Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
File:                     32QSxd3xKOxxSvrqSD6Hsbx01B8.mft (raw, json)
Hash identifier:          7Q3o1C5wXqm8B4F+HkxC6zf//nGS/6YmjqLyvGyWTO4=
Subject key identifier:   A7:F5:12:FC:E1:A4:05:3D:8D:70:6D:80:E5:8F:FD:47:E5:54:3F:2B
Authority key identifier: DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
Certificate issuer:       /CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Certificate serial:       019E2FCD9C8CC7A934179E3F1E1DCD723B71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
Manifest number:          07C9
Signing time:             Sat 16 May 2026 08:01:04 +0000
Manifest this update:     Sat 16 May 2026 08:01:04 +0000
Manifest next update:     Sun 17 May 2026 08:01:04 +0000
Files and hashes:         1: 32QSxd3xKOxxSvrqSD6Hsbx01B8.crl (hash: 6Zr9LezrcR+Z69d2/Ckoql0AlHNUupue6+ux7gUuRQo=)
                          2: qysmFDTPSaS-7X_DP__MLr3spSg.roa (hash: sizByteXB/C1D/4JpTMTXyCiROR26c285zoIFTRvIDQ=)
                          3: zDlZfltCh1B48XocFSVPymegLck.roa (hash: ok9T1tW3HpCXbkwunUBGjXMhZ1tSRV4NJVARGCb9Jdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 08:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:cd:9c:8c:c7:a9:34:17:9e:3f:1e:1d:cd:72:3b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
        Validity
            Not Before: May 16 08:01:04 2026 GMT
            Not After : May 17 08:01:04 2026 GMT
        Subject: CN=a7f512fce1a4053d8d706d80e58ffd47e5543f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b1:7e:4f:cf:a1:0c:74:5e:c5:c0:82:d9:d4:
                    7d:fe:c0:7b:20:3f:32:73:db:8d:33:88:68:96:c8:
                    ab:40:7f:73:f7:71:f0:95:c2:64:5d:0a:db:f9:80:
                    7f:ac:17:a4:6b:1b:39:6e:6a:fc:93:2d:9c:1b:3e:
                    9b:1e:1a:1e:43:39:5a:6e:82:c3:46:48:8c:21:87:
                    8a:13:3c:3e:17:12:04:03:11:45:3f:22:46:ad:b8:
                    60:13:53:cd:0f:46:36:f5:f6:02:d6:70:81:55:e4:
                    7c:a3:de:a6:41:2a:01:b6:12:32:6a:95:ee:ce:20:
                    92:a7:0f:77:7e:29:ea:06:18:11:17:29:4c:04:a7:
                    cd:cd:46:d4:f0:e9:25:b9:c3:d7:1e:91:ba:88:a5:
                    a2:66:95:4c:1b:2c:4b:74:58:28:7e:ac:1b:ab:5b:
                    c0:75:50:7a:17:a0:de:9f:ab:21:ef:94:ce:0f:5b:
                    20:df:0a:30:90:d1:de:3d:65:f5:1d:85:b3:56:3c:
                    68:a7:ed:94:85:c0:cc:ac:c1:71:9c:aa:57:8a:d6:
                    8e:2a:6e:02:b5:87:66:14:d2:14:04:9c:e1:74:b3:
                    92:fa:ec:5d:f3:31:9f:7c:61:a8:bd:27:48:5d:4f:
                    c0:dd:2c:a3:94:e9:4c:a7:a6:fa:9f:a9:57:1f:c4:
                    06:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F5:12:FC:E1:A4:05:3D:8D:70:6D:80:E5:8F:FD:47:E5:54:3F:2B
            X509v3 Authority Key Identifier:
                keyid:DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:98:fb:56:f1:0d:06:1e:90:e2:5b:10:d1:01:4b:39:25:8f:
         0d:1b:1d:ef:a8:7f:15:75:ca:d0:63:ce:db:63:db:22:7e:f5:
         ff:66:49:7e:98:70:20:89:1e:2c:31:b5:ec:13:4b:88:ce:c1:
         67:bc:99:b5:a2:c5:a9:8f:c1:ae:75:21:55:0a:88:35:65:a0:
         fc:2f:35:10:e5:d5:0d:26:a7:60:f0:76:97:46:33:1e:18:eb:
         d5:11:46:62:a6:a2:d3:6a:f4:71:5a:d3:fb:44:a8:18:2f:ce:
         68:26:41:e3:34:0d:8d:be:c9:b5:05:3b:74:46:48:5c:48:83:
         b5:26:c7:f8:25:d6:99:d1:2f:86:aa:f4:b7:43:22:44:a8:b3:
         45:d5:40:59:20:45:a7:93:a2:6c:07:5e:89:5a:01:0d:89:23:
         39:b3:d5:22:db:59:35:fa:99:44:fc:6f:52:2d:b1:f2:7e:42:
         60:68:55:85:2e:51:36:43:45:a0:69:c4:ba:7f:f1:a1:dd:4f:
         39:20:e5:04:0a:28:d4:15:db:c7:f4:b0:a1:38:9a:03:5f:5b:
         92:17:c5:0a:78:08:dc:71:43:19:a6:32:91:57:fc:79:10:f2:
         64:f5:fc:0e:f7:1c:e2:20:f2:36:ab:12:c3:1e:35:6e:e0:09:
         ce:b9:e8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:41:09 2026 by rpki-client