Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft
File:                     2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft (raw, json)
Hash identifier:          nrQr09arekklsyuEAjzId99ulj2WmxAVACZvfybYRTs=
Subject key identifier:   4F:D3:B4:D5:EA:E5:8D:C3:53:0D:3B:89:10:05:75:3F:E1:60:84:C4
Authority key identifier: D9:E4:83:F8:B0:27:B2:0A:70:41:4A:56:D3:FD:C7:89:48:96:AD:DC
Certificate issuer:       /CN=d9e483f8b027b20a70414a56d3fdc7894896addc
Certificate serial:       019E314E74C1A91521B20ED14214C63C5FDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft
Manifest number:          0FDB
Signing time:             Sat 16 May 2026 15:01:25 +0000
Manifest this update:     Sat 16 May 2026 15:01:25 +0000
Manifest next update:     Sun 17 May 2026 15:01:25 +0000
Files and hashes:         1: 2eSD-LAnsgpwQUpW0_3HiUiWrdw.crl (hash: RqyFqsqoFvCXnRm2ufdWrS58W+o/jRzWSKYnSL20d20=)
                          2: Mt9Wz8CiJyE1vhw9jtbceg6H-ug.roa (hash: fJNiy9ne0mTwA4HHTmShZYQguekNk9G6a4WDwn5xHSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4e:74:c1:a9:15:21:b2:0e:d1:42:14:c6:3c:5f:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9e483f8b027b20a70414a56d3fdc7894896addc
        Validity
            Not Before: May 16 15:01:25 2026 GMT
            Not After : May 17 15:01:25 2026 GMT
        Subject: CN=4fd3b4d5eae58dc3530d3b891005753fe16084c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7a:31:2b:e1:e6:09:d8:89:1b:89:b6:d4:e2:
                    2a:90:ee:c2:12:e6:2d:ad:d1:87:9a:4c:90:37:05:
                    2d:3d:1b:57:7f:27:6b:1f:f8:6b:17:cb:77:fb:f0:
                    d2:25:59:9a:eb:9d:9f:82:36:7b:dd:06:7e:80:c6:
                    35:f6:2c:99:3f:81:9e:44:09:7d:c7:2d:09:fb:16:
                    e5:50:5c:4d:6a:16:d4:5e:89:6d:c0:55:b3:48:54:
                    36:6b:98:a5:bf:08:37:85:51:aa:f1:fa:04:d4:0a:
                    4c:c4:8c:17:65:79:e7:f9:aa:36:73:dd:2d:ec:9b:
                    fd:bf:d1:5b:c0:c2:af:47:c7:6c:2a:21:fb:d8:de:
                    be:47:88:1b:3b:0f:3a:98:62:0c:37:54:d0:be:c2:
                    a7:2a:0d:4a:a9:36:c5:4a:d3:6c:42:bf:27:0a:99:
                    b9:d1:2e:a7:66:4c:1c:26:cd:95:e7:51:2f:ee:2f:
                    4b:40:98:fb:6a:bb:6d:1d:d7:44:44:70:88:b7:7a:
                    e0:95:f2:b8:43:56:fe:12:d4:f8:3c:ed:0e:e2:46:
                    9a:a8:b2:b3:45:e2:ba:22:51:c9:68:08:a2:3d:bf:
                    02:f4:a9:e0:2c:2a:e1:d8:ee:92:45:6f:11:d3:27:
                    28:bc:b6:94:79:19:9a:d2:71:73:0c:55:ef:61:95:
                    71:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D3:B4:D5:EA:E5:8D:C3:53:0D:3B:89:10:05:75:3F:E1:60:84:C4
            X509v3 Authority Key Identifier:
                keyid:D9:E4:83:F8:B0:27:B2:0A:70:41:4A:56:D3:FD:C7:89:48:96:AD:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:b8:5f:24:54:2e:7d:80:4d:c1:54:f7:8f:24:bc:67:61:a3:
         29:01:a8:70:b5:24:56:ac:7b:5b:89:7f:32:46:71:66:12:89:
         a3:ac:ea:3a:4c:03:7f:45:fb:90:27:ad:16:bb:9f:4a:fb:7b:
         91:70:5c:d0:32:5b:1a:b2:6d:39:63:d3:cd:11:90:ea:6d:76:
         82:2b:5f:1e:5d:5b:52:05:df:b5:56:da:4a:d2:e3:87:64:de:
         1a:de:60:dc:1b:a2:4f:e3:36:af:9c:3e:6c:46:6e:bd:9b:a6:
         73:51:76:46:85:ee:51:31:eb:82:39:73:fd:65:d8:1f:7a:e3:
         c8:39:ef:24:2d:89:e2:f8:00:24:66:c8:36:c5:43:cd:a1:e1:
         1e:2b:3d:1c:a8:a9:9b:a4:62:10:67:21:86:37:49:fc:23:e8:
         d5:27:d8:cf:45:23:65:18:98:06:5f:cc:37:c5:1d:60:7d:02:
         c7:09:9b:57:9b:38:92:5d:e0:cb:75:d7:e8:a6:74:2a:9c:a5:
         73:94:75:8f:96:7e:5c:b4:ed:ea:b2:a8:3b:14:39:c0:10:c3:
         ae:cd:8e:5e:4d:bd:09:87:8a:4d:77:c0:b0:78:f8:16:66:a8:
         09:e7:c8:68:23:0f:ed:04:95:87:75:0c:b8:f4:f6:70:e3:b1:
         8d:b1:22:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:51 2026 by rpki-client