Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.mft
File:                     iWsznbz4QR1YQAjPAptHyIqzedU.mft (raw, json)
Hash identifier:          1OB6NxfrzT/mjF2BGn4rCxQwdpt6UD/4KiE6WHihwT0=
Subject key identifier:   FD:F5:AA:92:79:71:73:AC:AB:67:D2:D1:5E:FB:CE:A4:CF:8D:B5:9A
Authority key identifier: 89:6B:33:9D:BC:F8:41:1D:58:40:08:CF:02:9B:47:C8:8A:B3:79:D5
Certificate issuer:       /CN=896b339dbcf8411d584008cf029b47c88ab379d5
Certificate serial:       019E326137C2789FB38E8B236AB28615E86A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iWsznbz4QR1YQAjPAptHyIqzedU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.mft
Manifest number:          ED
Signing time:             Sat 16 May 2026 20:01:32 +0000
Manifest this update:     Sat 16 May 2026 20:01:32 +0000
Manifest next update:     Sun 17 May 2026 20:01:32 +0000
Files and hashes:         1: _01xdN9b6VGiDq8TdVfHkv4nsNA.roa (hash: cof+3EhtbeAEqNmK/OvBSq8ShRaGyYdb9JejvgRl8nA=)
                          2: iWsznbz4QR1YQAjPAptHyIqzedU.crl (hash: mOARPbuVaA4G8dwHZRUkmRPR9/l9T2GuGhOoZEZVpFc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iWsznbz4QR1YQAjPAptHyIqzedU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:61:37:c2:78:9f:b3:8e:8b:23:6a:b2:86:15:e8:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896b339dbcf8411d584008cf029b47c88ab379d5
        Validity
            Not Before: May 16 20:01:32 2026 GMT
            Not After : May 17 20:01:32 2026 GMT
        Subject: CN=fdf5aa92797173acab67d2d15efbcea4cf8db59a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:85:4e:4e:e4:7c:58:14:e2:75:15:1e:c7:9f:
                    26:fb:09:a7:7f:6a:3b:25:e4:67:c8:96:d1:d0:66:
                    59:c4:79:f0:49:57:2d:b4:74:99:6f:3d:5f:98:ac:
                    0c:14:e2:71:ee:50:5c:ff:8f:93:87:9d:ff:f0:dd:
                    ff:91:8d:a9:b6:88:50:b5:c2:46:94:99:cb:5c:ae:
                    22:f7:f1:21:a8:01:60:0e:4d:5f:62:04:2d:fd:be:
                    13:0d:c6:7c:8a:7e:6a:36:3b:6e:06:ae:5b:3f:85:
                    c9:14:95:b4:36:64:44:c0:9a:cc:3e:f0:62:c8:e8:
                    95:3e:82:92:34:28:4e:64:be:15:5b:34:3c:cd:a3:
                    17:16:81:93:44:7f:6b:3b:6c:a4:46:49:ec:37:32:
                    ca:8c:fe:4f:c0:e1:67:71:31:8c:f1:fe:b4:bc:1f:
                    42:87:68:43:ba:92:cb:8a:57:8b:1d:a1:12:5f:f8:
                    2b:1c:14:37:18:b6:57:d4:0a:bd:79:5d:04:93:19:
                    2e:b2:42:3a:37:45:c8:ee:72:2c:b6:5d:17:5d:d7:
                    72:1d:d3:51:44:87:48:02:74:57:09:30:d4:2a:93:
                    b3:84:33:db:ff:0d:d0:41:d6:06:aa:b2:42:c3:35:
                    a0:ee:8b:34:21:91:a4:d8:7e:40:0c:e3:c4:8a:78:
                    17:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F5:AA:92:79:71:73:AC:AB:67:D2:D1:5E:FB:CE:A4:CF:8D:B5:9A
            X509v3 Authority Key Identifier:
                keyid:89:6B:33:9D:BC:F8:41:1D:58:40:08:CF:02:9B:47:C8:8A:B3:79:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWsznbz4QR1YQAjPAptHyIqzedU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:e6:01:f8:0a:73:22:60:6e:08:90:0a:41:2a:31:70:0f:25:
         d9:c1:89:4a:4d:4a:47:50:0a:19:e3:ed:3e:67:85:9e:32:25:
         4b:c0:f7:82:30:15:28:b9:f0:b5:d1:14:fd:ca:1c:49:88:02:
         ce:be:7a:b4:8e:a1:bc:da:f7:b8:96:be:14:f8:95:03:91:0a:
         4f:bc:bd:dd:30:75:67:48:79:30:b3:36:6a:5d:f5:3f:73:c8:
         57:d9:78:83:ee:07:9f:6b:d2:1b:a2:42:95:4f:89:f7:0e:9b:
         ec:9e:10:77:15:90:0c:55:36:fd:8c:5e:2c:f7:c8:04:7c:74:
         35:0b:38:25:73:bb:ff:b8:79:08:31:83:f8:fc:e2:c5:4a:26:
         94:21:04:68:96:5b:5e:d6:09:5c:27:37:3c:63:70:12:3f:85:
         89:b2:57:bf:bf:e5:ab:2d:7a:ba:6a:b7:fc:c3:8b:be:70:8e:
         ef:17:14:a4:1d:1a:60:60:fd:4b:17:2c:bb:cb:c1:18:94:b2:
         31:07:76:44:5b:95:b3:e1:b3:c3:87:3c:be:21:56:0a:8e:c7:
         db:0f:7d:4d:27:7b:1d:ca:6f:9e:8d:1a:3b:f7:8f:60:64:3c:
         bf:78:ee:6c:fa:3a:92:2a:c7:0d:4f:4c:b1:da:6f:d2:cc:ac:
         93:52:be:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:30:16 2026 by rpki-client