Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
File:                     1tcoXpK3QC6V29onv773Go4ifNQ.mft (raw, json)
Hash identifier:          aZ9iNKHfS2Nyi8d5GOzCBC7npStCoqUeTAKma/nFtiA=
Subject key identifier:   71:83:87:FE:C4:18:8A:45:83:F7:73:A9:33:6E:39:F1:D4:1D:D1:63
Authority key identifier: D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4
Certificate issuer:       /CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4
Certificate serial:       019E295DBEE31CD3F206BD222F0AD524C613
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
Manifest number:          01C3
Signing time:             Fri 15 May 2026 02:01:09 +0000
Manifest this update:     Fri 15 May 2026 02:01:09 +0000
Manifest next update:     Sat 16 May 2026 02:01:09 +0000
Files and hashes:         1: 1tcoXpK3QC6V29onv773Go4ifNQ.crl (hash: iRlKPX4tXDwHP2gsm6xAOk25KrSwg9gpRbHvenbk4ic=)
                          2: vWSFnkCnudPRUzfioP_sQ99MW24.roa (hash: fa/7H1d1MQOMBd0ZSP/HYbqe7w6JGnLpzf7w6NJUnOE=)
                          3: ylydL3qXftFW7Uij6tIt41OMzD8.asa (hash: WkGPoaULmCIO7XY8Ndhcz75a3abt6wk2tMgYPdwb3B0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:5d:be:e3:1c:d3:f2:06:bd:22:2f:0a:d5:24:c6:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4
        Validity
            Not Before: May 15 02:01:09 2026 GMT
            Not After : May 16 02:01:09 2026 GMT
        Subject: CN=718387fec4188a4583f773a9336e39f1d41dd163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c0:b2:5d:9f:a4:b4:8e:b3:1d:f3:37:61:75:
                    16:8c:c3:e4:32:75:76:59:bd:e9:9b:0d:ed:90:1d:
                    9e:9f:d3:9b:bf:c6:82:67:d8:6a:f7:0d:3a:e6:1d:
                    55:db:67:f0:0d:03:bf:7e:59:66:e2:ae:da:e1:38:
                    fc:81:12:b5:ac:a3:01:5e:b3:20:88:12:46:3e:86:
                    e0:04:7b:9e:d2:4b:9c:c0:79:6d:f2:64:26:5c:c1:
                    16:07:d2:aa:db:ba:71:33:d1:4d:28:f4:89:90:3d:
                    83:3c:ed:5c:bc:7c:20:6d:9e:58:8a:77:1f:21:5a:
                    75:63:5f:d9:27:19:c1:c0:de:74:74:37:62:8c:b7:
                    bb:f9:8b:d2:0d:4d:0f:05:f7:99:c5:6e:63:cd:53:
                    ea:b1:fe:43:3b:63:08:53:3a:a6:3a:02:7f:f4:ea:
                    35:b9:46:e1:dd:a1:77:4b:e6:8f:33:49:b4:77:0e:
                    bf:7d:2c:c9:43:0f:56:23:03:46:bc:02:38:50:93:
                    da:3f:6a:60:a7:1d:d0:81:a7:de:4d:3c:ff:3f:ab:
                    80:9a:06:c1:e6:78:a1:ed:14:dd:a1:e3:4d:f6:11:
                    3a:5f:95:b6:9b:46:bb:cf:aa:65:ee:14:00:26:f0:
                    27:7f:6c:be:56:5f:12:1b:3f:ae:bc:51:02:e8:01:
                    ef:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:83:87:FE:C4:18:8A:45:83:F7:73:A9:33:6E:39:F1:D4:1D:D1:63
            X509v3 Authority Key Identifier:
                keyid:D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:bf:0a:6d:14:06:4b:ed:69:9e:f2:71:a0:88:cc:08:43:e8:
         5b:e0:09:2e:d2:84:c7:29:9b:42:8b:b5:9f:63:e1:69:93:44:
         50:f2:30:e5:15:12:4d:5a:51:57:d0:d8:83:ea:8a:65:eb:b4:
         65:88:b0:e6:34:32:2d:53:a4:b1:66:d3:4c:a5:f0:b6:97:ca:
         ed:a9:e2:86:58:b3:da:e7:96:e1:8b:35:4e:38:9f:03:b6:dd:
         8b:d6:cf:f1:4c:00:c5:3e:e2:69:9d:6b:20:76:dc:cf:5e:a9:
         99:8d:b0:e3:ac:01:a6:b9:9d:6a:10:d5:17:8b:72:f3:66:51:
         d0:fa:68:31:25:dc:5c:c7:51:f0:d2:6a:66:6f:a5:ab:f8:96:
         fc:3f:9c:17:c2:81:24:b6:78:c2:16:ec:35:60:d9:58:88:5e:
         70:50:c4:c6:9f:98:21:13:ce:a4:48:89:fc:16:fe:61:63:1d:
         42:31:89:92:de:c3:ef:67:b2:88:f1:1a:b4:53:f8:ce:51:d4:
         19:09:b1:b4:df:fe:91:8a:74:1b:69:90:49:db:1f:73:57:a1:
         b6:9b:c3:ba:9c:ad:ce:89:71:2b:ba:f6:6c:7e:d9:38:1c:31:
         61:f5:57:08:80:28:ce:14:b6:40:7d:e1:a6:a2:31:b1:d0:72:
         93:33:bb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:57:03 2026 by rpki-client