Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
File:                     V3EfIIg6YrwGORunslgs5ys_6Rw.mft (raw, json)
Hash identifier:          PIBJJE+Mb0P0RKGEwAuoXoxv79AW9wYTu+o1seWXDkM=
Subject key identifier:   B8:DC:46:8B:A3:21:D0:16:B9:17:01:D9:DC:18:4F:C6:57:7B:F4:4D
Authority key identifier: 57:71:1F:20:88:3A:62:BC:06:39:1B:A7:B2:58:2C:E7:2B:3F:E9:1C
Certificate issuer:       /CN=57711f20883a62bc06391ba7b2582ce72b3fe91c
Certificate serial:       019E314E511A49FEA0FBE3C03EECF50009DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
Manifest number:          14F7
Signing time:             Sat 16 May 2026 15:01:16 +0000
Manifest this update:     Sat 16 May 2026 15:01:16 +0000
Manifest next update:     Sun 17 May 2026 15:01:16 +0000
Files and hashes:         1: FYrxidhhtPiG6AB9OzYcqk5p8Aw.roa (hash: mzI1U2535anRJzFg3sJ4dHBKcfZC4WY6B6B0DzwBsDM=)
                          2: V3EfIIg6YrwGORunslgs5ys_6Rw.crl (hash: u1q/YHhW6svtPLPtb3BBXawdE/pi4klDrLh+cicx6AE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4e:51:1a:49:fe:a0:fb:e3:c0:3e:ec:f5:00:09:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57711f20883a62bc06391ba7b2582ce72b3fe91c
        Validity
            Not Before: May 16 15:01:16 2026 GMT
            Not After : May 17 15:01:16 2026 GMT
        Subject: CN=b8dc468ba321d016b91701d9dc184fc6577bf44d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6a:52:13:a7:c8:e4:19:1a:26:64:2f:d9:d6:
                    48:77:f7:64:16:eb:b9:54:27:23:4b:0d:98:ce:b9:
                    c1:b0:92:fe:d5:d1:f1:f3:ab:79:3f:9f:79:96:f1:
                    89:ef:a5:a3:a4:cd:22:5e:3b:2a:70:21:2c:be:1d:
                    d3:13:11:b9:e5:d1:9b:a5:31:ce:8e:f0:68:17:4c:
                    07:a6:fc:92:ff:c3:cb:bc:a7:b2:e3:13:4c:9b:b9:
                    ad:f4:38:cf:43:ee:94:be:1c:d6:2a:f7:fa:eb:c9:
                    7e:92:68:37:ed:46:26:93:6c:76:d8:93:01:b4:cf:
                    05:d0:be:92:5e:e7:82:75:60:cc:85:8e:db:e1:e3:
                    f0:a9:89:11:1a:18:54:65:6d:d4:3e:4b:45:b8:cc:
                    2d:8a:c1:80:d0:dc:40:00:37:83:c6:27:d8:64:89:
                    c9:ae:46:d2:be:33:dc:a5:95:9e:2a:6e:1b:84:1b:
                    7b:91:cb:12:6e:eb:2e:d6:c0:54:79:c7:7b:ea:4c:
                    0a:16:3b:fc:87:b0:32:62:3e:4c:14:f5:5f:1a:ee:
                    6a:9c:9f:a8:ce:a4:55:2e:b1:20:14:86:f2:81:5a:
                    28:cc:e3:a9:d9:88:0a:e3:89:46:85:89:fd:5b:cd:
                    01:15:8f:87:00:2d:ac:2c:64:dc:9e:e8:8c:61:d5:
                    b7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:DC:46:8B:A3:21:D0:16:B9:17:01:D9:DC:18:4F:C6:57:7B:F4:4D
            X509v3 Authority Key Identifier:
                keyid:57:71:1F:20:88:3A:62:BC:06:39:1B:A7:B2:58:2C:E7:2B:3F:E9:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:07:d3:5f:2e:bf:ac:3f:02:0b:78:c9:59:32:d5:b7:9f:43:
         3c:f2:0c:3f:ca:c9:01:88:9d:aa:b9:40:72:1b:98:f3:24:d6:
         bb:3f:90:b4:94:44:e3:5b:99:1f:bf:91:7e:df:23:3b:74:ec:
         4d:c1:1d:81:18:91:51:57:5e:52:7f:91:36:27:bd:a5:94:27:
         fa:b0:00:f7:38:c5:b9:dd:df:40:08:1a:04:61:6d:fb:fe:53:
         b6:a2:3f:ca:3a:1c:25:fe:d2:f0:32:21:da:65:e0:b8:0f:38:
         b7:ee:f4:07:0a:f0:cd:06:28:01:0f:79:20:63:df:72:1c:87:
         20:ea:7d:f8:30:58:69:f4:38:f7:f7:8b:1c:3a:39:72:78:98:
         4a:ac:06:65:72:d5:7c:53:93:28:92:b1:13:24:c1:63:d1:9c:
         08:b9:c8:d6:8f:08:29:12:8e:53:54:f2:e0:09:67:1b:5e:92:
         d9:f6:63:5f:7f:05:8d:f3:8c:35:67:bd:86:87:be:d2:b1:57:
         67:6f:9d:04:82:a1:dd:45:b6:13:cd:08:fa:c6:59:53:f6:a2:
         1a:f2:8b:71:ca:12:d3:5e:18:c7:8d:e6:7f:69:86:d8:e8:b9:
         3a:e1:9c:2d:34:3b:36:7b:4b:33:ee:ab:ea:4e:a9:23:3f:75:
         1a:70:5f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:40:02 2026 by rpki-client