Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
File:                     4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft (raw, json)
Hash identifier:          bV2P0AEM03avf5DTjrIF6CCmHBQb52tdclDN9g6C6Q0=
Subject key identifier:   A3:EC:11:64:85:CE:37:97:F9:89:BB:A2:A5:F8:72:F0:D4:F2:99:7C
Authority key identifier: E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
Certificate issuer:       /CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
Certificate serial:       019E292736E03079478C65D838A436034F26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
Manifest number:          0D39
Signing time:             Fri 15 May 2026 01:01:36 +0000
Manifest this update:     Fri 15 May 2026 01:01:36 +0000
Manifest next update:     Sat 16 May 2026 01:01:36 +0000
Files and hashes:         1: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl (hash: eOmwi1xCohNpp38J2lyP2ej96lqv76tJ+8U2t7YyqyU=)
                          2: xtYobtIx2W6_g9SOOJPQhPICYpQ.roa (hash: mB2srtxC3TvgB8CL9USorDjZQ7e+W7OquH6xXCy/qr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 01:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:27:36:e0:30:79:47:8c:65:d8:38:a4:36:03:4f:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
        Validity
            Not Before: May 15 01:01:36 2026 GMT
            Not After : May 16 01:01:36 2026 GMT
        Subject: CN=a3ec116485ce3797f989bba2a5f872f0d4f2997c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f3:99:28:f9:e5:fd:20:bf:8a:93:f8:06:25:
                    27:63:73:ad:10:43:bf:84:0f:11:d3:ee:0c:81:6e:
                    0a:60:d7:51:56:df:1a:93:3f:35:55:c4:74:b7:9d:
                    00:e3:ec:ff:76:0c:37:90:41:70:3b:7f:dd:9f:83:
                    39:98:24:d0:65:b1:5b:f3:8e:ff:e6:cc:55:8a:30:
                    96:14:1d:9d:b1:06:dc:de:2a:c0:a8:23:3a:54:7a:
                    b2:5d:52:a3:bc:4f:d5:27:b5:b6:0d:0f:54:db:1f:
                    eb:e3:44:5d:03:58:f3:26:5d:8c:c6:be:32:d1:97:
                    62:c5:d1:07:36:a2:b9:60:03:7c:92:af:c9:ad:05:
                    5f:5c:1b:c0:c9:95:89:ba:7c:a4:2b:17:fd:7d:fe:
                    55:34:ac:d9:c0:5c:3b:9c:79:bf:00:6b:14:bb:59:
                    bc:3c:f4:04:53:3a:73:51:11:0e:d2:31:fa:43:9d:
                    4b:fa:3d:bd:14:94:5a:e9:74:04:6c:d5:77:c6:57:
                    2f:ed:a9:61:36:f5:7a:ea:f5:97:71:f2:86:f4:18:
                    a9:ff:3f:56:c7:06:39:4c:54:9f:f0:3b:41:9d:f9:
                    00:bb:af:46:db:dc:cd:ac:1b:a3:eb:7d:7e:eb:62:
                    b3:de:23:56:54:50:8a:13:66:20:ae:79:bc:30:50:
                    9e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:EC:11:64:85:CE:37:97:F9:89:BB:A2:A5:F8:72:F0:D4:F2:99:7C
            X509v3 Authority Key Identifier:
                keyid:E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:54:68:96:a0:5f:22:38:37:10:7a:a8:e8:1a:76:5e:17:99:
         b2:22:59:95:36:13:ae:53:89:ce:11:40:b8:b1:3e:cd:27:d2:
         6f:f4:67:3f:fe:7a:4e:3d:b0:87:da:5e:a1:db:03:a9:fe:bf:
         37:a9:bc:63:e4:09:4e:b9:0d:5b:40:c7:4e:78:bb:4c:61:c7:
         bf:7d:12:4f:51:23:a9:35:a5:7f:9a:b7:90:d2:8d:6d:8a:3b:
         d7:a0:37:56:79:5d:36:84:7c:da:1d:d6:27:bc:2f:e9:8e:de:
         1d:ba:c9:23:43:1a:ea:ae:39:57:95:eb:5a:16:c3:0f:96:85:
         f7:29:a2:bd:54:e7:e7:12:34:d3:76:9f:86:45:9d:95:47:d7:
         d8:23:17:1b:d0:52:5b:26:5f:a5:29:45:9f:52:25:06:59:9d:
         ba:6a:e0:bb:7f:18:bd:ee:5f:b7:a9:86:a5:9a:63:c1:35:b8:
         a7:18:27:0c:fc:80:8f:54:93:85:63:c6:23:24:db:11:c4:91:
         5b:9d:2d:a6:18:03:39:a5:15:14:a2:6d:02:9c:a2:1c:6c:d6:
         90:9f:69:a5:1b:28:ad:a3:82:e4:86:dc:d1:4b:dd:bb:32:7e:
         51:06:34:80:ae:91:36:e1:99:72:c2:04:ff:7a:00:e5:78:ec:
         b1:f9:1d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:02:06 2026 by rpki-client