Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.mft
File:                     1V05IYUKX_8H7KJgo275IQHy2Fw.mft (raw, json)
Hash identifier:          wDmwi44RWH5HhbbUc/m/YqTo5TWOvEyA+cmHsCnlFy4=
Subject key identifier:   45:E7:37:43:B7:54:4D:75:B6:A4:D1:65:97:83:09:66:D2:E2:84:7A
Authority key identifier: D5:5D:39:21:85:0A:5F:FF:07:EC:A2:60:A3:6E:F9:21:01:F2:D8:5C
Certificate issuer:       /CN=d55d3921850a5fff07eca260a36ef92101f2d85c
Certificate serial:       019E303B4AE245DFAAC54479ED4884697C38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1V05IYUKX_8H7KJgo275IQHy2Fw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.mft
Manifest number:          130A
Signing time:             Sat 16 May 2026 10:00:52 +0000
Manifest this update:     Sat 16 May 2026 10:00:52 +0000
Manifest next update:     Sun 17 May 2026 10:00:52 +0000
Files and hashes:         1: 1V05IYUKX_8H7KJgo275IQHy2Fw.crl (hash: V0NA30LRw2rCBcvMR2rVAThr/s6R8LbtsDKg8jVAuFY=)
                          2: icdH-LJXbo2xaSAjuAjUfjqOQ0Y.roa (hash: oPFP3MCPVdDHLd6BStfD/RkJTA6ZSTAQ6B6cIgyyspY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1V05IYUKX_8H7KJgo275IQHy2Fw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:4a:e2:45:df:aa:c5:44:79:ed:48:84:69:7c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d55d3921850a5fff07eca260a36ef92101f2d85c
        Validity
            Not Before: May 16 10:00:52 2026 GMT
            Not After : May 17 10:00:52 2026 GMT
        Subject: CN=45e73743b7544d75b6a4d16597830966d2e2847a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:95:93:73:f6:f2:95:3a:64:4b:57:1b:6a:10:
                    c6:79:de:6c:19:8c:fd:73:10:c3:11:c3:1d:08:c2:
                    92:37:bd:4a:2e:2b:85:38:4b:e4:82:20:06:97:be:
                    d4:6d:43:e5:23:92:66:99:27:25:d5:e0:fc:bd:16:
                    a4:c5:78:57:98:06:fe:6c:93:5b:76:59:e0:a8:08:
                    24:f7:c7:1d:f9:d6:b8:15:08:b8:87:71:a3:2e:ff:
                    e0:1e:20:ff:c4:db:48:85:6b:22:1f:7e:85:aa:37:
                    e7:f7:6f:e1:09:84:9f:f9:f0:26:63:7f:c1:59:c1:
                    dc:47:4a:b5:c4:95:26:ce:c4:ef:90:35:35:50:39:
                    b1:f5:7b:64:8c:82:1f:ad:de:53:b7:7d:bb:9b:27:
                    85:4c:1a:58:9c:3d:be:8a:29:b9:d5:43:0f:2f:fb:
                    80:d8:d2:13:ab:9b:1b:4b:04:bb:d3:2c:36:db:f1:
                    3f:79:40:e7:94:f9:a3:43:e7:a8:77:30:86:ae:cb:
                    0b:ad:a7:19:e5:04:77:4d:63:13:72:61:18:90:70:
                    69:dc:1c:d2:ae:56:da:9b:a4:c8:10:f9:1e:e0:b1:
                    34:62:24:f8:05:30:e2:c7:97:38:74:46:7b:3a:d9:
                    a9:c0:98:17:f0:63:fb:26:bd:33:a5:c6:ed:8d:01:
                    93:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E7:37:43:B7:54:4D:75:B6:A4:D1:65:97:83:09:66:D2:E2:84:7A
            X509v3 Authority Key Identifier:
                keyid:D5:5D:39:21:85:0A:5F:FF:07:EC:A2:60:A3:6E:F9:21:01:F2:D8:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1V05IYUKX_8H7KJgo275IQHy2Fw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:7a:c0:87:fc:05:bb:7c:bf:23:be:ef:7c:9c:aa:9b:aa:0c:
         1e:c8:c1:9c:76:f3:42:fa:58:ca:6a:f2:c3:a6:dd:34:01:f0:
         03:f2:d3:6b:73:d6:de:32:59:89:3c:42:3e:84:d8:07:d2:b7:
         0b:13:1b:6c:d2:20:bc:12:5b:cb:c7:b4:bb:44:75:1c:ad:6b:
         af:3a:33:83:3c:0b:79:33:d5:6d:59:f9:9e:e5:5f:d3:6f:39:
         9b:8e:cc:22:78:b1:92:38:ef:72:76:18:68:7a:22:83:4f:d5:
         46:0f:2d:2f:d6:b6:1d:ed:8c:b6:a0:57:9f:20:67:8c:07:3b:
         72:b9:46:76:63:f3:cd:69:ba:3f:c0:26:22:d6:5e:fe:58:12:
         2f:34:c6:cc:8f:92:48:bb:eb:d5:3a:08:b8:38:8c:c0:3f:55:
         d9:27:1c:25:1d:1b:8d:67:89:41:2a:1c:ab:0e:05:7e:13:9a:
         da:43:a8:f5:43:bf:b1:a7:82:6e:1e:30:97:51:7b:96:ad:ca:
         ee:9e:29:a5:77:b0:ca:1c:02:b6:b8:b0:0d:7b:b2:d1:ee:ce:
         08:1d:fd:da:62:ef:f9:b4:1c:bf:f2:fa:29:47:79:9d:42:eb:
         bd:71:55:34:86:3f:c0:3b:82:8c:86:47:03:81:f4:39:ca:2e:
         d6:9a:18:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:14:11 2026 by rpki-client