Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
File:                     5F0K3ClN02bfatqIATTb0OaIzPc.mft (raw, json)
Hash identifier:          b3RmRvyzaRyMrq21GFCawtFu653Vadq4iQXSXfKDQio=
Subject key identifier:   36:2F:2B:8F:4D:3D:EC:2D:43:9C:2C:24:DA:7F:C2:EB:05:18:2A:BE
Authority key identifier: E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7
Certificate issuer:       /CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
Certificate serial:       019E314DE72D33AD8D5EB34D18EF65598FA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
Manifest number:          1912
Signing time:             Sat 16 May 2026 15:00:49 +0000
Manifest this update:     Sat 16 May 2026 15:00:49 +0000
Manifest next update:     Sun 17 May 2026 15:00:49 +0000
Files and hashes:         1: 5F0K3ClN02bfatqIATTb0OaIzPc.crl (hash: 3vP30F/QqG88H99BED28rZuaxoO2VnU0wxvDo6K/LiI=)
                          2: eVHX86Z5BUrMshf-zyfKQYxN0ao.roa (hash: 52NfErShygwUz/Jha+lSZaO5oAHArVutPPK1QEHMLQU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4d:e7:2d:33:ad:8d:5e:b3:4d:18:ef:65:59:8f:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
        Validity
            Not Before: May 16 15:00:49 2026 GMT
            Not After : May 17 15:00:49 2026 GMT
        Subject: CN=362f2b8f4d3dec2d439c2c24da7fc2eb05182abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7b:c3:fd:ca:2a:2b:89:af:87:aa:51:9a:8a:
                    7c:91:b9:9c:91:50:36:db:65:c8:c9:12:96:b0:e6:
                    fe:59:88:35:04:17:c2:fa:78:e2:1e:e5:10:f8:68:
                    ec:47:26:c1:b7:64:25:dd:90:86:4a:40:67:34:b1:
                    04:9d:b1:f2:6f:7a:d1:01:7f:ce:c0:07:05:f0:6c:
                    b6:ad:f2:7e:f1:7f:9d:64:a0:d7:4f:b7:f6:49:5c:
                    44:24:ea:19:06:0d:22:ef:aa:0a:9f:20:5f:c2:4b:
                    82:28:61:91:1c:93:17:1d:a4:aa:58:7a:4c:90:fb:
                    c0:3f:98:3c:37:75:6d:ef:a6:0b:04:41:97:65:89:
                    38:17:7e:01:c5:39:85:24:bc:b0:d7:0d:9f:99:98:
                    1f:1f:bd:df:a0:08:57:d1:05:8b:21:6b:0f:10:26:
                    c5:d3:11:1d:a2:08:6f:17:93:81:24:c3:ac:49:b6:
                    70:af:41:6a:4a:61:dc:73:7f:5f:09:3a:ac:2b:bd:
                    1e:2e:e8:9f:c5:78:c3:08:00:d3:4d:c0:d2:ab:38:
                    b3:87:7c:69:04:a0:2a:ad:e2:9a:54:31:10:26:c4:
                    7b:07:27:f9:95:12:a7:00:af:f7:7f:11:c2:39:db:
                    e9:76:7c:cc:e5:e9:57:fa:ee:2e:9c:e5:26:28:4d:
                    d2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:2F:2B:8F:4D:3D:EC:2D:43:9C:2C:24:DA:7F:C2:EB:05:18:2A:BE
            X509v3 Authority Key Identifier:
                keyid:E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:4a:4a:fa:27:0f:f6:eb:8d:a7:cf:22:2a:51:56:7a:32:00:
         af:c8:e3:c6:f1:90:7e:bc:98:a5:a8:64:79:1f:bb:b2:f0:39:
         2d:3f:0a:ba:0a:80:4e:4d:86:e8:f5:43:8b:1d:5e:eb:34:d4:
         a3:3f:ae:e6:95:30:44:2e:ea:88:86:e9:16:fb:32:05:c4:1c:
         07:f7:e5:84:1a:de:a7:2c:c2:2c:bc:9a:58:94:1c:0c:4f:30:
         96:44:31:c7:f8:7b:9a:a9:31:4d:46:a1:49:0d:df:60:c3:96:
         99:59:4c:43:1e:86:37:31:a4:0e:09:cd:77:03:4d:9f:bb:bd:
         1d:0e:a6:13:6e:b0:7e:22:c9:f1:fa:55:c7:b1:de:48:50:3b:
         1f:ff:ad:99:69:b0:7e:d3:05:e7:10:9b:e8:28:7d:04:4a:87:
         b0:8b:4d:f7:c0:70:93:1c:0e:17:89:f0:c1:45:ea:ba:cf:7e:
         b2:29:58:15:ef:9f:07:c6:6b:9d:09:70:13:14:8d:16:6b:be:
         91:1b:12:ca:36:0b:e3:1b:07:7e:22:16:87:c5:eb:ec:49:6b:
         13:7d:75:76:f4:a5:f6:d9:30:7a:17:42:98:56:7a:48:75:25:
         d9:59:79:81:35:49:9f:03:64:96:ca:49:0f:49:fa:b6:c2:fb:
         ff:95:86:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:55 2026 by rpki-client