Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
File:                     4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft (raw, json)
Hash identifier:          k62S/aa5k/j7KBlp4OlgK8xt1mu4Mr9quVEAuxbOuFA=
Subject key identifier:   79:FC:68:10:9F:06:2C:53:C6:8D:4F:E1:78:FE:56:14:EB:07:D4:C6
Authority key identifier: E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
Certificate issuer:       /CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Certificate serial:       019E3185783FF93665222E7C1B8A4C8F625A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
Manifest number:          086F
Signing time:             Sat 16 May 2026 16:01:30 +0000
Manifest this update:     Sat 16 May 2026 16:01:30 +0000
Manifest next update:     Sun 17 May 2026 16:01:30 +0000
Files and hashes:         1: 4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl (hash: T/ULcb8dFyMPwxHgnQPbdpWe25SE19GwidrtPJDDi18=)
                          2: Um8x4FnVBBKSkcy47VZrVv_LDxE.roa (hash: tfl71U6Q8ML7hqI6qdxoHZc1rgsYETV4BNFwPX3unlM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:85:78:3f:f9:36:65:22:2e:7c:1b:8a:4c:8f:62:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
        Validity
            Not Before: May 16 16:01:30 2026 GMT
            Not After : May 17 16:01:30 2026 GMT
        Subject: CN=79fc68109f062c53c68d4fe178fe5614eb07d4c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9f:81:19:a9:62:ad:41:5a:7e:cf:d6:2d:dc:
                    05:55:fa:5d:a4:90:ce:cc:b5:4b:61:56:51:85:aa:
                    ee:ae:7a:c9:e1:d8:d6:a1:a6:96:c3:56:0c:32:48:
                    d3:87:40:8d:dd:e5:8a:c5:c6:7f:12:a0:9e:2c:b3:
                    6b:4b:3e:d9:20:4c:91:b3:84:82:64:37:bf:74:9b:
                    34:3e:e5:dc:07:8b:ba:8e:85:a3:fe:b9:57:2c:32:
                    61:36:b5:7b:39:33:ba:1d:3f:22:c6:dd:bf:fd:84:
                    e4:8d:53:26:72:06:41:6a:8d:b9:a0:c3:de:22:7c:
                    65:56:64:f3:3e:30:5e:5b:49:9a:26:a0:a8:f4:b2:
                    44:15:b1:28:aa:80:3b:32:60:ed:f4:ab:5b:80:b3:
                    bd:7c:ac:9c:1d:71:51:a8:d9:9c:e3:16:ad:5a:a4:
                    72:e0:a1:c5:55:2e:0b:da:22:dc:bd:12:2a:31:77:
                    f7:00:09:25:3b:cc:6f:4b:a3:1c:34:11:f2:47:c2:
                    d1:bb:d4:cb:b2:79:0c:90:a3:4b:1c:f4:ef:78:48:
                    50:7d:62:7d:48:8e:2d:d5:f9:bf:8d:0b:9e:79:18:
                    67:51:c3:52:f4:c0:e2:f2:5e:1a:73:a7:d9:89:19:
                    31:d3:3e:0a:97:4c:87:ed:01:18:b2:04:b5:93:35:
                    77:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FC:68:10:9F:06:2C:53:C6:8D:4F:E1:78:FE:56:14:EB:07:D4:C6
            X509v3 Authority Key Identifier:
                keyid:E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:30:2e:ce:9d:4b:c6:e9:18:4f:c4:82:ac:88:d4:ce:19:ed:
         9b:7c:8d:29:b3:22:3c:64:1d:01:aa:2f:3f:b3:98:52:0c:81:
         cc:15:09:f2:9b:58:10:a8:e0:cf:85:ee:92:fc:3b:ff:c6:24:
         d8:aa:80:c0:03:2a:cd:ba:e8:2a:d4:16:7c:f4:8d:ae:65:3a:
         93:26:78:04:63:90:6a:18:d5:d7:03:69:96:4c:73:75:97:6e:
         e8:f1:65:a0:e5:ee:b4:87:06:e8:19:ee:b4:05:d5:80:45:f9:
         b3:1c:58:ad:60:ec:87:62:79:81:72:12:35:82:e9:01:75:df:
         40:26:8d:03:0e:55:47:88:0f:c5:80:1d:44:f8:6d:95:75:84:
         bb:41:f9:ca:0a:08:b5:4b:5c:7b:77:60:4d:61:06:45:4f:d4:
         de:42:4b:5f:81:7d:f0:cb:d7:47:59:9d:52:0c:f0:2b:bc:5e:
         29:d3:85:13:0c:09:24:07:c3:7b:19:bd:be:bb:f8:70:12:ed:
         35:1f:1d:12:69:9a:82:8d:21:aa:a7:0e:bf:a2:bc:7d:0d:25:
         e1:22:95:60:da:da:a6:1a:3b:ad:28:56:13:49:10:0b:fc:a6:
         a7:3a:f9:97:ba:a5:c0:b5:11:44:e1:f2:dd:96:8c:0e:8d:79:
         77:5f:ae:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:39:01 2026 by rpki-client