Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft
File:                     _ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft (raw, json)
Hash identifier:          UrWgHhbMdiYFNaZVAf9Ur1bZx1n1zb86l5Qy5Txp3m8=
Subject key identifier:   4B:D8:4D:4F:DF:60:F8:81:5C:FB:E3:36:EA:A6:D6:3A:80:3C:BA:51
Authority key identifier: FC:4C:51:2F:E2:88:AC:6A:63:10:7D:00:41:44:34:32:9C:43:A2:84
Certificate issuer:       /CN=fc4c512fe288ac6a63107d00414434329c43a284
Certificate serial:       019E31F314B2A82AF310F80A28F3D396BC87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft
Manifest number:          1502
Signing time:             Sat 16 May 2026 18:01:14 +0000
Manifest this update:     Sat 16 May 2026 18:01:14 +0000
Manifest next update:     Sun 17 May 2026 18:01:14 +0000
Files and hashes:         1: RtGphWb-n-NKPg4VsQrMZNJw1YQ.roa (hash: 34EHgphrwj4YxmqwBGDa+7QYhkgQ4fOpOeCf2tXVnG4=)
                          2: _ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl (hash: chKEbwvBBN5/9YYyC6DJ4BSJNCrwK8mT4n/UIkzWjvA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:f3:14:b2:a8:2a:f3:10:f8:0a:28:f3:d3:96:bc:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc4c512fe288ac6a63107d00414434329c43a284
        Validity
            Not Before: May 16 18:01:14 2026 GMT
            Not After : May 17 18:01:14 2026 GMT
        Subject: CN=4bd84d4fdf60f8815cfbe336eaa6d63a803cba51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:4c:0f:c5:9b:83:1f:c7:76:4d:4f:d0:cb:3a:
                    06:4b:05:ed:58:b9:23:14:7a:ab:91:a1:f6:2e:de:
                    d4:61:98:b5:0a:ab:70:30:6f:d3:41:96:88:c2:e5:
                    6d:92:38:2f:12:78:c9:20:7b:e7:ce:e8:48:ca:8c:
                    6b:90:29:4f:70:74:7b:21:b6:7c:8c:a0:76:5f:ea:
                    ae:ab:68:eb:b6:4c:2c:dc:41:84:42:14:bb:77:b9:
                    ea:89:77:9a:87:ab:05:df:e4:dd:8e:16:ee:e1:2f:
                    b2:32:6e:41:2c:0d:97:55:d6:e4:ab:a6:6a:12:3a:
                    53:cb:cb:de:58:d8:c2:5c:1d:88:7d:92:93:7a:35:
                    e8:c3:53:87:96:34:2e:56:7d:ad:75:7b:22:35:9c:
                    36:31:94:83:25:14:d3:0b:a6:82:9f:1c:ff:53:5e:
                    96:31:1a:20:a3:98:5f:fd:50:7b:92:0e:45:56:86:
                    f7:82:70:27:6b:de:af:8c:1c:07:5e:b0:ac:de:54:
                    b5:9a:18:bf:b6:43:25:44:fa:0a:50:1c:6c:1b:af:
                    d8:bf:61:bb:08:f3:91:4b:ea:a9:c8:3c:c1:b9:95:
                    ed:37:0c:3d:0a:00:ea:57:4a:af:81:19:b4:5d:99:
                    d8:b5:4a:cc:fa:ac:08:53:44:e1:48:b6:8e:97:ef:
                    8d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D8:4D:4F:DF:60:F8:81:5C:FB:E3:36:EA:A6:D6:3A:80:3C:BA:51
            X509v3 Authority Key Identifier:
                keyid:FC:4C:51:2F:E2:88:AC:6A:63:10:7D:00:41:44:34:32:9C:43:A2:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/_ExRL-KIrGpjEH0AQUQ0MpxDooQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:b1:e9:72:f4:f6:7c:fc:49:ce:d3:2e:0d:46:dc:7e:8a:b4:
         7b:61:7c:d0:45:10:a4:c1:5a:34:79:5e:9c:15:aa:38:ba:74:
         53:ec:60:ef:10:6d:e7:95:42:03:38:5b:bd:2e:25:db:08:d4:
         d0:13:d0:c8:0d:d0:bb:e5:8a:0f:f1:90:5f:52:d8:99:6c:f1:
         02:db:ab:9a:72:94:29:e9:b9:5c:56:25:98:80:5d:d4:2f:84:
         1b:ee:4d:74:3b:f3:05:ed:14:77:b0:76:d3:82:a0:28:fa:a1:
         cf:21:bd:89:69:51:a8:8e:1a:92:06:f7:50:48:c9:45:42:fd:
         2e:8b:1e:75:e7:12:12:5e:28:6f:be:36:29:30:83:fa:1d:9f:
         8a:35:54:87:42:6f:5f:35:a1:0e:a6:da:97:e8:dc:88:75:fc:
         79:e2:1b:09:23:3b:e7:59:ac:91:4c:8a:3c:89:3e:32:33:04:
         c1:92:0d:60:0f:7b:82:bb:d1:10:5d:eb:ff:fb:50:7c:94:12:
         18:b4:56:1d:4c:7d:e5:81:2f:1e:53:70:a3:11:a3:18:5b:cd:
         b9:11:b5:d6:a0:d0:4d:e4:9c:6a:59:9e:57:6a:97:b3:74:60:
         ec:82:99:95:1e:ef:84:17:8a:cf:42:e2:85:48:50:4d:d5:2b:
         af:7b:c1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:19:57 2026 by rpki-client