Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
File:                     fdUdwQKkl1GOFgkeZegFwkOO8ls.mft (raw, json)
Hash identifier:          ujZ8dg/J+2D+jFNVBxxE+SzYvq88R75lsT+vw6+UJwQ=
Subject key identifier:   EE:F7:B9:47:27:0D:9D:EA:F1:49:D5:F9:6D:45:4E:8F:29:0D:13:44
Authority key identifier: 7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B
Certificate issuer:       /CN=7dd51dc102a497518e16091e65e805c2438ef25b
Certificate serial:       019E2B4C1DC2601AF78321DA89C83BD42FB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
Manifest number:          0A1F
Signing time:             Fri 15 May 2026 11:01:08 +0000
Manifest this update:     Fri 15 May 2026 11:01:08 +0000
Manifest next update:     Sat 16 May 2026 11:01:08 +0000
Files and hashes:         1: Wx2W2x44SbNMpet_nxHfcd54RRg.roa (hash: RaqqpE5anacxSOoNS8mABkC5o0iVF+x65+b349Ql+4w=)
                          2: fdUdwQKkl1GOFgkeZegFwkOO8ls.crl (hash: wVZAytc6BD13MFhNWJ1h2jNOL2JIUid4E30vCK+rhU0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2b:4c:1d:c2:60:1a:f7:83:21:da:89:c8:3b:d4:2f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dd51dc102a497518e16091e65e805c2438ef25b
        Validity
            Not Before: May 15 11:01:08 2026 GMT
            Not After : May 16 11:01:08 2026 GMT
        Subject: CN=eef7b947270d9deaf149d5f96d454e8f290d1344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a4:42:55:9b:04:33:ce:c2:ed:dc:46:67:6d:
                    85:36:c5:d0:2f:6c:04:d1:32:87:e9:ed:7b:10:b4:
                    11:7c:69:9a:d2:b1:ed:ab:87:40:2b:cf:10:6e:ea:
                    a9:ee:c5:a8:2e:bc:c0:a1:71:78:47:9c:53:69:ec:
                    0e:55:da:1d:a5:07:dd:be:9c:84:77:0d:18:b4:46:
                    62:51:57:50:dd:aa:66:a9:f1:ae:7b:1d:c7:e9:e1:
                    88:ce:90:3a:f2:3f:52:f3:9f:37:ff:18:bd:c6:a4:
                    ba:48:dc:6e:84:9d:80:c5:16:fd:f5:0b:e1:b3:08:
                    53:f9:78:a5:15:df:74:65:54:87:40:fd:7f:36:90:
                    16:5d:d9:86:82:8a:63:33:6b:3b:d1:05:10:d6:72:
                    ee:48:f7:11:8c:84:89:e6:c4:72:89:a9:8a:4f:62:
                    af:2c:80:6d:99:82:fb:bf:b2:8b:20:d5:ea:13:e0:
                    87:12:07:df:a1:b5:54:01:7c:0d:b4:01:1f:fc:59:
                    7f:60:06:49:d2:c2:85:64:38:87:f6:3b:5a:0d:41:
                    b0:2e:a6:1e:11:23:f0:db:5a:06:5c:2a:39:9d:33:
                    91:95:8a:34:52:43:fc:23:d4:3b:ad:62:f3:bb:98:
                    7e:05:84:da:f4:65:42:01:27:d9:b9:ce:38:6d:9b:
                    72:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F7:B9:47:27:0D:9D:EA:F1:49:D5:F9:6D:45:4E:8F:29:0D:13:44
            X509v3 Authority Key Identifier:
                keyid:7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:18:70:01:b9:78:ba:2f:3f:1c:41:45:90:1f:4d:1f:4a:ba:
         72:d7:91:0d:06:c4:ec:29:ed:e7:f8:09:1b:a9:71:79:c2:92:
         eb:a7:d9:d5:02:83:28:83:21:8b:3f:3b:c8:0c:fd:22:bd:2a:
         9b:fd:7f:33:a3:d2:ee:1f:50:5d:de:43:12:58:92:01:74:fa:
         78:cd:d3:10:b2:82:c1:9d:f9:05:5b:4d:47:b1:c7:f0:4a:f1:
         b5:23:bf:cd:78:13:d2:a0:f8:4d:bc:6e:a7:24:e9:6c:71:e7:
         9c:95:e9:31:1a:ec:57:a0:1c:35:14:36:70:37:86:34:1a:fe:
         4d:bf:5c:e5:79:3e:41:6d:ce:22:a2:ca:8e:e2:2a:1c:d0:2d:
         b7:a9:c8:c8:05:df:f3:82:ce:88:e2:f5:c1:96:38:40:54:ad:
         ff:ea:c9:1c:3b:bd:6a:54:e1:24:52:3b:63:bb:fa:51:f2:6c:
         b9:e7:22:cb:79:91:b1:ce:d8:5a:30:63:6f:71:f4:c3:b0:d2:
         44:10:5a:31:6d:c5:13:68:ed:24:86:8b:7e:28:d8:d2:91:3c:
         0c:c2:b2:c3:ce:eb:f8:a4:07:92:6b:75:6b:87:ae:37:28:be:
         bf:53:82:a7:38:54:62:b9:5f:93:ea:d4:c4:5b:7d:78:0b:83:
         be:1f:25:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 13:24:09 2026 by rpki-client