Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
File:                     15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft (raw, json)
Hash identifier:          9oKsYJO4Ysn+IxthoB7UFsZbwxKCpu4qs377F3qB+6o=
Subject key identifier:   81:29:B2:BD:DE:A9:7D:31:20:E6:29:47:B8:B2:56:A6:42:10:09:09
Authority key identifier: D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC
Certificate issuer:       /CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
Certificate serial:       019E2F9660E22F54F63969F542B9E760D5DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
Manifest number:          1099
Signing time:             Sat 16 May 2026 07:00:44 +0000
Manifest this update:     Sat 16 May 2026 07:00:44 +0000
Manifest next update:     Sun 17 May 2026 07:00:44 +0000
Files and hashes:         1: 15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl (hash: VzjdvKamHrWcSLIVF3tbb5pYE4SdVctvsEZIaxqhbWs=)
                          2: ZHDfzOd0Vs1cFH4Cds3NQzXm5e0.roa (hash: b2Z3qDf5qe3MjesJLnqAMi8pQaoBZLbH5mVHFy7vu6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:96:60:e2:2f:54:f6:39:69:f5:42:b9:e7:60:d5:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
        Validity
            Not Before: May 16 07:00:44 2026 GMT
            Not After : May 17 07:00:44 2026 GMT
        Subject: CN=8129b2bddea97d3120e62947b8b256a642100909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:89:46:04:b8:a7:84:68:f3:05:8d:0d:4a:17:
                    32:1d:13:e1:60:5c:dd:2d:a2:6b:91:67:90:a9:1d:
                    8c:db:fa:6e:e8:ff:90:1d:10:4c:07:ec:49:7f:57:
                    0b:33:9c:a2:b1:3c:b1:5e:bb:bc:4c:8b:14:4c:ba:
                    41:9e:b3:78:ab:54:4a:11:24:88:60:61:a9:01:e5:
                    24:51:7d:18:9c:bc:2d:09:fa:68:55:38:a2:58:8a:
                    e1:ba:14:7a:7b:31:4a:1d:cb:d8:e7:8a:45:af:c1:
                    e5:12:4f:82:b0:0a:3a:60:df:69:af:a8:4c:c8:62:
                    21:68:07:04:8a:9c:c6:d7:b8:60:3c:27:5e:5f:b0:
                    0d:18:78:31:8e:c4:9b:2f:93:8c:75:f7:dd:ce:53:
                    60:ce:1a:fc:f0:4e:8a:dc:3f:6d:3d:da:23:fa:cf:
                    f6:1d:71:e9:e6:7f:8c:1a:d4:1a:7c:f4:24:ef:ca:
                    11:f8:81:ff:90:bd:c0:2f:80:45:25:69:38:d7:02:
                    59:04:c4:49:54:b0:3e:49:1b:9b:cc:7a:3a:53:97:
                    57:79:4f:d2:04:b6:50:1b:fd:e8:e3:e5:7d:a5:70:
                    43:1b:53:3d:35:5e:b9:b0:48:99:57:24:b6:4d:8e:
                    a7:97:96:b2:23:9a:0a:f1:42:2d:1f:f4:89:99:95:
                    30:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:29:B2:BD:DE:A9:7D:31:20:E6:29:47:B8:B2:56:A6:42:10:09:09
            X509v3 Authority Key Identifier:
                keyid:D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:c2:59:50:cc:6f:54:1b:35:12:53:2f:39:45:33:c8:65:b5:
         90:48:e6:ab:e2:d0:59:46:c2:4e:8d:5c:5c:57:80:5d:db:eb:
         25:f4:b4:3d:64:31:d9:17:d2:7d:7b:eb:d0:74:ab:19:4d:e4:
         0e:25:fb:b9:5b:15:0e:12:90:43:5a:74:06:6f:02:4c:72:3f:
         9a:f3:89:b5:28:4f:f6:7b:3c:64:1d:31:30:dd:2c:01:21:dc:
         37:3e:49:78:05:2a:2e:0e:15:4e:c2:fb:8d:46:2a:0a:9f:ee:
         6b:23:54:b1:94:09:c5:43:93:61:1d:a9:52:ea:5f:7b:6f:3d:
         2b:18:2d:eb:b7:aa:66:43:e3:f2:2d:b8:80:2d:c0:b2:07:16:
         b8:a0:21:e7:67:14:c4:83:00:71:4f:bb:c0:c5:21:52:52:f1:
         a4:cb:8c:93:e3:ef:17:10:09:91:99:12:5b:d8:db:98:b5:06:
         0f:4f:78:e8:04:73:49:17:4c:13:cd:14:fd:02:ef:b1:37:95:
         a9:e6:61:94:39:0a:c5:ac:51:f2:4d:df:9f:a1:82:10:99:c0:
         4b:e4:3a:d7:39:16:5d:29:a2:e7:46:8b:40:61:aa:03:66:a2:
         20:6a:b7:79:b8:86:82:d9:25:ae:3a:6d:29:cc:b5:1d:31:4e:
         0e:6b:e6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:30 2026 by rpki-client