Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
File:                     _q5Ur85RVFR5wNoD8gGnTimSfXg.mft (raw, json)
Hash identifier:          o4qdj/yws20hx/XNGFVdvITvbhXx/jCMjcCIjONgXHg=
Subject key identifier:   74:24:1D:94:4F:6F:8C:EB:0F:5D:B1:E7:C2:AA:78:34:71:83:2F:0E
Authority key identifier: FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78
Certificate issuer:       /CN=feae54afce51545479c0da03f201a74e29927d78
Certificate serial:       019E89B5BF9BA9E914C545611EB2D917C064
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
Manifest number:          096D
Signing time:             Tue 02 Jun 2026 19:00:50 +0000
Manifest this update:     Tue 02 Jun 2026 19:00:50 +0000
Manifest next update:     Wed 03 Jun 2026 19:00:50 +0000
Files and hashes:         1: IpDWhHDW_jjW4s7kmxssNqbsNL8.roa (hash: PZdGVIm+bNpQQVU0BxUiBJTaInqWv4810rxgD/JnG9o=)
                          2: _q5Ur85RVFR5wNoD8gGnTimSfXg.crl (hash: VsHKG3y/JSj7SmQmVVX2mx3SrQDBbQCa3fD+3MI7SdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jun 2026 15:55:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:89:b5:bf:9b:a9:e9:14:c5:45:61:1e:b2:d9:17:c0:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feae54afce51545479c0da03f201a74e29927d78
        Validity
            Not Before: Jun  2 19:00:50 2026 GMT
            Not After : Jun  3 19:00:50 2026 GMT
        Subject: CN=74241d944f6f8ceb0f5db1e7c2aa783471832f0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ba:13:a8:14:17:2e:ef:53:03:9c:70:e3:e4:
                    b4:ba:17:4d:b9:4b:20:a5:da:41:26:2c:b4:c5:07:
                    7d:2a:9f:40:c9:97:b7:01:70:f4:61:00:9a:b4:fb:
                    44:34:20:f8:a5:80:39:98:c9:e3:50:93:8d:c4:12:
                    18:7e:46:77:2b:5c:7f:95:96:25:20:16:e2:3f:26:
                    91:d8:cd:01:7f:a2:0f:0f:86:dc:bf:40:55:4c:ed:
                    58:d4:4d:0d:24:7f:23:41:30:e3:5b:f6:21:7f:f1:
                    4c:4f:18:17:55:ec:5f:85:63:f2:0c:98:21:f4:f9:
                    52:5a:4c:d5:94:f7:27:f9:cd:f3:d8:2c:07:17:31:
                    21:39:19:37:f4:d7:ff:31:ba:01:3b:d6:e7:22:35:
                    56:db:e2:e5:12:82:f9:b5:b3:96:ed:dc:9e:3b:bd:
                    3c:39:7d:7d:74:3d:0c:3c:87:5c:e8:ce:f9:6f:dd:
                    df:68:44:44:da:f4:81:c3:b5:63:5a:c7:0d:53:62:
                    64:16:80:3f:e6:f1:71:2e:9b:be:73:ac:b3:b8:9a:
                    c2:83:07:79:a5:ec:8c:d7:3c:dc:16:2a:fd:a0:de:
                    97:b4:e6:96:ae:9a:b0:e9:08:31:88:43:92:1f:88:
                    fd:73:5b:5e:80:61:39:4b:95:c6:43:13:16:79:1d:
                    fe:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:24:1D:94:4F:6F:8C:EB:0F:5D:B1:E7:C2:AA:78:34:71:83:2F:0E
            X509v3 Authority Key Identifier:
                keyid:FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:93:4b:79:a4:92:f1:36:20:d6:fd:d2:cd:71:d6:98:e4:78:
         8a:1e:31:1f:45:5f:d0:0c:0e:64:f6:85:c5:19:54:30:ec:0f:
         4c:c1:5b:a9:45:6f:2b:7a:38:19:50:87:00:8b:cf:34:65:0e:
         b1:c6:aa:ea:d3:ad:c5:ef:df:4e:2d:a3:ee:1f:3f:af:11:05:
         f5:1b:38:c5:66:41:63:8d:dd:61:b0:df:e4:e4:e0:ad:f0:24:
         d0:8b:a5:1f:88:8e:e2:b0:91:1a:0b:d1:ee:4b:7b:73:43:05:
         57:64:a6:7e:42:1c:98:cb:37:42:fd:9c:d5:5a:7e:02:83:60:
         19:7c:b0:35:19:7f:e6:19:45:41:1f:85:a5:4d:b7:51:77:82:
         76:d3:ad:32:8a:37:3a:4e:63:ea:43:c0:69:09:1d:15:9b:d0:
         e4:d9:bb:57:48:72:28:fe:a4:ec:89:02:c3:8d:a5:83:10:77:
         da:be:2d:00:33:a8:1b:6b:33:7d:c5:4f:c3:67:12:39:70:0a:
         e2:85:57:5d:59:4a:c3:b0:e5:02:f6:e0:d2:0e:7e:99:c9:50:
         69:d7:12:e9:51:62:d9:ca:9d:a5:9f:cf:4c:93:29:66:d8:97:
         f1:f7:3e:a3:91:17:38:61:52:9f:27:76:07:78:10:dc:30:7a:
         0c:fd:e3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:48:38 2026 by rpki-client