Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
File:                     A-ynkyRXUrZ6iB9441q4_0ndPsE.mft (raw, json)
Hash identifier:          WkDc5MTs534Fw/AoynvOG7gFbJq8H1J7qQlRUUhZXLo=
Subject key identifier:   62:02:55:FC:E9:88:60:BF:E1:32:22:63:7F:55:45:BF:DD:4F:B9:37
Authority key identifier: 03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1
Certificate issuer:       /CN=03eca793245752b67a881f78e35ab8ff49dd3ec1
Certificate serial:       019E30727B64B8ACA69714597F900FFFC8E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
Manifest number:          1913
Signing time:             Sat 16 May 2026 11:01:09 +0000
Manifest this update:     Sat 16 May 2026 11:01:09 +0000
Manifest next update:     Sun 17 May 2026 11:01:09 +0000
Files and hashes:         1: A-ynkyRXUrZ6iB9441q4_0ndPsE.crl (hash: abEnVdIZHI9tHS9FRCBCpOvxSBiTAhNH1KPDKIOv0wU=)
                          2: lsqSMmJEavXh7pViu8wsmFP-0ew.roa (hash: WZM+G3iXoRdRNC/z9rbX80joIRjQ5aWaqz7KFYrf3LE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:7b:64:b8:ac:a6:97:14:59:7f:90:0f:ff:c8:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03eca793245752b67a881f78e35ab8ff49dd3ec1
        Validity
            Not Before: May 16 11:01:09 2026 GMT
            Not After : May 17 11:01:09 2026 GMT
        Subject: CN=620255fce98860bfe13222637f5545bfdd4fb937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:36:9e:ff:88:f7:64:d1:eb:f1:2d:e7:77:3f:
                    32:97:1c:c1:ee:d7:6d:cb:37:53:0b:3d:b5:ab:60:
                    16:d1:1e:b8:2b:73:e1:bb:a6:a2:5c:b3:18:5c:11:
                    0e:56:c2:df:6e:59:69:73:ae:ac:45:74:98:80:18:
                    22:12:ff:08:2c:15:de:d8:60:d9:0d:d3:39:6f:b5:
                    11:e3:2a:22:95:bb:45:02:08:17:76:ae:1f:fc:f5:
                    ea:4d:7e:3b:23:a0:99:a8:ce:8d:0a:b6:69:eb:23:
                    97:72:96:3d:f1:1e:98:17:05:f1:c9:53:0d:33:63:
                    02:9e:58:85:32:cd:4d:3e:77:d4:d9:a0:53:c8:d7:
                    46:32:1b:cf:21:27:cc:48:51:8f:59:f0:e6:ac:77:
                    e8:3b:e1:d8:46:c6:d3:20:05:ef:d7:4c:c8:64:32:
                    13:0d:f4:14:59:02:b0:54:d9:7d:94:da:f7:95:2c:
                    eb:15:85:50:74:30:d9:8a:ef:c4:bb:8b:3d:e7:c1:
                    d7:14:d0:af:25:df:ae:9f:58:6c:c6:8f:0e:9d:2e:
                    91:d3:f6:1c:2c:5c:f4:1c:25:99:73:e0:3b:db:c5:
                    68:eb:23:fe:32:0f:8d:89:b0:a6:54:10:52:e8:55:
                    00:6c:54:9c:68:b3:2e:0d:a2:2a:0a:67:9e:f7:ae:
                    45:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:02:55:FC:E9:88:60:BF:E1:32:22:63:7F:55:45:BF:DD:4F:B9:37
            X509v3 Authority Key Identifier:
                keyid:03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:22:c2:e5:48:a6:01:2b:df:d1:65:63:93:1b:96:ae:77:e5:
         ca:3a:b0:7e:cb:d2:32:fb:d6:e8:e8:ee:13:a5:4d:3f:7e:64:
         fd:4a:6f:b4:3e:5a:04:74:75:e4:32:97:01:d7:98:10:4f:2f:
         4e:89:4b:30:9d:61:3d:55:04:8e:cb:a9:48:04:c0:97:37:81:
         8e:dd:aa:64:13:ba:eb:09:d1:d9:15:3a:16:15:df:69:74:40:
         6c:a3:87:89:5a:1b:cf:6d:e2:b4:39:16:d4:a1:b6:9b:5a:7d:
         b2:92:28:36:48:53:42:41:7c:99:20:c5:3c:4a:e4:f9:e8:42:
         cf:f6:7d:7b:da:5f:13:a6:41:e7:55:8e:6d:6b:cf:df:7d:39:
         e9:ef:09:d4:50:75:cd:58:9e:5e:e7:be:2d:8d:ed:d5:ca:e8:
         c7:17:8e:13:b8:3c:02:59:97:57:b6:e5:f4:c0:46:1b:1a:3e:
         7d:8d:85:ab:7b:a2:1b:01:d2:18:79:84:e6:4a:a6:fa:f4:c9:
         2e:17:1f:c0:7a:e4:7c:fc:c1:94:ea:f6:b5:1c:e7:bb:f0:10:
         50:fd:2d:35:a0:0b:40:95:48:f3:d2:0f:d9:42:28:61:27:c9:
         aa:ce:3c:9b:4e:f9:0d:20:9d:dd:e5:42:a8:ec:78:d4:83:be:
         c3:2b:2e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:55:47 2026 by rpki-client