Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
File:                     dPgamLSHAgyYEF1jE7zWneUKwXs.mft (raw, json)
Hash identifier:          i4ahpjgZ0IngRXrenp5xWzDE0msUFxEKukEUD5PNc9E=
Subject key identifier:   BB:82:B5:4C:58:F2:C9:A7:4A:54:B5:FD:AC:D0:04:7A:B3:EB:91:6B
Authority key identifier: 74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B
Certificate issuer:       /CN=74f81a98b487020c98105d6313bcd69de50ac17b
Certificate serial:       019E3297B2E5E1098832870FCAC3BE0CE78C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
Manifest number:          055A
Signing time:             Sat 16 May 2026 21:01:02 +0000
Manifest this update:     Sat 16 May 2026 21:01:02 +0000
Manifest next update:     Sun 17 May 2026 21:01:02 +0000
Files and hashes:         1: dPgamLSHAgyYEF1jE7zWneUKwXs.crl (hash: NbUizm8iDTaVAsNjxzFngiSOsNRX41pb40yCh/XLtxE=)
                          2: g-cs4KCZKYLgUr-tN_UtNttNg5M.roa (hash: Si0dRFIGYFzZ10R6i6ARJVkpSXUEGLL2gkuxXEnez48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:97:b2:e5:e1:09:88:32:87:0f:ca:c3:be:0c:e7:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f81a98b487020c98105d6313bcd69de50ac17b
        Validity
            Not Before: May 16 21:01:02 2026 GMT
            Not After : May 17 21:01:02 2026 GMT
        Subject: CN=bb82b54c58f2c9a74a54b5fdacd0047ab3eb916b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e8:46:b9:46:24:9d:a0:f6:be:aa:17:4e:4a:
                    da:f6:7f:58:51:e1:b0:a4:22:aa:00:a8:55:cf:e3:
                    88:96:7e:9a:4b:f9:e4:39:64:f2:20:aa:a5:d3:38:
                    97:6d:35:4d:0b:c4:ba:c1:d6:f3:5f:2a:bb:f9:ed:
                    31:62:91:5a:9f:fe:89:69:10:65:de:8e:84:61:aa:
                    66:0b:2a:66:75:aa:63:a3:40:e8:a4:64:96:36:03:
                    f4:4d:cd:9d:98:57:d9:75:eb:b6:91:ca:17:d6:55:
                    f1:df:a3:23:82:bb:3b:0e:62:61:d6:09:8b:d8:ca:
                    d5:f5:33:b2:c6:06:70:8b:73:83:ac:a4:93:0d:a9:
                    a7:e5:fe:6b:89:f6:d6:84:03:af:c5:d0:85:af:dd:
                    f3:ac:1d:e7:38:6d:b4:12:77:b6:84:d5:20:c4:44:
                    92:61:53:d9:d8:53:9a:9c:cd:d3:6c:74:7e:b0:c0:
                    77:ee:71:32:36:ba:e9:61:da:b9:d9:bb:40:8a:f7:
                    1c:62:3d:86:b8:e3:fa:b9:05:33:18:4e:74:40:4e:
                    9c:e9:ce:07:a7:4a:44:15:dd:ac:93:f9:36:a1:09:
                    28:d2:72:2e:76:a8:25:f1:a2:1a:85:4c:72:02:01:
                    a7:c3:5a:4d:4e:83:5d:72:09:4d:58:64:44:28:5c:
                    f1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:82:B5:4C:58:F2:C9:A7:4A:54:B5:FD:AC:D0:04:7A:B3:EB:91:6B
            X509v3 Authority Key Identifier:
                keyid:74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:fa:a1:01:f2:2b:19:7d:94:b1:61:14:60:4d:7b:0d:4b:34:
         65:f7:44:c0:f2:6d:5a:29:03:23:c1:03:70:48:a9:1d:44:1c:
         14:10:0a:76:45:52:65:62:e4:b3:d4:66:30:b6:ff:41:f0:3b:
         7c:43:d8:f5:38:74:76:cd:ed:c9:5a:48:a0:1e:fb:18:b7:57:
         62:69:2c:32:e6:03:d2:27:dd:d4:2f:db:ab:d6:67:5b:76:82:
         cf:37:54:90:1b:16:39:0f:2d:55:3b:20:24:b6:b8:f9:e6:3c:
         60:cb:74:e0:80:af:59:e8:46:53:f8:84:9d:b5:30:7c:5c:c0:
         a5:17:4c:a4:25:c8:f0:4d:0e:a7:b5:56:5f:1a:1b:9d:33:41:
         c1:b1:d7:d1:b1:5c:f4:5d:1f:58:93:72:a0:27:e5:09:3b:96:
         6e:4b:f1:0d:73:ea:27:c9:02:77:bb:c6:85:6d:08:04:35:3a:
         77:7f:01:e3:ec:f1:13:51:a9:5c:63:30:29:e9:3a:84:64:dd:
         f4:87:0d:5e:c8:65:25:04:31:87:fd:53:ab:65:7d:f3:6c:e2:
         4c:3d:ff:ab:65:f3:43:88:39:e4:fa:5f:26:9f:f6:c4:d7:de:
         f8:4b:2f:eb:a9:1f:0f:19:56:9f:10:3b:91:c3:80:a6:5b:14:
         7b:17:91:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 00:29:28 2026 by rpki-client