Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft
File:                     49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft (raw, json)
Hash identifier:          gLuSjrrW5oC7MSyaMqEIbrfEUIIwiNWPyG3eh2kPjZA=
Subject key identifier:   BD:53:AD:E1:FA:98:EE:CC:AA:29:13:D8:15:40:F5:3F:8D:0F:B2:B4
Authority key identifier: E3:D2:2C:01:78:46:56:D4:F5:66:6E:77:03:48:1A:2F:70:84:E4:F9
Certificate issuer:       /CN=e3d22c01784656d4f5666e7703481a2f7084e4f9
Certificate serial:       019E28EFFE51DF9853217EF021BF1DF1737F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/49IsAXhGVtT1Zm53A0gaL3CE5Pk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft
Manifest number:          FC
Signing time:             Fri 15 May 2026 00:01:17 +0000
Manifest this update:     Fri 15 May 2026 00:01:17 +0000
Manifest next update:     Sat 16 May 2026 00:01:17 +0000
Files and hashes:         1: 49IsAXhGVtT1Zm53A0gaL3CE5Pk.crl (hash: ncFouRiLB2J9tV3OpY27IxNANaE5koibTHP1Spwnr4I=)
                          2: KIZ8Qo_Osa0eeRKHpCezFEWpt38.asa (hash: BUCO47iMjOX10Oz4gqlvyalBtDL8T56NMGskn473Wu8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/49IsAXhGVtT1Zm53A0gaL3CE5Pk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 00:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:ef:fe:51:df:98:53:21:7e:f0:21:bf:1d:f1:73:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3d22c01784656d4f5666e7703481a2f7084e4f9
        Validity
            Not Before: May 15 00:01:17 2026 GMT
            Not After : May 16 00:01:17 2026 GMT
        Subject: CN=bd53ade1fa98eeccaa2913d81540f53f8d0fb2b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:88:48:9e:10:a2:83:c9:99:27:02:fd:fe:2b:
                    8a:8f:c6:ae:29:02:4e:92:71:e7:ae:0e:bb:a4:97:
                    7c:80:45:46:2c:68:18:1a:d3:6e:ae:93:12:50:ae:
                    ae:7a:62:81:25:e2:6c:a3:14:3e:f6:80:9b:c7:63:
                    02:46:6b:aa:7c:c1:07:e6:9b:63:41:47:22:67:0b:
                    bf:d0:4d:fd:8e:e7:ef:35:c1:6f:e7:11:7b:54:12:
                    c5:c7:74:38:c6:3a:6b:11:7a:f8:ab:cb:5a:3a:ff:
                    90:43:1b:bf:06:75:cd:a6:fc:f9:de:c3:61:d6:f4:
                    f1:4f:a5:27:e1:ff:0c:4b:95:77:70:58:c6:6e:7b:
                    3a:f9:c2:6e:94:52:df:96:9e:95:22:54:36:a3:40:
                    26:e7:b8:f9:ee:be:bb:b6:a9:a2:b4:0c:6f:b0:4c:
                    85:92:20:24:ec:fd:23:e9:dd:04:72:6d:68:78:24:
                    b4:80:36:b4:5b:55:15:e8:cb:32:ea:8e:34:01:22:
                    6d:5b:f1:1f:32:62:78:ef:25:cc:aa:f1:70:9f:af:
                    43:91:e0:06:af:70:02:cd:b5:b2:a2:c6:55:85:86:
                    a4:4e:f4:39:0c:b9:47:fd:78:13:85:78:bd:9d:6b:
                    d1:8d:89:ce:af:2c:cd:5d:a5:8d:a2:4e:14:52:5a:
                    97:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:53:AD:E1:FA:98:EE:CC:AA:29:13:D8:15:40:F5:3F:8D:0F:B2:B4
            X509v3 Authority Key Identifier:
                keyid:E3:D2:2C:01:78:46:56:D4:F5:66:6E:77:03:48:1A:2F:70:84:E4:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49IsAXhGVtT1Zm53A0gaL3CE5Pk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:00:2b:c8:6a:57:eb:4f:3e:84:e5:14:bf:94:56:9a:81:b2:
         f5:0e:40:16:e5:72:3d:fe:16:1d:b9:26:24:18:55:19:46:0f:
         80:34:8f:7a:31:46:63:29:9c:f6:1e:d4:69:fe:a3:65:96:f7:
         ae:ac:3e:bc:a8:ca:df:1a:07:2f:24:0d:da:09:db:19:19:b6:
         3a:8b:70:c0:c2:21:6c:f6:b3:86:79:30:b3:2a:b0:b5:56:97:
         9d:11:cf:35:70:a0:cc:30:1c:67:91:43:45:04:74:91:67:8d:
         c2:7f:d4:2d:d1:dd:e1:07:c6:9d:81:93:85:89:18:bb:e2:28:
         bc:20:e0:72:4f:43:e7:ba:0d:c9:1c:ef:d4:b5:84:e8:53:c2:
         b6:a8:13:b5:b1:a5:c0:19:20:8c:8d:3b:ed:5f:52:fe:ca:d6:
         e1:74:05:20:da:22:f6:d6:92:cb:e6:71:f8:f5:ef:f9:36:16:
         66:63:31:ca:49:b0:03:46:6f:27:14:1e:a8:66:07:8d:c1:6a:
         ec:d9:02:42:81:4e:05:49:02:ca:c0:72:05:41:d1:65:13:b3:
         db:5b:80:43:24:c9:55:60:bd:99:3a:c4:0b:d4:7e:40:c3:99:
         c7:d1:84:71:e0:20:f9:8b:e9:6c:2f:6a:88:ec:d7:fd:bf:5c:
         33:60:63:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:56:41 2026 by rpki-client