Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft
File:                     mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft (raw, json)
Hash identifier:          KxSsAAHoxZXBxzKgN56lmAn98CwgwEkmrsV17ci08Dc=
Subject key identifier:   E9:52:4A:85:B4:D9:AC:53:83:16:F2:FC:45:7A:6C:EA:38:AD:D0:E1
Authority key identifier: 98:8C:E6:E4:EE:09:EF:66:65:82:86:45:17:90:96:9D:7C:FF:E9:B9
Certificate issuer:       /CN=988ce6e4ee09ef66658286451790969d7cffe9b9
Certificate serial:       019E31857F9B935DBF0EBF406D9C0014B6B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft
Manifest number:          0100
Signing time:             Sat 16 May 2026 16:01:32 +0000
Manifest this update:     Sat 16 May 2026 16:01:32 +0000
Manifest next update:     Sun 17 May 2026 16:01:32 +0000
Files and hashes:         1: mIzm5O4J72ZlgoZFF5CWnXz_6bk.crl (hash: feBSdYCCCs7bepcIal0Sv0EjrrayyYxiXbC25R4fkzg=)
                          2: vQIQ0hujisLLaE0FdKyN-US-jgc.roa (hash: HcBf/lSh/0W+uCeeNUF1qjopHzD07ezacPSk6j+nXRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:85:7f:9b:93:5d:bf:0e:bf:40:6d:9c:00:14:b6:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=988ce6e4ee09ef66658286451790969d7cffe9b9
        Validity
            Not Before: May 16 16:01:32 2026 GMT
            Not After : May 17 16:01:32 2026 GMT
        Subject: CN=e9524a85b4d9ac538316f2fc457a6cea38add0e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:01:4b:d1:73:89:79:72:86:c2:ef:d6:f4:be:
                    8b:57:92:b8:0d:9f:62:20:57:72:3f:34:61:56:85:
                    95:49:f5:6f:89:14:9c:90:ef:36:ce:d0:a9:49:86:
                    e2:2d:03:c3:9e:83:9c:ea:ba:29:04:35:0b:dc:a7:
                    58:a1:1a:37:37:22:0e:df:92:2c:5b:b2:5f:69:a4:
                    d5:95:51:a2:6a:75:08:85:59:ca:63:53:b8:eb:dd:
                    b4:25:bf:a3:c7:8d:fe:cc:82:b3:a6:6e:ab:8f:50:
                    c9:01:61:51:5a:86:06:e1:fb:09:b9:04:03:e4:35:
                    97:ed:d8:a4:c7:e7:27:ad:f7:6f:84:16:80:af:94:
                    39:af:e7:ed:fd:a7:82:71:d5:d5:5a:70:b2:ef:be:
                    8f:4c:86:a4:0d:c7:4f:4c:86:8f:22:74:cb:a5:11:
                    94:a8:13:ee:b6:4d:16:a0:99:e8:cf:66:e5:f3:62:
                    d6:49:42:1e:13:a6:cb:6e:26:6b:48:7d:03:57:bc:
                    c6:6f:fa:c0:1e:3c:e8:53:06:23:53:5e:a6:1d:de:
                    79:7c:2b:f0:40:73:08:f8:aa:e7:73:3d:78:d1:94:
                    25:96:ad:ac:73:b6:1d:f2:21:19:28:3d:7b:8b:6c:
                    e1:14:5f:f7:4b:ff:ae:b2:18:37:43:c4:06:f0:bd:
                    83:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:52:4A:85:B4:D9:AC:53:83:16:F2:FC:45:7A:6C:EA:38:AD:D0:E1
            X509v3 Authority Key Identifier:
                keyid:98:8C:E6:E4:EE:09:EF:66:65:82:86:45:17:90:96:9D:7C:FF:E9:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:a2:22:4a:cf:aa:29:2d:14:6b:bb:2f:8a:0f:90:b0:a1:10:
         30:1e:18:69:7c:48:41:09:b5:4f:7a:5c:a3:5e:81:db:45:35:
         3f:58:e1:ec:11:1b:e3:5a:d2:81:b1:7d:1c:09:21:a3:f3:fc:
         be:30:87:ee:9a:13:07:bc:70:06:2c:28:d1:19:5c:41:5f:eb:
         fa:65:e4:4e:14:1e:a4:1e:03:64:0d:84:0f:97:1e:da:a6:8e:
         96:0f:66:21:9c:f8:5f:25:82:7a:7e:5b:ca:41:89:b3:27:fd:
         60:b3:03:49:12:e9:af:75:93:7d:06:3d:c2:40:b3:d1:1f:8a:
         12:5a:3e:39:12:a0:b7:4a:2b:00:c9:14:da:81:61:b6:50:2a:
         82:a9:ad:49:94:f7:3b:32:b9:0b:9d:cc:cd:da:10:4a:92:28:
         ca:9d:ab:6e:1d:2d:f8:b9:74:39:71:38:fe:e4:88:c9:79:a9:
         f2:d7:a6:41:3c:9c:38:04:5e:21:e8:bd:77:93:13:dc:3e:c8:
         e0:e6:c5:6a:cc:52:4a:0d:c9:bf:c6:8b:78:c7:d5:f1:91:34:
         0b:8f:14:84:e9:4c:a0:ba:30:4e:d2:b9:a8:69:55:d5:c5:41:
         27:8e:55:66:6b:e3:f0:af:7e:91:27:ee:be:0a:1b:a0:ee:e1:
         f9:0c:0e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 00:28:02 2026 by rpki-client