Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft
File:                     cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft (raw, json)
Hash identifier:          6/4XAP/Vs/4foj38sYs68jjDV4AqQbimVR5HnwSVmso=
Subject key identifier:   BD:76:39:80:1B:D2:8D:13:C8:51:5F:8D:A8:20:CF:99:51:2C:0F:7F
Authority key identifier: 71:9E:59:B5:01:7B:FE:63:44:11:94:9E:FF:2D:70:BA:0A:07:C5:40
Certificate issuer:       /CN=719e59b5017bfe634411949eff2d70ba0a07c540
Certificate serial:       019E4F8FCF31CD1C4B2E1304AF9B3E0152D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft
Manifest number:          0ED3
Signing time:             Fri 22 May 2026 12:01:25 +0000
Manifest this update:     Fri 22 May 2026 12:01:25 +0000
Manifest next update:     Sat 23 May 2026 12:01:25 +0000
Files and hashes:         1: 2d80ICWvEy2H06WqwwbbUkHjd9Q.roa (hash: Ddn5JpBKquVV9p/RAvUdBev4yfl/8irtR+M1x9mKoR4=)
                          2: 96h6MiWp1wcqYfMCzF-xeLLhEXw.roa (hash: GlwHj/dVbXF+2ZIP/5axQACN1GmbbfciiA08DFujCCQ=)
                          3: T8wO9YK42VrpaTKZVLl0hlhCgqQ.roa (hash: 2/LsWjUAgBK/sup3nVZAY9upc9OnAS/gP5lDONEvXDQ=)
                          4: cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl (hash: YRN7KOP/iFPHKPyaUQntH9vSsRkWRUGTod+HJBT++5o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 May 2026 08:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:4f:8f:cf:31:cd:1c:4b:2e:13:04:af:9b:3e:01:52:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=719e59b5017bfe634411949eff2d70ba0a07c540
        Validity
            Not Before: May 22 12:01:25 2026 GMT
            Not After : May 23 12:01:25 2026 GMT
        Subject: CN=bd7639801bd28d13c8515f8da820cf99512c0f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:51:d7:9e:35:ae:52:dc:9b:12:9f:d7:0b:f3:
                    25:a7:14:00:cd:a3:31:65:04:59:9a:97:8e:43:04:
                    dd:94:19:7a:c7:34:01:b0:ce:bd:c6:13:4e:40:b6:
                    38:d6:04:48:a3:0e:af:dd:5a:b3:3b:17:71:ba:bd:
                    00:ce:ce:8f:0f:d8:b5:96:0b:a2:4c:12:06:d3:d0:
                    71:e8:11:ab:2d:be:76:ff:41:60:4a:38:c1:d5:63:
                    6a:0a:78:12:1d:5c:b1:23:b2:df:58:2b:79:30:ae:
                    2f:af:ad:60:e7:7a:e7:e3:58:82:01:e7:a9:5a:f0:
                    31:31:b3:4b:e8:e0:85:58:97:74:0d:26:c4:cb:57:
                    a6:9c:e2:9c:05:9f:51:27:2a:0c:73:6b:c9:d3:c2:
                    5e:89:0f:e6:62:4f:fc:95:d5:cb:bc:f5:51:93:6e:
                    14:18:db:28:ae:95:e6:b4:5b:97:2f:c9:50:82:32:
                    55:1b:f0:71:33:30:f6:09:77:b3:cc:12:3d:be:fa:
                    73:00:2d:8b:99:c2:6a:27:a8:9c:fa:b2:b6:90:90:
                    c8:1f:45:4b:bb:b7:01:90:03:82:fe:ca:ab:68:ca:
                    ff:61:04:be:e0:ca:16:84:14:7a:d7:d3:4b:d5:23:
                    fa:54:3b:03:1b:f4:17:c3:95:f2:bc:98:99:69:61:
                    0f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:76:39:80:1B:D2:8D:13:C8:51:5F:8D:A8:20:CF:99:51:2C:0F:7F
            X509v3 Authority Key Identifier:
                keyid:71:9E:59:B5:01:7B:FE:63:44:11:94:9E:FF:2D:70:BA:0A:07:C5:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:c8:7d:26:1a:5f:8c:6a:3f:99:a3:f5:94:95:25:66:02:04:
         da:5b:23:d2:7b:ea:29:40:90:84:dc:da:fe:6e:20:46:22:cc:
         f2:36:1b:84:e7:b3:7b:95:76:06:d6:fb:cd:c9:08:64:e8:99:
         8d:c2:55:5c:0b:55:89:78:08:52:d3:14:06:57:05:bc:28:fa:
         80:e1:91:10:8d:75:7e:f7:9d:8b:ca:27:f0:3d:69:e9:9d:59:
         22:5e:e8:a9:1c:19:6a:b8:ff:55:5a:77:2f:75:63:11:c8:65:
         c4:d6:c8:70:30:b5:0f:de:e0:e1:d4:70:49:59:be:ca:61:5d:
         f5:7c:81:81:5a:5c:96:d5:ea:15:13:5e:14:6a:20:43:f6:45:
         b3:51:48:f7:c2:b7:db:e3:b6:b3:c7:91:c3:9b:90:ae:65:ba:
         28:75:c7:e6:b8:9c:31:c0:4f:20:48:75:c7:01:83:93:a6:20:
         3b:2e:91:31:9f:91:4d:bb:8a:de:eb:76:86:7d:32:82:9a:ba:
         e2:b5:ba:b4:73:31:8c:c0:d3:95:06:3d:66:c7:c5:9f:f4:8d:
         0b:da:24:b8:72:1b:ac:d9:7f:9f:e8:db:f2:fc:a7:cd:82:27:
         61:8e:6e:0b:ab:77:55:df:cd:f8:8c:89:b8:f3:9a:6f:e2:ff:
         95:1c:0b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:08:11 2026 by rpki-client