Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft
File:                     1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft (raw, json)
Hash identifier:          U4VDvWxyxEeuCxq3dntOUQv/oSN2yZUJ6KDBg+vALeM=
Subject key identifier:   4B:41:8E:2B:86:46:AF:6E:35:74:0F:DA:82:D7:20:C1:0A:9E:5B:E5
Authority key identifier: D5:F5:E7:DD:DC:47:C7:10:44:86:5B:C5:CD:C2:58:7E:FD:AB:0B:9C
Certificate issuer:       /CN=d5f5e7dddc47c71044865bc5cdc2587efdab0b9c
Certificate serial:       019E31179A5F57322D9813107BB0FA44E909
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1fXn3dxHxxBEhlvFzcJYfv2rC5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft
Manifest number:          0AA4
Signing time:             Sat 16 May 2026 14:01:30 +0000
Manifest this update:     Sat 16 May 2026 14:01:30 +0000
Manifest next update:     Sun 17 May 2026 14:01:30 +0000
Files and hashes:         1: 1fXn3dxHxxBEhlvFzcJYfv2rC5w.crl (hash: Ik6FzM9bhZRwqF/XazCftypD9tlAhjoZ+L0GGin5etU=)
                          2: zlePSr6zYlrhgCFQW-qZhuoxEwk.roa (hash: ebo4B4GxIfR5oraws5Tn/cPpRYE1VsqUuELBHVvUXok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1fXn3dxHxxBEhlvFzcJYfv2rC5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:9a:5f:57:32:2d:98:13:10:7b:b0:fa:44:e9:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5e7dddc47c71044865bc5cdc2587efdab0b9c
        Validity
            Not Before: May 16 14:01:30 2026 GMT
            Not After : May 17 14:01:30 2026 GMT
        Subject: CN=4b418e2b8646af6e35740fda82d720c10a9e5be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:29:26:51:92:4f:ff:39:00:81:2f:1b:ad:8b:
                    03:cd:0d:51:84:0f:48:42:2f:d3:c0:15:1b:45:72:
                    e1:c0:61:04:8d:1c:6c:4b:48:5d:d9:c8:7d:04:d0:
                    9b:40:70:cc:83:00:bb:c1:2c:75:aa:63:0a:5d:c7:
                    35:a1:0b:56:09:a2:68:20:15:6e:90:15:0e:d1:b2:
                    ea:8d:5e:65:54:81:78:e4:db:13:2e:d5:e0:95:cd:
                    6e:41:2e:68:16:d5:9d:d7:0c:b0:48:42:d8:70:cb:
                    9a:74:33:2b:9f:7d:ee:8b:30:1c:c5:db:36:1e:0a:
                    66:86:5f:01:00:81:2c:c2:f5:17:d1:37:09:af:09:
                    68:0e:fc:9c:a3:a1:17:57:23:c3:53:7f:1c:bc:fe:
                    21:e8:e0:24:23:03:47:46:88:50:0d:ae:ce:86:51:
                    5a:72:24:0a:90:7d:f9:3a:e6:ba:7a:b3:a7:67:80:
                    37:39:76:29:56:2a:c1:61:44:5e:e6:cf:b8:54:2b:
                    fd:8c:0d:9b:49:30:69:1a:6f:6b:04:09:60:70:c5:
                    58:13:47:78:d7:d7:33:98:29:f5:fb:b7:ec:c8:3a:
                    44:9e:00:77:b1:3c:d3:08:6f:5c:cc:1b:da:5c:d0:
                    8d:90:c6:7b:0d:5c:fd:d3:ea:59:38:d6:89:b5:dc:
                    3a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:41:8E:2B:86:46:AF:6E:35:74:0F:DA:82:D7:20:C1:0A:9E:5B:E5
            X509v3 Authority Key Identifier:
                keyid:D5:F5:E7:DD:DC:47:C7:10:44:86:5B:C5:CD:C2:58:7E:FD:AB:0B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fXn3dxHxxBEhlvFzcJYfv2rC5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:24:76:7e:46:f1:9b:32:9c:08:87:ea:bf:8a:36:b9:23:95:
         66:77:64:0b:0d:4d:eb:99:63:9f:13:fe:3c:e0:c7:4d:86:7e:
         4b:ac:1a:af:01:65:04:ed:c8:7b:97:9a:b1:a5:d7:97:a1:4f:
         57:e4:16:6e:92:f9:94:69:0e:68:0c:76:5c:1f:0b:5f:d6:e7:
         e6:65:39:d9:47:3f:f4:12:16:4f:88:7d:ba:3d:97:f8:4f:39:
         0c:2b:6d:64:38:71:b1:06:9d:85:c2:84:64:4a:7b:c2:b9:d5:
         8d:13:b5:b1:04:28:a9:1a:e3:8e:bf:63:13:6d:02:f0:51:5b:
         f3:00:02:fe:c7:86:7a:ce:e3:87:0c:dd:4e:0f:f6:31:2b:fd:
         99:84:95:9b:29:cb:47:17:be:24:2c:16:65:cc:ab:d0:da:8b:
         db:fa:fa:34:06:59:08:e8:34:9c:ba:16:4e:b0:aa:d5:91:35:
         42:9c:d1:ef:63:9b:1e:a6:1e:94:09:fc:98:aa:cb:cd:74:c4:
         17:ae:e7:36:90:e4:44:dd:bd:2b:0d:d6:10:68:e6:3a:0d:76:
         d7:f8:55:f5:60:eb:46:e8:ed:72:49:08:bb:cc:ba:2b:34:01:
         bf:02:ee:61:1b:45:74:6d:a2:f5:6c:2a:20:ce:c2:b1:ee:ed:
         ce:5c:67:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:40:38 2026 by rpki-client