Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
File:                     B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft (raw, json)
Hash identifier:          CznKy2D1vwrnD2463LUGP1oHUSAB4/Sc8/VipbYKRLI=
Subject key identifier:   B2:E0:53:D0:6D:D4:A1:1A:00:18:C4:0B:0D:CC:93:B3:D5:12:8A:A2
Authority key identifier: 07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F
Certificate issuer:       /CN=078b3739f78d96844a4ef68626dc87ac2eefa50f
Certificate serial:       019E30E043755A21C8B5356DAD1A2D330DDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
Manifest number:          09E7
Signing time:             Sat 16 May 2026 13:01:03 +0000
Manifest this update:     Sat 16 May 2026 13:01:03 +0000
Manifest next update:     Sun 17 May 2026 13:01:03 +0000
Files and hashes:         1: 5sr_tmVIe_M0JW4wdYFpjoaZGuw.roa (hash: 38smcDw7DmiaLV5Ct4qOokRzF5bM7bVQS48BSQwDUec=)
                          2: B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl (hash: 15cvTmsVSmvcjY202osg/pxSqOHFvTXMcGMFJ6s7wtM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:43:75:5a:21:c8:b5:35:6d:ad:1a:2d:33:0d:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=078b3739f78d96844a4ef68626dc87ac2eefa50f
        Validity
            Not Before: May 16 13:01:03 2026 GMT
            Not After : May 17 13:01:03 2026 GMT
        Subject: CN=b2e053d06dd4a11a0018c40b0dcc93b3d5128aa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0f:ab:4d:ff:cc:17:30:35:bd:6b:10:97:80:
                    c3:e9:75:12:7c:41:67:aa:4f:5f:0f:19:7d:f2:01:
                    6f:26:51:67:aa:8d:c8:8c:e7:28:e5:1f:bf:94:c9:
                    fe:fa:ec:aa:57:c0:14:e3:4d:68:93:0b:23:00:50:
                    aa:e4:cd:05:8a:2a:b5:d8:8f:24:b6:56:3e:82:ca:
                    92:2e:8f:20:9f:54:a7:46:0a:e3:82:46:3f:e0:05:
                    d1:00:83:4c:b7:66:76:03:79:7f:8d:89:49:ff:34:
                    37:c8:be:f2:41:1e:ae:41:6a:dc:29:ba:8a:28:be:
                    13:cf:1f:a8:42:48:66:9c:96:98:f4:30:c8:75:61:
                    46:27:65:9f:bf:3a:4f:a8:10:73:64:39:7a:75:9b:
                    2f:02:d0:30:e4:e6:63:99:49:25:c6:4b:b7:fe:22:
                    a9:36:25:bf:1c:bb:45:28:41:83:0f:4a:7a:eb:ed:
                    3a:24:df:27:03:e7:40:53:23:4a:18:f2:59:d3:d4:
                    c5:92:12:9a:44:f5:2c:a1:8e:a6:74:f5:d5:91:0c:
                    c1:dd:ec:b1:e7:e0:80:4e:44:4f:89:4d:fb:db:fa:
                    c1:c1:26:d4:07:bb:5b:74:68:60:d8:88:c5:39:81:
                    98:dc:d9:ac:e3:7c:3e:e4:5b:99:8c:39:22:e9:bc:
                    de:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E0:53:D0:6D:D4:A1:1A:00:18:C4:0B:0D:CC:93:B3:D5:12:8A:A2
            X509v3 Authority Key Identifier:
                keyid:07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:1e:e2:b7:08:64:fc:b1:62:fa:30:80:c3:02:ba:e5:4a:91:
         32:74:b0:0d:22:10:d5:85:21:21:7a:76:8c:cd:29:f6:78:75:
         77:4c:dc:26:60:9f:d0:e2:00:17:1f:a0:7f:5e:6c:14:91:c0:
         42:06:03:f7:21:7d:97:e4:17:cf:04:9a:84:91:30:d0:b4:0c:
         18:cd:68:4b:ac:3b:5b:42:f5:22:90:70:23:0f:4e:93:ae:79:
         eb:71:23:d8:dc:40:a3:85:94:1a:95:a4:a2:5c:40:0e:d7:f7:
         1e:96:ad:37:74:99:7b:e5:fa:24:c1:81:68:2a:0f:b2:62:81:
         e5:80:63:13:14:85:83:6e:17:f8:ab:91:ae:03:11:06:7e:89:
         69:21:bb:fd:c1:2b:2e:28:18:b4:d5:13:6e:f1:2d:f6:44:0d:
         1c:0a:04:fa:df:0a:1a:25:f6:da:40:e9:85:68:bd:8b:eb:f2:
         e1:9a:cd:f5:c3:28:3f:2a:0d:a0:1c:bc:da:a2:a0:33:42:1a:
         0f:c8:6d:48:a9:67:e7:1b:77:ad:56:3e:66:3a:51:77:9e:c4:
         b7:b0:1a:e3:7b:bf:8c:a7:08:25:23:7d:76:3a:30:41:8a:37:
         14:52:69:13:d4:6e:fc:6e:a3:15:95:46:21:ed:d9:e2:6f:f2:
         5b:13:31:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:23:16 2026 by rpki-client