Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
File:                     sA4l9V67rLBp8QOssIZnA4Nc_M0.mft (raw, json)
Hash identifier:          +Z7S5Q0HvQGwe8RfqqGyaF9Tnz7niWilToVM+8GShmY=
Subject key identifier:   47:40:0C:B6:73:FE:0C:84:5F:16:D8:9E:F6:13:68:CB:A3:64:14:98
Authority key identifier: B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD
Certificate issuer:       /CN=b00e25f55ebbacb069f103acb0866703835cfccd
Certificate serial:       019E9C2A4352546ED698C22D1B8532CD047D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
Manifest number:          1554
Signing time:             Sat 06 Jun 2026 09:01:15 +0000
Manifest this update:     Sat 06 Jun 2026 09:01:15 +0000
Manifest next update:     Sun 07 Jun 2026 09:01:15 +0000
Files and hashes:         1: IxO99c5pFhRvUksjCk8RGNZdHys.roa (hash: axX2zCX5EaVP+cgNK0AwafDUwd4UVfumU6doP/6YeJg=)
                          2: sA4l9V67rLBp8QOssIZnA4Nc_M0.crl (hash: NvhOGul8jwUzqnbd+XhN2zB3xSm3yQf/Be9eq2ga06Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 09:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9c:2a:43:52:54:6e:d6:98:c2:2d:1b:85:32:cd:04:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b00e25f55ebbacb069f103acb0866703835cfccd
        Validity
            Not Before: Jun  6 09:01:15 2026 GMT
            Not After : Jun  7 09:01:15 2026 GMT
        Subject: CN=47400cb673fe0c845f16d89ef61368cba3641498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:90:fe:38:e2:41:84:64:45:89:89:7b:0c:ab:
                    6d:58:ec:8b:7d:57:a9:5e:51:16:4e:89:b3:ff:3d:
                    c3:b0:9b:dc:d6:f7:20:20:81:e6:73:8a:4b:a8:a6:
                    f9:3b:36:c0:1f:0c:94:14:5a:db:24:d8:57:19:24:
                    de:59:3b:42:09:38:25:6c:06:d2:58:19:f3:d3:db:
                    79:05:53:31:ab:34:8e:79:35:e4:41:a2:5b:5d:85:
                    ee:10:9d:77:0a:92:8f:07:c6:37:72:a8:7d:5c:d5:
                    60:1b:00:62:21:51:62:48:31:74:ba:87:d5:cc:2b:
                    ba:32:f8:54:a7:79:73:ce:4b:5c:ee:11:7b:fb:fe:
                    31:36:04:61:c7:ad:60:24:d3:bf:c4:32:64:20:be:
                    bd:03:d3:eb:17:1a:13:2b:5c:50:35:34:9f:91:93:
                    0b:e8:c5:66:2a:c2:a6:88:d0:3e:80:d2:28:e4:f6:
                    ac:8d:e0:7f:d2:75:3a:a7:15:ab:2d:9b:9d:2d:62:
                    6e:06:26:c6:bc:c0:56:86:99:78:c0:08:73:df:56:
                    fa:76:dd:68:d3:f4:25:69:d0:4f:38:a5:e7:72:5b:
                    f7:7a:a1:3b:4f:1b:49:57:71:f4:33:b7:1c:0e:42:
                    f1:ca:5c:79:b7:18:c3:72:66:16:6c:ef:7f:4f:6a:
                    f5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:40:0C:B6:73:FE:0C:84:5F:16:D8:9E:F6:13:68:CB:A3:64:14:98
            X509v3 Authority Key Identifier:
                keyid:B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:aa:5b:e4:f6:12:e4:5e:a7:7a:d8:df:f4:e7:66:37:f6:1d:
         62:87:d8:da:5d:9f:c2:e0:bc:85:f0:ab:3a:fd:e7:c5:85:c3:
         b7:e5:92:94:77:03:ea:f1:66:fe:d9:e0:c2:92:92:12:c3:57:
         1a:f3:5c:01:06:27:0d:d0:78:3b:67:a1:3e:ee:9b:f8:e0:2c:
         b7:48:4c:54:69:5c:86:87:40:ab:38:9d:95:50:da:f4:e7:bc:
         2b:9f:49:c0:0b:89:95:d3:1d:c4:2f:bf:47:ad:a4:6a:d9:54:
         c4:4e:b4:cf:57:83:3a:82:93:08:e5:4c:3e:99:f0:72:8b:b0:
         aa:27:9b:b3:4a:b1:74:6b:f4:2d:3e:15:25:84:01:15:bd:81:
         b6:28:69:fa:92:64:e0:11:d3:89:93:38:a9:c5:ca:89:18:60:
         94:d0:14:ec:06:39:45:52:6d:5f:ce:e0:cf:55:d4:88:09:50:
         3d:49:50:b1:f8:99:e7:3b:21:5b:aa:98:ec:85:18:21:0e:eb:
         3d:53:13:26:7c:bd:4b:93:8b:b7:48:4b:af:f4:83:2d:28:04:
         d0:80:c4:d4:39:cd:a5:ec:de:bb:88:b5:99:e7:c8:13:d4:fe:
         18:dd:97:7e:90:b0:b4:5e:a0:cf:7e:af:04:b9:05:c2:5a:65:
         43:c6:da:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 19:28:49 2026 by rpki-client