Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
File:                     01CzV9ze5o--vcVVPbMknG6Clsc.mft (raw, json)
Hash identifier:          Wghc853BUxZyCfhxOUe3k7Zhbjxnz2D826RAJ+5mcTs=
Subject key identifier:   FF:1A:C9:47:51:DF:22:D1:E9:01:60:C0:9E:D4:B7:D3:10:F5:AE:2C
Authority key identifier: D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7
Certificate issuer:       /CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
Certificate serial:       019E2FCDD761B900ABB1860FCB80E02E409D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
Manifest number:          0819
Signing time:             Sat 16 May 2026 08:01:19 +0000
Manifest this update:     Sat 16 May 2026 08:01:19 +0000
Manifest next update:     Sun 17 May 2026 08:01:19 +0000
Files and hashes:         1: 01CzV9ze5o--vcVVPbMknG6Clsc.crl (hash: N2xLLEFl+WifswLKn1g/4fZwZ3aUT87VBLzmhxVE3SU=)
                          2: 4VA7wZJaiHWG2GAPtA5u1BDcn4I.roa (hash: PqJvEzmh32UVxsDr7waFI7G4gmqJkPLZ5CaOrNIefv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 08:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:cd:d7:61:b9:00:ab:b1:86:0f:cb:80:e0:2e:40:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
        Validity
            Not Before: May 16 08:01:19 2026 GMT
            Not After : May 17 08:01:19 2026 GMT
        Subject: CN=ff1ac94751df22d1e90160c09ed4b7d310f5ae2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:37:2a:a8:99:2e:b1:dd:7e:d3:ec:3e:0e:46:
                    e2:9a:8b:03:35:89:ec:b6:d9:4d:cd:0d:a7:7f:78:
                    0e:23:c2:cc:14:ff:27:cd:a2:ac:43:e9:7e:9e:c6:
                    ef:57:24:48:f7:5b:cb:25:75:91:3d:6f:c3:35:22:
                    51:ed:89:a9:d6:cd:bf:5a:a5:d5:9c:37:26:3a:52:
                    28:98:5d:4e:1b:74:d1:8c:84:76:81:0a:4e:b4:62:
                    63:b4:aa:3a:0d:76:eb:e6:00:5e:79:47:0d:01:73:
                    85:07:80:d0:ce:97:6d:e3:72:c6:b2:39:1c:25:bd:
                    bc:24:58:27:35:ae:23:5f:8c:11:b3:19:51:1f:e5:
                    80:87:0b:17:a9:ad:dc:33:d8:f6:cb:ae:03:84:84:
                    24:6f:73:d0:60:8a:c6:8b:f6:43:29:b7:f6:c7:90:
                    2d:de:63:47:50:97:1e:f7:9a:29:ea:24:4b:cc:53:
                    e8:9c:ba:49:ea:77:23:cc:5d:9a:ea:42:a8:22:59:
                    67:9d:14:c3:21:06:34:16:a9:c2:4c:a1:1a:fb:9e:
                    51:c1:cd:4b:27:09:ec:04:12:c0:1a:8b:f1:32:ad:
                    c9:d8:4e:80:db:71:21:d5:68:06:4c:cd:20:b3:75:
                    9a:6f:2f:4e:33:08:66:d3:d0:1f:03:e8:d8:15:e6:
                    94:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1A:C9:47:51:DF:22:D1:E9:01:60:C0:9E:D4:B7:D3:10:F5:AE:2C
            X509v3 Authority Key Identifier:
                keyid:D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:8b:d2:e6:9e:94:6b:53:a4:4c:82:58:26:0d:cb:21:e0:26:
         1b:56:29:8d:53:d1:a1:79:56:3f:57:7c:33:de:fc:9d:01:b2:
         90:71:59:75:fb:a9:27:3b:44:dc:4a:91:ad:c2:75:83:1d:11:
         38:2d:7b:59:5b:fb:d2:3d:67:8a:9e:85:09:dd:22:f5:1c:14:
         97:e0:7f:72:12:01:6a:14:03:05:73:cd:8c:d7:71:2d:6a:0b:
         00:e9:fd:02:0d:b9:61:f5:58:a5:aa:e2:c6:f1:46:f6:b0:c2:
         db:c1:1a:f1:90:a8:9a:78:e5:50:70:c4:0e:92:a6:45:ed:44:
         9d:c5:c7:56:cc:c6:86:4a:4c:58:6d:1b:31:3b:08:2f:2a:67:
         35:f0:98:7b:d1:13:87:71:8d:a7:f8:23:e5:58:46:73:30:d7:
         b4:d0:f5:f7:00:c0:d6:29:da:13:cc:50:17:f6:cc:b4:e5:d2:
         85:7b:11:76:6c:6e:b0:06:5d:9c:7d:55:a0:35:8a:bf:7e:a4:
         85:bc:14:93:2c:b9:13:14:25:e7:21:ef:bc:1a:c7:e2:6d:a7:
         e7:2f:a0:cb:19:f2:54:ff:2b:a7:38:b0:b3:b8:fd:42:66:d1:
         0b:9d:1d:1b:44:9a:c2:8e:d2:10:4b:4c:02:9f:06:98:da:21:
         29:4d:a0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:34 2026 by rpki-client