Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
File:                     1wYe6H9bVfGQOis3BOuglEqwxaw.mft (raw, json)
Hash identifier:          gQIiSQYDa2CXsz5kmWvCG17WhenQeG9xaIiBLn8ZokM=
Subject key identifier:   02:DF:D0:6D:9C:A0:66:23:69:15:10:A7:F8:7C:55:7F:6D:10:ED:32
Authority key identifier: D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC
Certificate issuer:       /CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac
Certificate serial:       019E30A8FEF548854CAC02FC41C26370B820
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
Manifest number:          1529
Signing time:             Sat 16 May 2026 12:00:42 +0000
Manifest this update:     Sat 16 May 2026 12:00:42 +0000
Manifest next update:     Sun 17 May 2026 12:00:42 +0000
Files and hashes:         1: 1wYe6H9bVfGQOis3BOuglEqwxaw.crl (hash: hcpMaoCNhC4gZW3DZlp8uEpp6MLG9jY7nrCuT4W3XPE=)
                          2: qRy6ONe0R3SK-tgWlZzQz3yXI-8.roa (hash: 2lNtTexaTuQ64Sk2B9hHpKofwKN/Vg7RcO43ReydSmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a8:fe:f5:48:85:4c:ac:02:fc:41:c2:63:70:b8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac
        Validity
            Not Before: May 16 12:00:42 2026 GMT
            Not After : May 17 12:00:42 2026 GMT
        Subject: CN=02dfd06d9ca06623691510a7f87c557f6d10ed32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:85:55:25:8d:cc:9f:dc:da:a3:51:5c:2a:6c:
                    e9:eb:64:68:1d:d9:70:e2:ee:84:d4:8b:ce:06:44:
                    36:c3:d9:7c:d8:05:e7:9e:b0:63:df:63:5a:61:e9:
                    55:2d:b9:67:b0:7b:60:4d:ac:4d:c4:f3:d3:cf:64:
                    69:a6:eb:7b:9d:54:f7:84:2e:ba:e4:09:3b:ee:e0:
                    34:d4:a4:6d:57:19:2a:7b:c0:79:4c:91:e3:23:1c:
                    5f:0b:ca:91:92:fb:0d:8a:fa:63:9a:3f:18:13:45:
                    ea:f4:35:05:26:27:71:df:c2:be:6f:18:19:e9:2f:
                    30:3c:74:91:ce:9c:94:34:2b:f4:3f:bc:45:f6:a4:
                    2e:1d:dd:1b:61:7d:f6:50:3d:b6:4c:e7:96:d6:3d:
                    b7:0c:c5:5d:44:1c:9f:e0:22:2f:14:a4:45:a7:79:
                    72:f3:2c:17:14:fd:2b:11:fb:70:a7:5e:62:c1:f0:
                    8b:96:7b:07:55:de:b0:f9:14:b4:83:b4:b7:fa:c6:
                    1c:d0:c8:6a:57:36:f0:2c:a9:99:2e:00:b8:4e:16:
                    db:1b:02:78:cd:4a:5e:88:48:7a:2f:13:32:53:3a:
                    67:e8:22:74:3d:d4:60:f4:27:81:a3:f0:41:1a:03:
                    c9:ae:4c:59:97:3f:81:e8:1e:26:f9:06:e3:14:98:
                    59:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:DF:D0:6D:9C:A0:66:23:69:15:10:A7:F8:7C:55:7F:6D:10:ED:32
            X509v3 Authority Key Identifier:
                keyid:D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:68:31:28:9e:83:1b:bf:88:6d:25:2e:b2:41:ec:c9:d9:28:
         0e:cd:68:78:bd:57:26:6d:3a:cc:1d:17:63:4c:da:c5:e7:c8:
         b0:3c:59:df:c4:bd:c3:fb:63:87:61:bd:b0:72:f2:1e:21:ea:
         46:91:85:b4:00:ee:ec:e3:73:d1:96:00:3c:11:78:82:f5:33:
         91:1c:12:ef:8b:df:e0:72:99:6e:dc:1f:65:b8:64:8f:d4:d8:
         8a:8b:80:03:60:86:4a:fa:7f:70:89:4a:c7:01:53:73:23:35:
         cf:13:55:26:36:da:58:3c:5d:ef:8c:b1:d8:d7:9b:68:cd:dd:
         09:f0:e8:9a:65:2d:4c:3e:b0:92:fa:ee:f7:fe:dd:e0:18:16:
         a3:df:a1:c7:56:04:09:9d:d4:92:e4:6d:20:2d:2c:e9:2f:87:
         3d:48:69:79:2f:c5:ec:0d:ac:a2:cb:e6:1a:21:0d:a4:73:86:
         96:97:e0:14:ab:f1:10:d5:93:bc:08:23:ab:46:ed:05:aa:5b:
         e8:18:30:a3:eb:08:47:21:c8:bf:ef:69:8c:7b:6a:50:22:bf:
         31:4e:66:9e:64:e0:42:f8:15:17:5f:94:34:47:a3:a8:eb:73:
         fa:f7:58:3e:de:45:2b:68:40:b2:61:3e:f5:57:83:86:68:3e:
         4a:1a:e6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:26:51 2026 by rpki-client