Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
File:                     1fJk44BaPRBFNzV6FP-SasApWZw.mft (raw, json)
Hash identifier:          o9LeZo7FnTLWjUPnbV4W+K+f99XqrvD5EFzCFLdGIIk=
Subject key identifier:   5F:A7:93:BA:BF:67:D2:4E:0C:D7:1B:15:7D:23:38:FA:D4:24:9B:C3
Authority key identifier: D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
Certificate issuer:       /CN=d5f264e3805a3d104537357a14ff926ac029599c
Certificate serial:       019E295E52C214B1C3AD0A5201F6EB89AEA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
Manifest number:          08ED
Signing time:             Fri 15 May 2026 02:01:47 +0000
Manifest this update:     Fri 15 May 2026 02:01:47 +0000
Manifest next update:     Sat 16 May 2026 02:01:47 +0000
Files and hashes:         1: 1fJk44BaPRBFNzV6FP-SasApWZw.crl (hash: mk6dbvVBpch4xOYzf7jXCgsVKkWoqnzqtPwn6y9MrcI=)
                          2: rMIMTjbHaNV7xR9gPtw0A_pkuLU.roa (hash: NFH0+DidyU00k9B3v8wVAxHBrFD7dy/UWv2YYeeqFAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:5e:52:c2:14:b1:c3:ad:0a:52:01:f6:eb:89:ae:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f264e3805a3d104537357a14ff926ac029599c
        Validity
            Not Before: May 15 02:01:47 2026 GMT
            Not After : May 16 02:01:47 2026 GMT
        Subject: CN=5fa793babf67d24e0cd71b157d2338fad4249bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:10:75:c1:a2:68:f5:e2:85:d4:39:b9:cb:30:
                    10:50:36:0b:35:41:32:ea:4d:a7:44:cd:b8:bf:8c:
                    ea:ed:c8:24:d0:a5:a0:58:c6:74:dc:89:4e:68:1a:
                    57:39:ca:a6:e5:7d:1d:f5:d6:aa:1f:65:d3:6a:75:
                    00:5d:08:56:f8:41:af:2d:14:a3:ab:11:76:0f:80:
                    a7:3e:d5:f3:82:4d:dd:12:f9:b5:1c:3e:8c:60:b6:
                    c6:3f:db:35:87:5b:52:86:49:14:d8:da:73:f0:2b:
                    0d:59:d0:33:d5:82:be:3e:15:c8:9d:18:40:03:95:
                    71:a3:ef:84:ef:b4:90:8d:7d:7d:f8:19:bb:65:65:
                    85:75:5f:2f:83:91:35:9f:5a:77:3c:50:2b:09:f0:
                    74:51:c0:30:94:3e:04:8d:30:99:33:94:df:58:cc:
                    4f:22:05:de:0a:65:58:75:dd:6b:1e:d5:7d:d6:b0:
                    d5:16:a7:65:4d:2c:e5:c4:00:d3:02:80:23:c1:91:
                    ae:ed:d5:95:e7:38:77:de:8e:de:15:3b:1c:30:e8:
                    4a:e4:96:26:8f:72:fc:8d:26:dc:39:44:08:c8:e2:
                    d2:07:e3:1c:7d:d7:d4:60:45:6f:6e:99:8a:d7:d7:
                    b8:c2:e1:8c:22:95:98:70:72:6c:64:ff:90:a5:b5:
                    1c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A7:93:BA:BF:67:D2:4E:0C:D7:1B:15:7D:23:38:FA:D4:24:9B:C3
            X509v3 Authority Key Identifier:
                keyid:D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:55:08:1c:46:57:a3:4b:67:35:d2:3a:87:aa:65:20:7a:4d:
         26:5b:ca:23:ed:5e:e9:1c:80:1d:51:b3:8f:a8:93:70:ee:7c:
         6a:98:d7:6d:ce:78:f9:c0:c9:84:ea:6a:55:c7:9d:2f:5a:21:
         fe:ad:bd:99:90:73:42:0c:a5:55:cf:19:71:21:b1:04:fc:b3:
         bf:0e:9e:31:d6:33:72:02:5c:ec:65:50:59:43:22:c2:d5:b8:
         d0:1f:d6:6d:31:dc:bd:f0:13:3c:a3:ac:f8:59:6c:55:d8:b7:
         59:35:8b:9b:c6:74:52:18:53:ea:d4:e3:2b:4c:6a:2d:12:1b:
         4c:49:d4:49:ac:dc:fe:6e:01:83:64:ea:26:14:72:03:24:1c:
         43:53:28:fc:8d:53:63:49:55:cb:4d:f3:35:ce:64:dd:70:3f:
         9f:b6:6b:0b:4c:40:fe:e5:a8:d2:e5:15:b7:e7:92:77:76:eb:
         98:1b:f2:fe:38:9e:d5:6f:54:cf:e9:89:59:e4:47:ac:1d:c9:
         81:80:7f:45:74:41:e5:2d:b7:b1:c3:73:25:b4:66:7f:6b:f2:
         c6:03:9d:47:61:d7:f7:65:b4:ff:f9:5b:51:06:0c:0c:16:d3:
         0c:03:97:9d:8f:a6:ba:54:d2:ae:34:af:8c:4b:f5:59:e0:32:
         cd:47:cd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 11:15:10 2026 by rpki-client