Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
File:                     Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft (raw, json)
Hash identifier:          y52s51aM2mTQWKtN1WrmtQ00xs6lbvjOvMrNBXNJpH8=
Subject key identifier:   04:43:50:4A:AD:41:E8:03:9B:B5:2F:7B:D1:E6:DB:6A:33:12:29:D6
Authority key identifier: 02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F
Certificate issuer:       /CN=028fdf719d47a10033451a83384a6db68dbd5b0f
Certificate serial:       019E0BF801F8EE9DBC30C3074706398E8160
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
Manifest number:          0F05
Signing time:             Sat 09 May 2026 09:01:03 +0000
Manifest this update:     Sat 09 May 2026 09:01:03 +0000
Manifest next update:     Sun 10 May 2026 09:01:03 +0000
Files and hashes:         1: Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl (hash: +R+WK1lRuQNqcM6v43jFvGbMyh+cFV4WSdL0kh6kp7E=)
                          2: wx4jf3r0v_RD4WGbwjNb9_66YeA.roa (hash: Yg61lLQnPGGlaDhOZEVebkyWouHjvzVXcfasCV97MNE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:0b:f8:01:f8:ee:9d:bc:30:c3:07:47:06:39:8e:81:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=028fdf719d47a10033451a83384a6db68dbd5b0f
        Validity
            Not Before: May  9 09:01:03 2026 GMT
            Not After : May 10 09:01:03 2026 GMT
        Subject: CN=0443504aad41e8039bb52f7bd1e6db6a331229d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:03:91:53:26:96:38:74:03:14:89:ce:ae:62:
                    87:9d:e5:c4:42:dc:d0:7e:89:bf:91:1f:3b:34:a7:
                    7d:59:33:d7:7c:0b:98:bf:a1:3b:35:48:83:ce:2f:
                    27:6c:1a:9e:a2:a0:b7:1c:92:22:4e:15:04:0e:5b:
                    c4:cd:b3:8f:18:31:d8:45:40:d4:fe:63:ed:7b:3c:
                    7e:db:f7:f2:ae:93:d7:32:13:1e:1e:90:1c:9a:d0:
                    43:82:ea:79:57:7a:13:29:3b:be:b9:d4:83:31:6a:
                    d9:13:b0:fc:04:25:4e:07:c8:b0:dd:25:13:9a:bf:
                    27:83:56:ca:47:7a:f0:d3:b4:fd:fa:fa:b3:8d:ee:
                    f6:6f:95:92:0f:ed:7f:b5:3d:06:f4:e7:e6:5e:df:
                    3d:b4:54:62:2d:1b:0c:c1:4f:3f:96:19:fd:92:ef:
                    63:86:bc:37:c3:e3:ff:71:85:92:0c:d2:fb:b7:9f:
                    7c:ff:14:5c:56:d3:25:71:11:48:9c:a1:1f:c2:57:
                    e6:9a:79:1c:6b:3c:47:9a:d7:16:e9:7a:57:c5:e1:
                    95:1d:b4:97:7a:79:f6:00:1d:1e:38:f0:43:a5:86:
                    cf:08:aa:e1:18:ad:6a:dc:2e:b0:91:0d:48:cb:9a:
                    52:4f:2a:5b:8e:d3:32:e9:24:65:30:cb:a1:a1:e7:
                    01:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:43:50:4A:AD:41:E8:03:9B:B5:2F:7B:D1:E6:DB:6A:33:12:29:D6
            X509v3 Authority Key Identifier:
                keyid:02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:f2:6c:5a:15:ae:0e:9b:ee:6e:8f:93:e9:5c:19:92:48:9e:
         38:74:b3:13:d6:5d:0f:e8:41:86:81:0f:72:ff:01:d9:01:58:
         00:ad:de:94:68:66:b0:a7:6f:d8:48:9c:98:57:d9:cf:ac:04:
         50:f1:83:f1:35:b2:d2:52:90:ee:88:f6:8f:93:aa:87:2b:63:
         24:70:bb:6c:52:86:4a:17:ab:70:bd:c6:9b:17:9f:13:9a:a6:
         09:84:ff:d6:cf:86:dd:03:d6:3b:e8:d9:20:fb:1c:4b:80:d6:
         ef:85:0e:0d:49:66:97:59:87:48:c7:8e:bb:40:06:c7:52:ee:
         f6:6f:74:49:59:47:03:8d:3f:b6:d7:71:9d:37:db:db:8d:01:
         3e:05:79:b6:cf:af:21:85:d2:0e:4d:7c:5a:27:68:68:dc:c7:
         4b:63:6d:72:0a:4f:cb:5a:1c:c9:d5:19:24:1c:e8:e1:3e:fb:
         fc:7d:b6:ca:cd:7d:47:19:48:66:71:ca:53:21:d7:cf:ee:1f:
         4e:4e:26:d2:83:b5:a9:9a:2d:9d:23:29:74:4a:ae:8d:ab:02:
         db:0f:3b:51:90:ab:ae:20:1f:5d:ec:10:a6:79:ab:8c:45:a4:
         e7:24:44:d8:c1:8e:58:db:c6:4b:1a:29:d2:89:31:b7:67:17:
         d7:5f:5c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:23:53 2026 by rpki-client