Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
File:                     43HOIIaAX5EvhRK3nF5mqcn01NI.mft (raw, json)
Hash identifier:          hNLW3BgUBOqiCHgML705HMnFUbyyNlMxgbx7kiL/hYg=
Subject key identifier:   37:1C:7F:BA:82:77:0B:ED:92:14:E3:6E:22:29:02:28:35:9E:3D:B5
Authority key identifier: E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
Certificate issuer:       /CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Certificate serial:       019E30A92665E98181CD5D0F5CB6F47880F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
Manifest number:          0D69
Signing time:             Sat 16 May 2026 12:00:52 +0000
Manifest this update:     Sat 16 May 2026 12:00:52 +0000
Manifest next update:     Sun 17 May 2026 12:00:52 +0000
Files and hashes:         1: 43HOIIaAX5EvhRK3nF5mqcn01NI.crl (hash: gQiv8sLZ8H4++FElxy06r4wneCAowf7lhUdFzJeB5U8=)
                          2: Gfq6OwngWw1fRn8U15Pj1V8Qgo4.roa (hash: THRrDATBehizQuRMdoUMH27yXofDZyuSKLWoSx5aX+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:26:65:e9:81:81:cd:5d:0f:5c:b6:f4:78:80:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
        Validity
            Not Before: May 16 12:00:52 2026 GMT
            Not After : May 17 12:00:52 2026 GMT
        Subject: CN=371c7fba82770bed9214e36e22290228359e3db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5c:eb:4f:6f:ee:f7:c5:31:e0:52:97:44:84:
                    c7:1d:84:ed:60:3f:91:69:a2:80:25:19:93:76:c1:
                    87:cb:cb:89:e7:f3:1a:f7:11:59:27:ce:1f:14:31:
                    21:c8:8c:c3:cc:7f:8f:36:9a:f2:2c:ef:25:34:ec:
                    0f:15:84:1a:64:27:e0:61:8d:95:e1:23:ed:a6:dc:
                    5e:01:96:4d:84:a2:ee:27:cb:b4:8c:f3:42:0c:00:
                    a4:96:88:f3:ab:cb:5c:43:6f:e2:a5:3d:ae:c5:4f:
                    77:87:9f:a7:b7:17:b3:c5:e0:dc:3d:d2:84:7d:ba:
                    4e:cc:e7:57:8a:08:b8:de:48:8b:cb:9d:3c:e3:28:
                    10:5e:b0:30:2d:49:a9:66:61:e8:3e:bf:9a:c1:d8:
                    5f:6d:d9:6d:e6:c6:bb:32:83:cc:e3:44:49:6c:9c:
                    d7:2a:a2:05:5b:33:e9:71:ec:e2:e4:da:ba:e2:55:
                    bc:db:f1:fd:67:18:1a:92:2a:93:76:85:9e:1a:18:
                    ea:11:64:2c:9b:d1:6f:49:4c:ba:31:73:10:7e:f7:
                    d7:74:54:e5:55:e3:75:dd:35:ae:b9:1a:94:f4:3e:
                    0a:aa:3c:c5:50:69:56:42:dc:9e:3a:1f:e8:9f:fe:
                    7e:92:ab:d5:70:58:db:86:96:ba:72:4d:11:42:c5:
                    aa:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:1C:7F:BA:82:77:0B:ED:92:14:E3:6E:22:29:02:28:35:9E:3D:B5
            X509v3 Authority Key Identifier:
                keyid:E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:00:79:31:a7:00:84:09:30:26:39:0f:07:77:12:22:17:24:
         48:5c:60:80:59:bf:c8:b0:cf:d7:5d:ff:b4:34:0c:03:7f:c2:
         9f:9b:45:09:c5:ec:27:e8:fc:84:6d:b3:04:16:e5:b3:24:72:
         52:36:ce:51:6d:89:d4:ee:f4:33:e1:97:21:2d:69:fb:ce:8f:
         3c:f9:a4:aa:8b:0a:0c:8d:99:70:e8:96:84:5c:20:f9:a1:ca:
         b0:4d:f5:f6:52:7a:73:e8:aa:2b:2c:88:14:c5:67:81:89:9d:
         b6:81:66:db:62:92:c9:34:4a:0b:33:02:92:cd:2d:c7:30:62:
         6b:f2:ab:26:70:05:ed:6a:17:44:15:35:ac:5d:6b:f1:e2:c9:
         fd:21:93:31:0d:1f:dc:a5:77:82:1c:1a:33:b1:97:78:83:eb:
         95:3a:4d:d9:36:70:f5:16:8b:03:4a:2d:2d:32:b0:24:0b:7d:
         23:8e:1f:98:77:3e:9d:94:73:4b:a1:ab:13:61:ed:70:df:cc:
         7a:fb:c1:2b:ca:51:cd:22:82:98:ad:5e:a4:d6:ea:8c:26:07:
         20:52:39:cf:9e:ca:83:5f:38:b6:93:22:a2:f0:e9:77:91:4f:
         15:17:15:68:e5:0a:d1:c1:45:f7:5c:f6:46:f6:71:6d:1d:0c:
         4e:1a:c6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:30 2026 by rpki-client