Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
File:                     RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft (raw, json)
Hash identifier:          OD9iIihwB9qXaS9xJbSfsCZOyjpdIkvX8cHT9UV6ff4=
Subject key identifier:   D8:88:9A:5E:E2:8D:7F:E5:ED:DF:D8:BB:12:08:5B:75:CC:48:CD:5C
Authority key identifier: 45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3
Certificate issuer:       /CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
Certificate serial:       019DEDB68EBBD309110CA096D8DF717E0037
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
Manifest number:          03F8
Signing time:             Sun 03 May 2026 12:00:57 +0000
Manifest this update:     Sun 03 May 2026 12:00:57 +0000
Manifest next update:     Mon 04 May 2026 12:00:57 +0000
Files and hashes:         1: BWVL9f-KpOOHJHITcd_zmQga4BM.roa (hash: 16slF0zkT/3GuOWybhDOTweAZ519QDUn0ORtD9/qMi4=)
                          2: RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl (hash: 4OJRjHeGLp7j/gS9twny6y6KwWzOj6uofdpksQaIY4g=)
                          3: wFIGK-hJfwnzYHOy-0zpMlYIwX8.roa (hash: ijX/47c/1yaEzAjtMYS0nchNRSTG2HHJG2gdZxBcrMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 May 2026 11:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ed:b6:8e:bb:d3:09:11:0c:a0:96:d8:df:71:7e:00:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
        Validity
            Not Before: May  3 12:00:57 2026 GMT
            Not After : May  4 12:00:57 2026 GMT
        Subject: CN=d8889a5ee28d7fe5eddfd8bb12085b75cc48cd5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:79:6b:88:70:f8:68:31:2b:94:f8:71:b9:f1:
                    e5:2c:5e:d5:9e:54:99:f2:96:de:4c:38:a1:27:19:
                    ad:b1:60:44:f2:b8:75:f4:9f:6c:ba:7d:23:02:9a:
                    af:d7:06:84:b5:8f:2a:1b:95:c0:c7:f1:10:35:60:
                    48:f3:92:8e:b4:1c:90:f9:eb:78:6c:5c:2b:dc:d5:
                    da:fe:00:bf:98:44:b7:09:dc:de:69:d2:67:c2:10:
                    04:41:3c:91:25:c3:e8:15:7e:04:df:8d:f3:c0:6b:
                    71:b5:46:eb:7a:a3:d1:f0:3e:1e:31:5d:4e:f5:cc:
                    f9:9d:d2:2f:50:38:51:d9:81:43:0d:bc:d4:90:e0:
                    60:95:81:c9:5a:e9:99:65:7d:8b:74:21:ea:9a:00:
                    37:e8:d3:13:a0:0f:64:0c:a4:69:95:2e:55:9b:4f:
                    02:70:2d:72:de:9e:6d:b8:f7:65:9b:60:64:7c:45:
                    59:15:3d:b3:0a:23:28:e5:4c:29:59:f8:6d:2e:a7:
                    83:32:62:2d:62:3c:b6:e0:99:84:c6:11:b6:51:34:
                    44:7c:12:b2:26:c4:0f:27:84:ae:80:33:54:37:98:
                    0c:25:c9:a7:fc:2b:44:f5:09:c9:ae:8a:01:dd:2f:
                    6d:d4:dc:11:aa:cf:c5:db:7c:96:4e:76:24:03:a1:
                    ed:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:88:9A:5E:E2:8D:7F:E5:ED:DF:D8:BB:12:08:5B:75:CC:48:CD:5C
            X509v3 Authority Key Identifier:
                keyid:45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:5c:09:e0:8e:35:c0:01:63:d9:7f:9a:8b:4a:95:ad:fe:14:
         17:47:eb:e2:a9:95:cd:27:63:e7:34:65:05:d4:5a:a7:24:da:
         98:bb:77:e2:8b:7f:24:ac:15:31:ae:e8:9b:0e:c7:d7:2b:97:
         c1:00:19:a5:ed:7f:46:7b:c3:d6:69:8a:0b:6b:e8:3c:ca:2a:
         26:1e:ae:d6:8b:67:41:f4:69:48:1d:3f:65:05:6a:0e:b0:44:
         0b:0c:f4:2e:84:f3:7f:fb:f7:59:26:e1:32:3b:2d:ce:89:40:
         e3:70:f8:19:ba:1e:c0:2d:64:d7:79:3e:dd:d5:86:28:ab:b7:
         9a:5f:a0:7c:23:58:28:a6:ca:8b:a9:41:b7:98:af:1c:35:aa:
         2c:80:97:24:95:4d:1f:9a:a9:54:9a:45:e1:02:5e:b9:91:61:
         0d:63:66:c1:35:8f:f6:49:97:07:dc:e7:3b:43:ca:d1:bd:77:
         ac:23:92:77:33:d7:01:a2:4d:f1:5c:67:5b:33:b8:a6:b2:e0:
         a2:da:e9:bd:41:a9:4c:7e:b0:55:41:09:df:d1:e3:15:82:cc:
         6c:29:af:3f:ee:46:33:d3:6c:9a:e0:9b:7b:77:0b:d1:0c:0f:
         66:67:7a:ad:2b:14:41:e4:92:69:9e:99:71:5a:26:0e:73:3d:
         32:4d:e9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:07:21 2026 by rpki-client