Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft
File:                     44qr6o7im_fJFbw-8Luswn0Ozt4.mft (raw, json)
Hash identifier:          OMgdqRy7y0mlNYwGsWMlNcZaqAkNU6vzX6+04itQtDg=
Subject key identifier:   A6:60:80:4F:4B:29:18:75:B0:9B:2B:CE:D5:4E:D6:35:FD:8B:07:F5
Authority key identifier: E3:8A:AB:EA:8E:E2:9B:F7:C9:15:BC:3E:F0:BB:AC:C2:7D:0E:CE:DE
Certificate issuer:       /CN=e38aabea8ee29bf7c915bc3ef0bbacc27d0ecede
Certificate serial:       019E30A93A72C67F9E9CBDA44A7F02008C5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft
Manifest number:          15BC
Signing time:             Sat 16 May 2026 12:00:57 +0000
Manifest this update:     Sat 16 May 2026 12:00:57 +0000
Manifest next update:     Sun 17 May 2026 12:00:57 +0000
Files and hashes:         1: 44qr6o7im_fJFbw-8Luswn0Ozt4.crl (hash: qmh0RKud1o3Z2/De7kYCaWnvHPbxc7Zw2y3EBaop9QM=)
                          2: PjyNMGY84TJ2cr5QJLc6HnzswgM.roa (hash: ZAnEXpXJffc4T6GUbV/LDI34CqWwT/3G+mLU5uuO0xA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:3a:72:c6:7f:9e:9c:bd:a4:4a:7f:02:00:8c:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e38aabea8ee29bf7c915bc3ef0bbacc27d0ecede
        Validity
            Not Before: May 16 12:00:57 2026 GMT
            Not After : May 17 12:00:57 2026 GMT
        Subject: CN=a660804f4b291875b09b2bced54ed635fd8b07f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:25:0d:60:f3:ee:bc:39:49:2e:6e:c5:8f:6c:
                    6a:85:fb:63:85:1e:65:1e:51:a1:7c:9a:d7:38:2d:
                    26:db:bf:09:5c:fa:a5:a1:47:f0:c2:52:75:6d:5d:
                    84:d3:ae:7f:3b:8e:d5:63:df:7e:4d:0a:0f:d7:7f:
                    0a:e3:3f:dc:7f:ad:76:8d:90:b4:b8:41:85:8f:86:
                    68:fe:ee:07:78:cb:da:e5:46:f4:73:0f:5d:95:41:
                    4a:73:1f:ca:f0:f7:31:01:df:b1:2a:3c:0f:ac:f1:
                    6d:82:d2:20:d8:7a:65:b3:18:6e:b7:3e:21:47:ff:
                    31:9d:55:d9:3d:41:e8:ec:ae:52:4d:15:f4:0f:57:
                    09:4f:1c:02:31:79:77:b2:20:cf:a4:53:c4:b8:c1:
                    3c:11:ee:08:56:c2:39:43:4a:90:00:3f:64:49:2a:
                    0c:4e:1a:65:33:64:b5:88:02:74:05:87:de:8d:4b:
                    d7:e4:cc:83:f2:0b:3f:88:c3:a1:a2:da:7b:df:35:
                    fa:fb:8c:2a:96:30:aa:ba:3c:0f:ef:7a:19:3a:02:
                    82:f8:3d:f5:4f:b1:09:9c:62:43:ca:bb:84:c2:09:
                    31:bb:2b:eb:7a:40:04:a3:6f:cb:96:2d:1a:9d:0c:
                    35:fa:ac:bc:8b:c6:5d:20:94:31:3d:ad:c4:b7:a2:
                    c9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:60:80:4F:4B:29:18:75:B0:9B:2B:CE:D5:4E:D6:35:FD:8B:07:F5
            X509v3 Authority Key Identifier:
                keyid:E3:8A:AB:EA:8E:E2:9B:F7:C9:15:BC:3E:F0:BB:AC:C2:7D:0E:CE:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:af:65:1f:d5:2b:f5:a4:7e:31:30:8e:d0:e0:22:ea:cf:f1:
         8c:f5:20:1b:88:88:66:06:75:30:c3:68:d6:40:68:91:55:4a:
         c0:66:3b:5f:e2:bd:fc:e7:20:c0:25:79:3d:fa:2d:73:28:da:
         10:69:2b:ee:a6:87:17:2b:f3:03:2a:00:ba:e8:7c:84:22:a3:
         a0:0e:26:88:2c:19:72:02:db:ea:a1:19:8a:f7:e0:9f:09:a4:
         fd:97:e1:0b:19:b8:9a:64:d4:56:f0:e4:ef:30:62:6c:45:3b:
         f6:cc:7d:56:a0:14:e2:18:75:19:9d:cc:db:2a:6a:ce:5b:6d:
         00:5e:a0:30:27:4c:aa:38:33:f1:9e:7d:0a:6e:6f:9e:fe:df:
         05:e5:6f:1f:3f:4f:a3:1f:18:e9:be:85:00:b0:5a:4f:5d:24:
         79:3b:68:4b:36:b8:5d:25:65:0a:46:7d:92:2b:11:12:a3:6b:
         c7:c4:f0:35:3c:0d:42:ce:b8:6b:5e:0f:9c:63:92:3a:4a:50:
         ca:bf:db:dd:78:df:4d:b6:3d:16:ce:b9:50:cd:20:27:33:b1:
         23:ae:e6:48:52:de:ed:53:8d:bf:3f:53:00:8c:26:7f:0b:b2:
         ae:76:ff:97:37:16:96:9a:cd:a5:24:ec:fb:d5:14:76:3f:7c:
         39:8d:76:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:54:33 2026 by rpki-client