Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
File:                     SLo3AWkdKSivrTobVzWib0yZz_Y.mft (raw, json)
Hash identifier:          du4v5Lsou5ZyDJLdDFJ3hOWhQfAe1PyKoXGUquqVdLI=
Subject key identifier:   2F:C7:CC:39:6F:07:1D:B1:AB:9F:FE:45:03:A2:C2:02:32:57:CE:FA
Authority key identifier: 48:BA:37:01:69:1D:29:28:AF:AD:3A:1B:57:35:A2:6F:4C:99:CF:F6
Certificate issuer:       /CN=48ba3701691d2928afad3a1b5735a26f4c99cff6
Certificate serial:       019DDE0CA2FAC01C9107F56652ED8BDA63BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
Manifest number:          17F5
Signing time:             Thu 30 Apr 2026 11:01:03 +0000
Manifest this update:     Thu 30 Apr 2026 11:01:03 +0000
Manifest next update:     Fri 01 May 2026 11:01:03 +0000
Files and hashes:         1: SLo3AWkdKSivrTobVzWib0yZz_Y.crl (hash: Vrau5KIWvhl/o22++TR6avzMBgi56z8M0Yc1+P77B94=)
                          2: v3K9X62S23EsPXBUv8o5_0MHn4Y.roa (hash: 6AkfovE+X2QIgtQd8B7GXkBK4tknFic/hJn5uV1siEo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 11:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:de:0c:a2:fa:c0:1c:91:07:f5:66:52:ed:8b:da:63:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48ba3701691d2928afad3a1b5735a26f4c99cff6
        Validity
            Not Before: Apr 30 11:01:03 2026 GMT
            Not After : May  1 11:01:03 2026 GMT
        Subject: CN=2fc7cc396f071db1ab9ffe4503a2c2023257cefa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:08:d8:be:0e:f3:1c:f7:06:d8:e6:5e:ca:3b:
                    52:1d:36:78:13:dc:f7:90:34:af:83:0e:90:55:a5:
                    5f:b1:cd:7c:cc:49:39:ae:00:52:73:58:54:be:eb:
                    1c:60:85:49:19:19:be:01:12:77:71:ec:45:39:9c:
                    8d:bd:27:92:44:7b:90:a2:b2:88:9c:ce:d7:fa:95:
                    9c:e6:30:ed:8e:be:5d:8e:01:46:8b:1b:ca:e4:8e:
                    c3:2d:61:1a:aa:d4:12:e9:b9:f1:f7:61:33:b3:5b:
                    8b:6b:88:5e:16:a6:84:0d:db:3f:a5:b3:63:40:2a:
                    a8:ad:3d:3e:ca:dd:01:8b:63:e4:02:f8:93:a2:4b:
                    06:01:42:c0:2a:ee:9f:5a:68:2e:07:c0:dd:0e:6b:
                    1b:2c:68:d4:bf:2c:be:43:c6:d2:a1:fa:ff:1d:0e:
                    d6:a2:19:f8:c0:25:a2:e0:07:de:f9:d1:c3:72:c9:
                    c5:94:b1:93:a2:9f:ff:ca:5b:88:ab:00:68:ed:83:
                    81:10:c8:eb:85:90:c1:94:ab:83:c2:50:f0:22:c4:
                    71:38:ee:98:d2:c3:f4:8c:34:b1:b3:96:66:2f:e8:
                    fd:aa:a4:53:81:b4:cd:3d:a3:fc:b4:75:a7:88:ab:
                    b0:57:3a:8c:b2:fc:d9:9d:21:c3:40:38:22:15:5a:
                    06:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C7:CC:39:6F:07:1D:B1:AB:9F:FE:45:03:A2:C2:02:32:57:CE:FA
            X509v3 Authority Key Identifier:
                keyid:48:BA:37:01:69:1D:29:28:AF:AD:3A:1B:57:35:A2:6F:4C:99:CF:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:17:33:1b:e5:95:4e:5c:8a:94:a3:e5:f4:bf:62:1c:88:88:
         f2:50:c9:bb:c6:6e:db:52:c1:93:3a:18:1b:35:ae:e7:42:e5:
         8f:12:cf:37:a7:33:54:3b:31:59:11:32:43:4c:74:94:60:90:
         82:06:4b:cb:48:0b:e2:f2:a3:02:ee:7c:0e:05:e2:e9:43:2a:
         37:fb:c9:54:7f:33:41:c9:84:68:1d:dc:f8:99:cb:fc:5b:96:
         e0:0e:c7:3d:a5:a1:44:43:ad:92:23:53:20:3e:fa:67:8b:d4:
         1a:3d:c2:b7:e2:e6:04:2c:09:04:fd:2b:be:4f:08:19:33:43:
         e8:9d:1d:ec:0b:c6:ce:c0:6b:68:c2:63:7a:39:52:3c:dc:52:
         66:6d:c7:3d:a8:dd:54:67:e5:dc:61:91:7c:14:c0:b1:0a:12:
         07:1b:93:99:e2:95:cb:ff:7e:ac:4a:76:6b:8a:7c:4e:97:63:
         f9:b5:17:e8:11:fa:44:b6:ad:7d:6a:41:3e:45:fa:b1:79:7f:
         64:34:9d:a1:30:6b:c2:34:f2:85:7b:15:45:a2:a5:01:84:34:
         5e:92:47:a9:be:88:6a:50:b8:7e:cb:9c:d6:7a:85:ab:15:b1:
         3e:b6:13:b5:ce:cf:f3:32:d5:37:fd:61:a9:03:fa:f1:30:3c:
         8f:5e:62:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 17:28:44 2026 by rpki-client