Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
File:                     59aKnrhqgmTp3cMSKEm4DMNC9dw.mft (raw, json)
Hash identifier:          YZN+N8FUws5bdBeRtxJ8omQX/do6kAMxy0z8kzL1Nb8=
Subject key identifier:   08:73:9C:C4:58:90:11:46:3E:1E:8B:86:D7:18:01:3B:D1:46:26:49
Authority key identifier: E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC
Certificate issuer:       /CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc
Certificate serial:       019E311763D5192D35D5E7C2BD382497A0F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
Manifest number:          162A
Signing time:             Sat 16 May 2026 14:01:16 +0000
Manifest this update:     Sat 16 May 2026 14:01:16 +0000
Manifest next update:     Sun 17 May 2026 14:01:16 +0000
Files and hashes:         1: 59aKnrhqgmTp3cMSKEm4DMNC9dw.crl (hash: ucBi3Sg9JfWUEwEbbX6RnFlb5PpPQgTi+PYyIoEmCRg=)
                          2: 5D_6V1jfsiELpRkCmEhi7rdCKRg.roa (hash: /d0M4c6YWxQ0V8Mp5iLPG6sVPAc4eaY42hLJi+0oXvQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:63:d5:19:2d:35:d5:e7:c2:bd:38:24:97:a0:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc
        Validity
            Not Before: May 16 14:01:16 2026 GMT
            Not After : May 17 14:01:16 2026 GMT
        Subject: CN=08739cc4589011463e1e8b86d718013bd1462649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:51:38:dc:19:c8:60:72:20:61:6f:15:60:62:
                    bf:28:b4:b3:34:9d:97:80:e6:f8:33:b9:1f:58:f0:
                    99:ba:c9:22:87:aa:86:11:99:c2:04:c7:fb:dd:52:
                    7b:a7:03:9a:85:08:f9:cd:53:63:32:1d:b8:5f:e7:
                    61:d8:56:3e:eb:d0:c8:4d:87:c9:12:34:bb:46:62:
                    8c:f4:e9:cc:a1:94:de:4a:13:01:c3:db:b1:11:e4:
                    33:50:3d:86:fb:b5:2e:63:4d:13:ec:23:c7:42:d9:
                    8f:e8:05:a3:cc:e7:1f:77:38:1d:a7:9c:b2:c8:2d:
                    31:f3:87:8e:df:e5:27:cf:8d:a9:9f:32:bd:96:77:
                    81:ab:6f:e0:28:b4:88:f1:76:2d:af:1a:a8:19:d3:
                    d5:69:c1:f4:e5:f2:d2:cf:79:e1:f0:7b:95:e3:e4:
                    21:4f:3a:47:1f:fa:79:0d:51:3d:2c:d1:6a:fe:33:
                    2d:c4:c2:4d:5b:1e:cf:c2:d4:a2:d0:2f:36:11:90:
                    47:9b:2c:2e:b1:93:ac:5d:fa:d1:4a:90:82:3a:49:
                    2b:7f:e5:4f:85:2f:60:cb:9a:74:46:81:5f:c1:f5:
                    55:30:00:7d:1c:ee:b5:7f:45:96:cf:ff:cf:32:0e:
                    28:d1:03:a3:1c:fa:5e:36:1e:8c:82:79:17:7e:95:
                    91:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:73:9C:C4:58:90:11:46:3E:1E:8B:86:D7:18:01:3B:D1:46:26:49
            X509v3 Authority Key Identifier:
                keyid:E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:e4:e3:58:d7:60:05:e7:ee:3c:99:ce:cc:94:3e:ab:bd:36:
         51:a4:77:b3:13:15:f5:d3:87:60:f2:0d:c0:29:b4:3d:2a:79:
         4a:e8:fd:05:21:3b:aa:07:b7:f2:b5:5a:dd:2e:7b:0e:2a:fb:
         cd:11:23:3a:a3:66:0e:14:20:83:4c:d9:f4:fd:21:c3:14:f6:
         ff:d0:b3:a7:b9:24:4f:04:42:0f:95:14:18:42:ba:7a:26:67:
         57:14:7c:4b:bf:de:ce:c3:72:d5:be:95:28:df:f7:dc:08:3e:
         5b:cc:a3:62:5d:78:0f:e2:43:ad:2d:09:50:8d:da:93:60:43:
         24:3e:41:00:95:d4:f0:bc:02:1c:20:43:83:54:3d:a6:57:cc:
         f4:e4:d9:2e:59:3b:07:60:a4:bb:64:5c:67:59:55:af:41:22:
         c8:8c:72:af:90:d7:7d:be:bf:bc:c4:c5:3b:2d:51:a7:d0:97:
         05:b6:93:7f:b1:f0:7e:da:40:6f:cf:08:44:73:d1:a6:8e:1b:
         1f:cd:c2:8e:c2:7c:10:02:62:d2:16:4b:57:c7:a4:61:bd:e8:
         41:7e:7d:83:97:37:8c:cc:58:02:06:8a:af:5b:28:d3:a3:ae:
         64:db:6d:18:93:b2:22:6b:fa:bc:e7:f6:34:44:8e:1e:60:e0:
         fe:df:d3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:26:59 2026 by rpki-client