Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
File:                     AEp1iisKfpOKnw3uZCzsXkECdrU.mft (raw, json)
Hash identifier:          9J9qcg7RFDMm+fOq5vIghHeq/iN+cuQKP6esDDO9Plg=
Subject key identifier:   5C:DE:2C:70:80:AA:6D:8F:1A:42:18:9C:A7:38:EB:D7:D2:C2:B3:B9
Authority key identifier: 00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5
Certificate issuer:       /CN=004a758a2b0a7e938a9f0dee642cec5e410276b5
Certificate serial:       019E30E05AD40E852A0A446E5A250DD6EDDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
Manifest number:          0E7C
Signing time:             Sat 16 May 2026 13:01:09 +0000
Manifest this update:     Sat 16 May 2026 13:01:09 +0000
Manifest next update:     Sun 17 May 2026 13:01:09 +0000
Files and hashes:         1: AEp1iisKfpOKnw3uZCzsXkECdrU.crl (hash: rjtd4aucnhG/LldFPlqAljwi6CrA2WGLrWN1EOILcbg=)
                          2: KQvSjqYh8xEH5jGSoTapmYBK1v8.roa (hash: oIhjbUQtq0h2T8RoAxHLxlxqfimGaBYyqjdqBzIaXjs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:5a:d4:0e:85:2a:0a:44:6e:5a:25:0d:d6:ed:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004a758a2b0a7e938a9f0dee642cec5e410276b5
        Validity
            Not Before: May 16 13:01:09 2026 GMT
            Not After : May 17 13:01:09 2026 GMT
        Subject: CN=5cde2c7080aa6d8f1a42189ca738ebd7d2c2b3b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:55:94:ce:64:58:e1:5f:90:6e:f6:3c:25:ab:
                    82:f3:6e:62:60:a3:68:11:a9:70:45:76:5f:c5:ab:
                    d0:ec:0e:17:90:71:55:5f:18:38:20:2e:98:dc:7d:
                    e9:c6:f7:29:bb:fb:08:e7:4e:f8:49:68:0f:23:e8:
                    50:73:a3:53:69:75:0a:94:25:22:29:4f:a5:9d:a7:
                    41:c6:f0:4f:48:a3:ae:1e:60:d1:ac:7d:a5:ea:19:
                    1c:75:74:9c:ef:95:71:ef:ce:99:cb:9e:7b:9e:b3:
                    1d:4c:91:b9:9d:71:79:e7:70:4c:20:59:fa:24:2c:
                    e6:04:2a:23:92:9f:56:b3:03:2b:a0:fa:3c:09:f8:
                    5f:24:b9:97:f2:78:7e:d0:b0:c6:d2:84:e9:c2:74:
                    08:f9:86:79:9d:d3:1e:0c:13:e9:46:e6:2d:1e:cd:
                    3e:a0:3b:4b:15:bd:c9:8e:a4:f0:bb:d3:f9:0d:6d:
                    29:ee:b2:c1:53:6d:42:11:93:02:f3:d2:ee:1e:92:
                    ba:3f:f3:28:82:93:d2:da:64:9d:fa:b9:c2:e8:d7:
                    ab:74:3a:7a:74:21:8d:e7:36:c8:53:6a:8c:14:bd:
                    a2:28:da:b9:bd:58:b9:cd:b7:a7:54:9b:aa:93:b6:
                    8d:d7:41:14:e0:5b:4a:75:1e:14:a8:e4:18:ab:7c:
                    7c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:DE:2C:70:80:AA:6D:8F:1A:42:18:9C:A7:38:EB:D7:D2:C2:B3:B9
            X509v3 Authority Key Identifier:
                keyid:00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:ad:27:91:6e:be:0e:8a:95:ea:28:28:1d:d0:bd:64:49:1f:
         46:34:2c:c4:0f:48:d1:3d:04:ef:94:28:5c:44:2d:d0:5e:8b:
         4e:85:9b:94:67:3d:f9:89:23:a4:d5:f3:7b:55:47:a8:ca:5e:
         f1:8b:55:ab:c5:4b:95:5a:03:fe:85:cf:c4:35:56:af:6a:45:
         c2:5c:12:68:b7:b6:8d:f5:dc:83:e1:ab:b9:3f:2f:79:93:f8:
         85:a7:79:6b:56:09:27:a5:c8:e7:a7:02:83:40:34:b6:9f:15:
         28:cc:9c:7b:2c:48:ed:d1:a1:66:98:b7:12:5b:33:17:97:a3:
         09:aa:da:6d:db:a0:c0:a3:85:83:9a:64:5e:5d:45:0c:93:0f:
         3d:23:72:59:7c:4d:1e:e9:f8:7f:07:9d:b2:81:5f:e9:e1:ac:
         e2:52:2c:47:bc:75:d8:92:0d:98:85:a7:3a:c2:01:fb:e8:7d:
         10:59:ef:3d:75:37:2d:f8:f0:61:6d:85:7c:32:5c:31:81:1b:
         b4:82:f1:6b:12:e9:f8:9a:77:0e:9f:33:92:47:c0:a0:2c:2f:
         9c:1b:35:71:1d:7e:c1:b5:13:19:99:44:de:5c:1c:b8:5b:23:
         f1:a6:60:5a:11:14:ee:56:4d:58:d6:57:54:c3:68:f1:48:d1:
         5c:82:3a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:31 2026 by rpki-client