Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
File:                     _5JbpaQQRnlkY0z_SvrXelbaRyI.mft (raw, json)
Hash identifier:          +n+CLDRR7yBRf+QtiBM/7lYKy7FzcMpl4cZEC95sJ4w=
Subject key identifier:   EE:E2:32:46:7E:5D:7A:29:43:2B:39:F9:8C:66:68:79:88:6E:A0:5F
Authority key identifier: FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22
Certificate issuer:       /CN=ff925ba5a410467964634cff4afad77a56da4722
Certificate serial:       019E3185ADAB4352C7ED2776D0C3699CC4F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
Manifest number:          07A1
Signing time:             Sat 16 May 2026 16:01:44 +0000
Manifest this update:     Sat 16 May 2026 16:01:44 +0000
Manifest next update:     Sun 17 May 2026 16:01:44 +0000
Files and hashes:         1: 2l3jy0ks1GMTVrjjYXvE6dhr2UM.roa (hash: L4oxBugG8SBzHeTSIckApzq3w111E1/nbM2VYS8YHuw=)
                          2: _5JbpaQQRnlkY0z_SvrXelbaRyI.crl (hash: WgNGurReoWxJL++oyZz+hJRUJlzzEBRHqM825raO8Pw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:85:ad:ab:43:52:c7:ed:27:76:d0:c3:69:9c:c4:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff925ba5a410467964634cff4afad77a56da4722
        Validity
            Not Before: May 16 16:01:44 2026 GMT
            Not After : May 17 16:01:44 2026 GMT
        Subject: CN=eee232467e5d7a29432b39f98c666879886ea05f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:47:73:c3:d8:b9:e4:d2:40:35:40:44:f0:ea:
                    61:da:19:56:57:74:a5:f4:9f:44:12:2c:65:21:01:
                    5a:13:c6:87:2e:a4:96:ae:a2:47:8f:f1:c4:fd:f9:
                    a4:0b:a3:58:b3:cd:b7:31:64:c9:67:33:02:e5:8f:
                    53:24:93:81:1d:4e:d8:f1:85:f6:c4:d0:42:f6:16:
                    da:e9:09:c0:48:7f:00:ca:ed:81:41:41:75:d6:13:
                    74:0d:3a:a3:b8:13:12:92:4a:d6:ad:55:2f:8a:3d:
                    f7:bd:24:74:f7:f9:ec:c5:db:85:03:db:36:1d:38:
                    fb:8e:6e:cd:b6:37:30:b6:17:a6:fa:56:c6:7f:71:
                    c7:02:d3:d7:68:b0:64:a4:a4:7a:ee:70:53:14:3b:
                    f3:c3:e6:ce:a6:a2:d5:f2:cc:b8:68:38:cf:3c:88:
                    52:b2:66:b5:c6:f6:79:3d:0a:41:01:c4:d2:3a:7d:
                    8b:59:d7:04:0a:ae:eb:b4:a5:dd:4b:20:d8:08:b3:
                    ab:0a:17:cc:dd:c1:35:5f:d2:5f:bd:1f:8b:d4:46:
                    47:65:6d:36:2d:b8:8e:fd:5a:c5:84:41:0c:e4:7b:
                    60:ce:8d:5f:f0:16:1e:20:2c:12:19:71:af:2f:48:
                    e1:25:2e:d6:4e:5a:2e:71:2d:3e:90:0b:ed:f8:99:
                    b2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E2:32:46:7E:5D:7A:29:43:2B:39:F9:8C:66:68:79:88:6E:A0:5F
            X509v3 Authority Key Identifier:
                keyid:FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:a4:4d:8d:53:c0:0e:bb:9a:8a:73:37:66:9b:a1:a6:ef:4c:
         85:56:97:4e:07:5e:6b:8b:d8:b9:a8:57:d3:a5:eb:d1:1f:d3:
         4b:74:57:ff:44:40:3d:0a:32:55:5a:f3:de:47:b3:92:60:73:
         cb:4a:69:13:6d:32:89:77:d1:7e:79:91:ce:9e:6a:48:7e:19:
         f3:03:be:97:2a:88:86:8c:62:de:ce:10:99:16:a0:c6:bc:3b:
         27:31:63:a2:2e:9c:ac:4f:5d:a5:2b:49:8e:58:92:e2:8c:81:
         84:0b:95:28:5e:84:97:99:c1:68:a9:ea:60:c0:d3:2e:e5:24:
         79:c7:6f:85:2d:bd:62:ce:2d:be:72:3a:40:a5:ea:70:7b:65:
         5a:c8:aa:8e:a7:71:2d:ef:05:36:a3:52:ea:e1:1e:1f:e8:d2:
         36:1b:13:51:47:c5:19:17:f5:f8:71:cc:65:22:92:6d:6c:08:
         35:25:cc:1e:87:3a:89:30:df:d6:26:ae:72:e8:46:c3:c7:e6:
         96:02:0b:7e:bd:9b:da:78:7d:b0:8a:ef:af:3f:3b:fb:3e:d8:
         7f:9d:7d:f3:9b:86:56:ab:61:c3:ae:bf:93:05:a5:eb:31:a3:
         43:f7:de:31:14:34:31:3f:41:56:b8:25:54:ed:94:51:de:23:
         86:7a:1e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:19:46 2026 by rpki-client