Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
File:                     e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft (raw, json)
Hash identifier:          bO4I/fg63Kx+97Mj5jAJJ0cLxKHVCwQq9szKQjQFP0I=
Subject key identifier:   93:87:1C:3A:C0:18:EA:7C:8F:55:C5:09:81:08:7F:6E:61:AB:FB:17
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Certificate issuer:       /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial:       019E30E060A458AC5A1E0F735ED18E574AEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
Manifest number:          0A4D
Signing time:             Sat 16 May 2026 13:01:11 +0000
Manifest this update:     Sat 16 May 2026 13:01:11 +0000
Manifest next update:     Sun 17 May 2026 13:01:11 +0000
Files and hashes:         1: 5aHaMqVeMBDhBaX6C5G4xJdeGbA.roa (hash: QOZBNzX+3r101BCPDJTA6RgBDInLW/e+aTQmcxCkTxw=)
                          2: e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl (hash: b5p2+1qPOrKAIabViWdNkdG0tHxQDRaoQzpPYMJyl0s=)
                          3: sJ7mh4PMRzR7K0f1_u8SJ1aRsAg.roa (hash: x/O2N0o3jzmoZxKLCYM4NtZQWYu9bJeDNbCslBdV4OM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:60:a4:58:ac:5a:1e:0f:73:5e:d1:8e:57:4a:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
        Validity
            Not Before: May 16 13:01:11 2026 GMT
            Not After : May 17 13:01:11 2026 GMT
        Subject: CN=93871c3ac018ea7c8f55c50981087f6e61abfb17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:72:ba:f8:de:36:f9:75:3a:a0:2a:4d:14:d7:
                    67:ca:73:1c:92:ab:05:f1:c5:fa:82:81:99:bd:2b:
                    ba:4c:0a:d9:46:0e:75:31:de:81:70:b0:88:7c:a9:
                    9e:c6:66:1a:a1:62:35:13:a5:b8:b4:ab:6e:e0:2c:
                    96:6d:6b:42:0f:73:f1:79:c3:76:8b:c1:32:05:53:
                    11:45:9b:b0:e0:89:9a:5a:65:b8:00:33:62:4b:1d:
                    7e:4c:54:a3:db:3b:ac:47:07:5a:a8:0f:78:c1:56:
                    b8:8b:d6:e6:63:e5:2d:a8:3c:94:87:10:ea:07:35:
                    7d:12:c0:9c:ce:e6:03:10:d4:6f:66:91:ad:0c:1b:
                    ce:9b:4e:68:f1:bc:0f:78:1a:82:30:2f:ef:3e:a8:
                    d2:9f:8c:19:d8:63:23:86:76:e6:06:a6:3f:ee:b3:
                    f9:f7:4c:a1:e3:81:f5:9a:bb:2f:d2:5f:dc:69:07:
                    ea:25:4e:af:b7:b6:b9:e6:77:7c:71:2e:af:79:a4:
                    06:b8:dd:00:0e:ce:09:a0:04:c3:98:e2:f4:77:5d:
                    20:27:69:f6:31:0f:d7:c6:d8:c0:b4:be:c6:99:1b:
                    b0:61:44:d3:11:98:57:bf:73:2e:26:f9:c0:53:b8:
                    6b:7a:98:e5:de:8e:49:13:64:04:07:aa:81:53:7d:
                    4d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:87:1C:3A:C0:18:EA:7C:8F:55:C5:09:81:08:7F:6E:61:AB:FB:17
            X509v3 Authority Key Identifier:
                keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:d9:16:3b:96:5d:a2:11:7b:b2:46:e4:7f:03:86:c7:52:58:
         f5:3b:09:86:0e:6f:b8:ff:1b:fd:e4:30:61:94:65:f0:84:24:
         95:65:b3:41:59:cf:8b:cd:32:89:73:1a:aa:4f:17:81:d3:fc:
         e4:60:e4:06:75:9b:80:66:2d:65:f6:89:ba:b9:3a:9d:0c:60:
         01:f9:a3:65:6f:eb:89:75:82:96:ef:dc:43:49:9b:68:7c:bb:
         c4:ac:b0:ac:36:45:1f:22:0c:d3:3d:39:16:d0:77:28:96:c2:
         87:98:26:30:22:81:8d:20:ea:5b:71:b8:c6:f9:20:a4:b4:19:
         e3:8d:c2:d8:65:19:8c:91:5f:18:92:d9:73:c5:8b:fa:a2:5c:
         db:64:ba:97:5b:84:c6:ce:85:6d:33:17:3c:35:84:cc:4d:48:
         fa:d0:0c:b8:78:7c:0a:a2:d9:68:46:c3:e2:23:a5:17:3e:51:
         77:37:32:99:54:f3:08:45:fd:dc:dd:ec:1d:4a:f2:13:d6:44:
         32:0c:b7:1c:5d:0d:08:8b:18:b4:2c:57:74:d3:01:2e:22:39:
         09:99:b5:79:7a:76:13:2e:f5:6a:db:e0:1b:86:7b:97:72:6a:
         f0:70:85:a7:3e:eb:c8:cf:b8:26:ac:87:1a:24:58:06:3f:6d:
         3e:0a:2b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:19:18 2026 by rpki-client