Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft
File:                     w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft (raw, json)
Hash identifier:          9v4mcR2bJfg8KCqR8/IrAVBSb7PRrZ/x4v8FOXfS0kU=
Subject key identifier:   73:61:4C:E6:B4:41:F2:43:DB:B3:F9:D9:E2:75:9B:D5:0B:9A:0E:01
Authority key identifier: C3:A8:E8:64:8E:0B:A3:6A:32:3A:B9:DF:63:41:D6:68:BD:A6:B4:D2
Certificate issuer:       /CN=c3a8e8648e0ba36a323ab9df6341d668bda6b4d2
Certificate serial:       019E59A5048733F63C1878E97817FCACA0AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft
Manifest number:          1275
Signing time:             Sun 24 May 2026 11:00:47 +0000
Manifest this update:     Sun 24 May 2026 11:00:47 +0000
Manifest next update:     Mon 25 May 2026 11:00:47 +0000
Files and hashes:         1: CaF9jDRtHy3skgKS7QCnXm4PI7A.roa (hash: V9ZLClAO25ZfSnTZeTYg00I4twtSynvhNaSIPSAPlv0=)
                          2: bSfoqAesrmojtDNBxt2VZHxOHqI.roa (hash: Z7b9r8p1AdR9DmR8LmSnmnhIJm2T4hKdRLt3c111qtg=)
                          3: puvvxkuyGGm9hRKcVBF60FM3T20.roa (hash: 859vc/MnpuH2XD8iZDZO4+LCLxVjdb1X9+4Sxo2qG9k=)
                          4: w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl (hash: lpvBwRLyz/9qOkU24raT1usrJe2SuZQGQcs0m6yO1rI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:59:a5:04:87:33:f6:3c:18:78:e9:78:17:fc:ac:a0:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a8e8648e0ba36a323ab9df6341d668bda6b4d2
        Validity
            Not Before: May 24 11:00:47 2026 GMT
            Not After : May 25 11:00:47 2026 GMT
        Subject: CN=73614ce6b441f243dbb3f9d9e2759bd50b9a0e01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ea:e1:f2:5a:9d:ea:be:f6:3a:cc:c1:14:38:
                    7c:c0:21:89:49:16:43:fd:5e:c2:2f:6e:61:08:23:
                    7c:5e:91:6c:4a:64:b6:88:83:a1:da:7c:5c:31:f0:
                    62:68:62:8e:dd:eb:be:cb:58:4d:8b:42:56:1d:4b:
                    96:59:cb:a2:f5:f8:ec:0b:ac:a2:47:a7:7f:13:9b:
                    22:b3:43:c9:1b:54:ee:f0:55:a2:88:62:8f:f8:df:
                    f5:fa:02:00:34:e9:61:26:de:34:03:28:ea:e3:bd:
                    bc:fe:f2:ba:03:ab:eb:27:4c:00:df:57:7b:8b:61:
                    05:42:70:6a:82:12:51:e3:bf:54:74:ce:8e:0b:d0:
                    e3:b9:5a:10:b3:6d:d2:85:bd:fb:4a:fa:ca:6a:44:
                    04:b6:17:d7:fd:5e:dc:30:05:c8:b1:59:0c:fb:e6:
                    07:98:f4:34:e1:18:77:cb:90:1e:61:57:93:0d:94:
                    05:9c:a7:af:5a:bf:c1:94:4c:4e:2c:62:f1:a7:3c:
                    32:12:03:30:23:bd:5d:52:40:ba:22:f3:fd:86:fd:
                    49:d1:1b:e4:28:22:17:36:b9:0a:d9:cf:5e:7d:bb:
                    ac:1c:1a:45:ad:ce:54:2f:84:29:5f:fe:2e:e7:1e:
                    b8:7a:34:5e:cd:8e:8e:81:fa:3a:2c:f9:5c:65:15:
                    df:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:61:4C:E6:B4:41:F2:43:DB:B3:F9:D9:E2:75:9B:D5:0B:9A:0E:01
            X509v3 Authority Key Identifier:
                keyid:C3:A8:E8:64:8E:0B:A3:6A:32:3A:B9:DF:63:41:D6:68:BD:A6:B4:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:55:07:31:1c:fb:94:51:da:e0:11:64:f7:3d:26:41:f3:d8:
         e4:f9:95:a6:79:fd:da:94:f6:3f:19:bf:7c:54:50:4a:37:61:
         33:b1:c5:c1:32:ab:fb:06:1b:11:85:07:42:34:2f:2c:98:c6:
         42:64:d3:4e:dc:b0:92:4e:35:b2:2b:c9:66:0c:33:7b:a1:3d:
         9a:61:d0:7e:c6:8a:e1:a7:cf:6e:69:4e:86:5c:35:25:c8:2c:
         e1:c9:5a:b9:7f:df:21:20:c2:5e:ea:39:7c:ee:d4:71:e0:d1:
         fc:8b:05:f0:7b:2b:7c:f1:6f:cf:16:ac:37:54:20:30:8c:2e:
         e5:99:58:db:e9:b1:bb:80:f0:9e:ec:bc:92:ea:24:4d:98:32:
         0c:f8:74:09:ad:a3:83:31:dc:7b:66:b5:0c:c2:c4:c8:ec:f0:
         14:13:ca:20:cc:de:f2:aa:f3:1d:9f:38:03:21:b2:fd:3e:16:
         43:19:07:30:ca:a1:1a:b5:be:95:7b:e0:8d:73:cd:9c:f7:3a:
         29:1a:dd:16:7e:64:60:e6:38:8f:73:0e:7f:93:19:75:ed:50:
         53:ee:96:15:aa:cf:45:47:3a:2b:84:d7:c3:ac:f8:92:f7:3c:
         e7:5e:63:f7:3f:b9:97:0f:7c:1b:6f:5b:75:e4:c6:ed:86:cc:
         32:d9:01:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 13:47:57 2026 by rpki-client