Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
File:                     4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft (raw, json)
Hash identifier:          jbq+UrTaUdYGNSI5HREbWxhuo3qphteOFTpraIoBVpg=
Subject key identifier:   8D:B6:F2:7D:D2:51:D5:EA:9A:0F:E7:A9:63:F8:B9:10:10:14:D8:50
Authority key identifier: E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
Certificate issuer:       /CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Certificate serial:       019E2F5F54AF8E8CB588AE5B12AAA850F323
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
Manifest number:          140E
Signing time:             Sat 16 May 2026 06:00:37 +0000
Manifest this update:     Sat 16 May 2026 06:00:37 +0000
Manifest next update:     Sun 17 May 2026 06:00:37 +0000
Files and hashes:         1: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl (hash: vTb1T5GNJYsqzmR7+gAxnRvfJ2n4F//XDXu55GY2V38=)
                          2: 5BcZMkFK4H4HzeU32Pg9Et5_SQ8.roa (hash: yDr7OimE93R5A5WQDfIWvLQYnSnCYBj7r4S1yWKb1hg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 06:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:5f:54:af:8e:8c:b5:88:ae:5b:12:aa:a8:50:f3:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
        Validity
            Not Before: May 16 06:00:37 2026 GMT
            Not After : May 17 06:00:37 2026 GMT
        Subject: CN=8db6f27dd251d5ea9a0fe7a963f8b9101014d850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:12:a0:6c:11:f6:5d:02:de:2d:53:2e:f2:4f:
                    18:68:16:66:fc:84:e6:63:b5:04:82:7a:da:4a:98:
                    2b:77:33:06:0d:c6:09:43:c9:b1:59:9f:73:d7:b1:
                    ba:b7:ab:e9:69:9f:a5:90:39:cd:c8:e2:f4:c7:6a:
                    80:80:a0:dc:1c:6f:92:f1:a3:c0:c2:a9:3f:50:c0:
                    71:eb:49:96:19:9c:d0:14:1e:1d:85:4b:fa:35:2d:
                    88:0c:e4:4b:16:a5:02:de:34:e5:9d:b9:86:d0:77:
                    a8:12:f0:ce:84:78:0c:d1:95:88:29:de:9a:74:30:
                    9b:d1:5b:9d:bb:ab:fb:b6:c0:31:11:9b:0b:c4:32:
                    85:a1:33:f0:9c:6b:5f:2d:17:cd:b0:2e:2b:65:25:
                    7b:38:d3:50:d2:3b:cf:81:ef:23:cc:1e:bd:92:f2:
                    a4:3f:b7:ee:a9:a2:d1:21:65:c8:05:86:89:78:44:
                    0b:62:65:69:3a:2c:ec:5c:44:b5:f0:8b:a7:a0:4b:
                    28:a9:66:5a:0d:2b:c5:22:e4:b0:9d:59:13:81:ff:
                    83:16:44:c7:97:fb:37:ec:f0:f9:3e:98:8f:3c:c9:
                    37:39:81:d4:5e:f3:8b:e5:29:5e:b9:84:09:ae:d2:
                    91:dd:80:90:d5:64:fe:69:6e:43:47:13:d4:b2:f7:
                    ea:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B6:F2:7D:D2:51:D5:EA:9A:0F:E7:A9:63:F8:B9:10:10:14:D8:50
            X509v3 Authority Key Identifier:
                keyid:E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:60:53:d8:b3:f2:cf:d1:c5:12:25:34:31:30:ff:2c:92:4a:
         f9:10:2f:aa:8a:c2:33:4d:98:1d:6c:05:ad:80:da:f9:c0:54:
         40:7e:1d:4b:d8:22:3b:08:c1:c2:47:ff:25:08:cb:5d:1a:c2:
         d8:c1:71:60:b9:17:d3:70:d1:73:d6:3b:50:b9:18:ce:94:12:
         94:b7:82:40:47:58:5b:8b:af:26:ac:dd:09:16:02:65:6b:12:
         29:0a:f6:ec:00:3e:9c:55:f4:dc:0f:84:64:90:1c:29:9d:f0:
         a8:c3:f9:8b:d1:98:66:3e:6f:31:0f:10:63:e7:15:cd:be:2e:
         ba:65:6f:a6:d9:5b:52:7e:f8:e9:c4:f0:bc:60:ff:f9:dc:7c:
         c6:07:b1:20:ac:64:85:51:c3:57:78:48:c5:15:f1:24:07:75:
         ba:30:83:4d:ce:43:b2:e4:10:b6:1c:96:f3:f4:42:2a:21:1a:
         74:5a:99:0e:1b:3f:c3:0f:db:2c:6d:2b:dc:26:c9:4e:18:34:
         a0:1b:79:e2:ad:a2:41:08:b5:99:8b:49:c9:04:b5:80:61:0a:
         83:d8:bb:22:ef:36:da:7d:db:0c:d0:61:ef:f2:5a:32:e2:f5:
         8f:3f:f7:5c:79:3f:e8:1a:cc:ec:2c:85:78:37:d0:ec:7e:42:
         01:89:35:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:26:15 2026 by rpki-client