Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
File:                     aRWYIN1xgAT7FchbJweWy06EpOo.mft (raw, json)
Hash identifier:          GrtZcLd4bHwE/bKX/gZaTK9McRabl2m0ZRLZfC2oUXw=
Subject key identifier:   2C:1F:AC:82:54:9E:44:B9:0E:46:16:ED:E2:4A:E7:28:E0:EF:E5:45
Authority key identifier: 69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA
Certificate issuer:       /CN=69159820dd718004fb15c85b270796cb4e84a4ea
Certificate serial:       019E31F2E90731F84F63A92D7530714BCA5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
Manifest number:          0439
Signing time:             Sat 16 May 2026 18:01:03 +0000
Manifest this update:     Sat 16 May 2026 18:01:03 +0000
Manifest next update:     Sun 17 May 2026 18:01:03 +0000
Files and hashes:         1: aRWYIN1xgAT7FchbJweWy06EpOo.crl (hash: xdaRHo0QvXWPUbUR4xOtmu5xj9GIfGkVQcBeNCy96Gc=)
                          2: yFZe_4gAvKXHPPs1FyfrYpXP8Ow.roa (hash: 86Quhr4EELE+xPjStkhiLN4tCtReKxYPPaBQcYq5lDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:f2:e9:07:31:f8:4f:63:a9:2d:75:30:71:4b:ca:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69159820dd718004fb15c85b270796cb4e84a4ea
        Validity
            Not Before: May 16 18:01:03 2026 GMT
            Not After : May 17 18:01:03 2026 GMT
        Subject: CN=2c1fac82549e44b90e4616ede24ae728e0efe545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:aa:ad:2c:17:f9:db:56:a3:d7:72:eb:ba:1b:
                    8e:77:f2:0d:a1:59:2e:e1:d1:b8:57:c1:de:d6:9c:
                    bf:0b:2a:91:78:8d:e4:b6:c3:65:1c:6d:30:0c:c6:
                    d3:27:db:94:6e:88:a4:be:ed:8b:40:89:8e:73:8c:
                    2a:d6:89:8b:dc:a8:e6:fd:b6:73:7d:1e:29:cf:ec:
                    76:fe:65:a5:03:1d:89:a0:ef:34:a0:49:46:9e:62:
                    68:a3:9e:f5:57:77:ee:cc:b4:ea:05:53:55:78:db:
                    75:1d:ae:41:76:e9:83:08:15:e6:e7:cb:b0:51:62:
                    96:4e:b1:73:2f:eb:29:86:0b:63:2b:d9:92:61:a0:
                    9e:fb:25:52:f1:be:c5:0a:05:28:2d:ce:e7:71:6c:
                    88:7e:bc:ca:fd:92:0e:01:dc:94:6f:7b:e7:22:a0:
                    14:f7:6a:e3:20:50:fa:16:a4:c1:ee:e8:5a:dc:20:
                    1b:da:af:a1:81:0a:bd:cc:2a:84:5c:a8:52:a6:d3:
                    c5:89:6b:91:29:13:4c:5f:26:de:9e:fc:3e:5f:c7:
                    8b:7d:86:cf:03:aa:79:cd:e8:62:79:21:d0:81:d3:
                    67:fa:b4:a8:dd:c5:70:ad:9f:c1:41:c5:93:08:98:
                    6e:65:d1:c5:80:19:59:42:8b:7e:50:b2:70:40:cd:
                    16:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:1F:AC:82:54:9E:44:B9:0E:46:16:ED:E2:4A:E7:28:E0:EF:E5:45
            X509v3 Authority Key Identifier:
                keyid:69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:64:e8:2a:80:f1:9a:c4:7c:98:73:5b:2f:25:05:fd:34:39:
         4a:be:e9:1f:cc:87:69:15:ef:f0:a4:1d:2a:a4:66:ce:ea:ef:
         d9:2e:8d:78:29:e7:48:62:3f:3d:49:4d:a5:f4:1e:77:ce:df:
         ab:24:07:05:5a:da:fd:a6:74:ca:9b:34:54:9d:25:eb:ac:df:
         f0:84:10:02:a0:f4:39:bd:9f:dc:91:4c:50:9d:3e:f9:7b:ee:
         08:35:52:7f:87:22:82:26:9d:c7:b9:c3:7f:89:3d:2e:54:be:
         42:dc:20:e7:10:d3:5e:a6:ef:f1:b9:f3:3c:08:22:29:5a:0e:
         fe:2d:49:e7:1d:bf:0b:b9:b1:ec:2d:02:9c:f5:50:c3:35:fa:
         c3:e3:5a:83:49:b2:d4:81:cf:7d:de:7e:88:a9:6b:3a:9b:24:
         ce:c0:2a:2f:71:86:18:35:e1:35:6a:94:86:d6:e5:97:93:c2:
         f9:09:e5:94:a3:6a:2c:b6:a5:fb:6b:ff:f0:2e:8e:5d:69:c8:
         73:f5:3d:e9:86:bc:57:fe:f4:38:0f:ed:a6:e5:66:4c:2c:eb:
         bd:83:5b:92:4d:f6:71:53:80:aa:51:5b:66:8b:75:eb:e8:e5:
         bd:f4:5a:22:60:d4:1d:bf:2f:e4:55:c1:a4:9e:4c:97:05:9e:
         dd:62:9a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:41:11 2026 by rpki-client