Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
File:                     1fBlyL23j_KU98VFSXHb-r-2wYQ.mft (raw, json)
Hash identifier:          YVPOGFIPyOED1BjdhfiDK0cSkC9IMGBTYN81qr1LBQQ=
Subject key identifier:   4F:BD:B3:C1:69:D3:96:D4:7C:87:0B:BE:E1:32:30:AC:B0:40:6E:61
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Certificate issuer:       /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial:       019E30E0BAE1468FBB2C30B7803D9731C13E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
Manifest number:          1417
Signing time:             Sat 16 May 2026 13:01:34 +0000
Manifest this update:     Sat 16 May 2026 13:01:34 +0000
Manifest next update:     Sun 17 May 2026 13:01:34 +0000
Files and hashes:         1: 1fBlyL23j_KU98VFSXHb-r-2wYQ.crl (hash: icAyaKOxJs8Xu0KcDAz2Njb2DNIMVpkAvBDMFP0pGjg=)
                          2: L-k_SL_s92jHONTQ4_qtQMQ0hCo.roa (hash: Ktu7W01HQP3w+NwclsoGu7pxp+ATVr6cehyCqENMhvY=)
                          3: OyDJxa-IKI9M6DEab_QdT2ZiPxM.roa (hash: TllnG1yiPkW1Kik3L852N3VXwGZ/qaH7M72QCj3GUaE=)
                          4: UZ7ePce2V0p3ZbzWXJ1ZgbnwDMQ.roa (hash: 3DbxDok/x0GzcOvaTUOPhPb4K0GtiOZj5rAjknMwnN0=)
                          5: d1jX94cFd3tk-Hm1ODBJTQjIun8.roa (hash: oZLsTmKqfymcNdDKMx79yAPIQPeIgqvN0Dz2E55v24c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:ba:e1:46:8f:bb:2c:30:b7:80:3d:97:31:c1:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
        Validity
            Not Before: May 16 13:01:34 2026 GMT
            Not After : May 17 13:01:34 2026 GMT
        Subject: CN=4fbdb3c169d396d47c870bbee13230acb0406e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:92:b2:43:dd:b4:94:d8:be:8a:73:e8:d1:b2:
                    a0:42:ef:08:e4:44:0a:5e:c9:72:76:ee:1d:ab:74:
                    99:f7:f7:06:46:dc:9c:3f:eb:78:3c:58:c3:45:25:
                    d3:e1:9b:c6:0d:84:49:cd:39:45:ac:a1:64:33:88:
                    5d:4a:38:de:66:00:86:61:15:88:dd:6c:77:60:4a:
                    cc:b5:f0:70:43:ff:44:59:7d:e1:cf:86:57:c0:db:
                    ec:1d:7c:fe:36:08:42:f7:c7:3f:8b:3a:fb:d2:ca:
                    e4:cf:aa:fa:3c:cb:d9:da:3c:b4:51:d0:1f:08:75:
                    ff:e9:e1:bb:53:49:b2:db:6a:0b:61:d4:86:22:58:
                    20:43:c1:7e:cc:49:65:ad:73:e1:a5:34:7b:19:5a:
                    80:6b:12:59:77:fd:9c:2e:8c:69:b9:6a:23:8f:3d:
                    c2:82:5d:5c:80:19:18:0d:58:d3:b0:08:d7:b4:cb:
                    f2:0d:85:ad:aa:93:24:78:f3:a3:e7:61:45:4e:36:
                    15:7e:8a:bb:00:f3:6a:6c:6d:c0:00:39:f0:9c:ad:
                    e1:f8:92:5d:e5:84:60:0a:a0:ad:71:91:48:db:9d:
                    a9:37:28:40:0b:e9:bf:0a:c7:66:ff:6c:c6:40:5d:
                    1b:c9:39:d2:61:e1:cf:58:de:50:9a:c0:bc:d3:ee:
                    a5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:BD:B3:C1:69:D3:96:D4:7C:87:0B:BE:E1:32:30:AC:B0:40:6E:61
            X509v3 Authority Key Identifier:
                keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:cb:0a:40:b0:6e:e3:3e:65:1d:4f:67:d4:09:f2:19:78:74:
         24:c3:c1:09:8d:86:9f:db:a4:5d:81:1f:40:92:2d:50:50:3e:
         72:ae:14:9f:a7:1b:f1:a8:e9:88:17:8b:13:2a:a1:26:f2:5a:
         6c:21:2f:fc:79:bf:38:8b:ca:b6:59:bb:30:cd:ad:94:8d:3c:
         bd:ef:17:a2:96:c1:fe:24:c5:40:bf:96:3e:a8:b0:8e:08:f6:
         bd:c0:34:3f:e3:7c:df:06:23:8e:f6:df:0e:65:af:7b:09:54:
         af:40:38:06:0d:33:7c:b3:11:2d:e5:91:7d:9e:d5:49:b7:c5:
         53:8c:01:2a:ce:27:ef:1e:01:66:ed:eb:7a:f4:c2:a4:51:e1:
         8f:aa:90:ba:1e:4a:e8:39:7c:9c:5b:65:a1:da:8b:59:06:b3:
         65:9d:7a:f9:52:71:3c:65:0c:28:30:aa:24:97:e3:5a:5d:4a:
         0d:4f:87:9a:d2:b7:a2:24:b6:b5:99:82:20:ff:95:ab:77:ed:
         6b:fb:2e:72:99:c2:3a:ed:3d:8e:3e:b5:f4:28:8d:8e:27:8b:
         8f:dc:d1:68:91:23:48:79:00:44:82:a3:c5:d2:66:73:91:42:
         b6:16:85:37:1c:f8:bd:1f:b1:fe:96:f2:7e:78:d0:22:6c:a7:
         a6:db:26:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:12:30 2026 by rpki-client