:74:38:bd:db:fb:4d:f7:
         70:a3:f8:48:84:71:3d:c3:b2:0e:e3:22:03:d0:60:c4:54:7c:
         cc:f4:f0:b3:f2:84:a8:32:dc:7c:fc:25:71:be:5e:97:d9:9b:
         bb:59:59:17:c5:51:81:70:80:96:2c:5a:69:f7:01:12:b3:c6:
         f5:a0:8c:92:4a:27:9c:38:4c:6c:b0:40:16:34:32:94:64:3f:
         2a:1f:f2:5b:62:83:c4:fd:83:d0:a9:8d:e4:04:f0:cc:b7:d1:
         d3:7b:f1:f3:d0:3e:4c:97:3b:36:5d:c9:fc:61:74:9d:90:b1:
         eb:4f:0a:38:00:c8:d8:f9:86:66:e8:81:4a:19:92:9b:02:a2:
         e4:0c:1e:a1:64:ed:cf:f2:af:40:14:c0:d4:b2:09:9f:53:42:
         d3:f0:ba:59:3e:2f:95:b9:5c:17:91:d5:25:49:e5:cc:25:dd:
         44:0e:75:1b:dd:b5:84:6b:77:d1:18:b5:78:bb:51:5c:4e:5a:
         24:84:20:79:66:f1:8b:45:00:7a:38:3b:4d:9e:3b:c6:5c:d8:
         77:3d:75:2d:7d:ac:46:4b:dd:c2:db:ce:e4:ee:2b:d9:44:1b:
         8f:1a:48:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:42 2026 by rpki-client