Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft
File:                     EVwEDsl1QyAjbNymTjk5C93jYmo.mft (raw, json)
Hash identifier:          FOe6Aj4+XPYLXj1L9ViaQEJn/J0ZU/oFGa+eLuKyiM0=
Subject key identifier:   1F:B7:5D:9A:E3:AE:11:F7:8F:4F:1E:49:62:22:9C:2A:53:07:24:63
Authority key identifier: 11:5C:04:0E:C9:75:43:20:23:6C:DC:A6:4E:39:39:0B:DD:E3:62:6A
Certificate issuer:       /CN=115c040ec9754320236cdca64e39390bdde3626a
Certificate serial:       019E2B4C1C1E161D68E3D741FF91846A179F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EVwEDsl1QyAjbNymTjk5C93jYmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft
Manifest number:          0DEE
Signing time:             Fri 15 May 2026 11:01:08 +0000
Manifest this update:     Fri 15 May 2026 11:01:08 +0000
Manifest next update:     Sat 16 May 2026 11:01:08 +0000
Files and hashes:         1: EVwEDsl1QyAjbNymTjk5C93jYmo.crl (hash: Chex03c/Be4ndpbDn8VE7iP84BOhto5c8OlfrYHhixA=)
                          2: T5FYecDL9dYudSF4znOqL3xO-3I.roa (hash: tGYqIZRK3jsFGjXl9JsU630t/v5iPjAOq7gYJouPhLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EVwEDsl1QyAjbNymTjk5C93jYmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2b:4c:1c:1e:16:1d:68:e3:d7:41:ff:91:84:6a:17:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115c040ec9754320236cdca64e39390bdde3626a
        Validity
            Not Before: May 15 11:01:08 2026 GMT
            Not After : May 16 11:01:08 2026 GMT
        Subject: CN=1fb75d9ae3ae11f78f4f1e4962229c2a53072463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:87:89:3c:86:21:e4:87:92:bc:9e:44:35:0c:
                    44:36:43:db:52:63:73:ac:05:36:25:21:3c:8b:87:
                    3a:f7:77:1d:a3:70:27:6c:c0:68:d8:0e:e7:6d:3c:
                    0a:a7:ab:2d:a0:2a:b3:24:47:d8:86:c3:75:73:11:
                    98:ff:f2:01:40:7f:b0:21:7f:ea:31:54:02:9e:26:
                    49:21:fc:c2:49:34:dd:d8:fb:e6:9e:2a:6f:16:65:
                    2c:c8:96:40:fe:c9:32:2e:b9:a8:b6:c4:81:7d:2e:
                    75:51:24:ce:0a:cb:93:ce:9f:91:f8:d0:dd:84:ca:
                    e2:60:1e:62:c4:b4:63:ef:69:9f:94:55:4d:4e:e6:
                    29:b5:dc:89:20:04:ec:be:cd:c7:31:3a:aa:92:7b:
                    8c:7d:6b:ce:f1:4d:5c:f7:a0:8f:bc:74:32:00:cd:
                    5e:34:cd:d5:f4:96:39:0a:d2:06:43:9b:85:50:61:
                    41:0a:f8:7a:ee:55:b0:25:f3:7d:7e:06:fd:0a:7a:
                    59:78:91:d5:97:f2:4e:dd:0f:90:5d:0c:49:0b:f9:
                    56:f5:db:75:77:81:78:90:8a:61:5c:9e:7d:9d:a4:
                    c3:9f:12:61:ce:c6:57:18:d9:7e:ad:b0:a2:cb:22:
                    51:3f:72:dd:2a:be:e7:da:f4:e2:c9:4e:66:93:88:
                    4a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B7:5D:9A:E3:AE:11:F7:8F:4F:1E:49:62:22:9C:2A:53:07:24:63
            X509v3 Authority Key Identifier:
                keyid:11:5C:04:0E:C9:75:43:20:23:6C:DC:A6:4E:39:39:0B:DD:E3:62:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVwEDsl1QyAjbNymTjk5C93jYmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:00:55:d4:0c:58:e0:f7:29:04:ab:95:56:c6:40:e6:72:d3:
         b9:10:5a:19:c8:8e:a8:6c:ef:22:ab:ee:76:be:e2:9d:07:d5:
         26:86:33:63:94:7b:6e:de:16:0c:51:00:07:d2:5e:33:3b:e4:
         04:89:6e:b0:f4:ec:f1:b7:57:79:d3:9a:63:ca:0a:16:ef:45:
         56:70:34:a6:27:14:6c:9d:3a:3f:49:c4:dd:ca:cd:55:fb:41:
         20:e8:72:77:bf:86:0f:d6:cd:d9:80:23:d7:05:6a:81:06:89:
         82:94:15:21:69:b7:ac:3a:75:13:e2:62:e7:87:fc:11:2d:b8:
         87:87:c0:f7:6b:50:ee:4b:f5:3f:ed:70:19:a2:0d:11:98:60:
         10:fe:53:df:ab:86:c6:fd:09:af:b5:de:01:9f:80:52:b8:8c:
         b4:43:52:5e:b1:ec:d4:cc:ed:9b:fb:5b:8d:1e:e4:5d:62:d0:
         85:bf:a7:ee:b2:ff:fd:35:38:60:26:77:12:71:4f:2e:7a:c6:
         37:f4:25:2b:fd:04:e5:1f:f4:09:5d:29:70:4d:7e:bd:db:68:
         95:fd:6b:08:e6:dc:87:a7:19:a6:1f:54:ff:21:64:fc:ae:8d:
         88:c1:2b:09:dd:78:bc:ef:44:48:c5:f0:ea:e0:b3:d9:2d:98:
         d3:a2:90:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 13:28:09 2026 by rpki-client