Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
File:                     t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft (raw, json)
Hash identifier:          axamobAQ6+DC1FIGGQWT6ujwliXcI3nhsxBwfEvV5o8=
Subject key identifier:   56:C9:2A:3B:7A:B3:A5:AB:56:C2:B6:2E:37:F5:67:49:AC:21:8E:BA
Authority key identifier: B7:95:AA:F0:33:00:4C:92:D7:A2:6C:23:6C:14:D3:25:52:D7:8D:94
Certificate issuer:       /CN=b795aaf033004c92d7a26c236c14d32552d78d94
Certificate serial:       019E1DFE46CAFAD6904EAB1A11176820CD78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
Manifest number:          12D2
Signing time:             Tue 12 May 2026 21:01:03 +0000
Manifest this update:     Tue 12 May 2026 21:01:03 +0000
Manifest next update:     Wed 13 May 2026 21:01:03 +0000
Files and hashes:         1: NSKhyUya1x-PyKiiTfwVVTZVm6A.roa (hash: wduaY6yIGEaa6Q7/D9YyI5iy8gfW5slOIEt9QDoD1eQ=)
                          2: t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl (hash: jFWmkzytUB0J5nG5ZR2Pvd0XHu0HYwU9qPnWEagqeq0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:46:ca:fa:d6:90:4e:ab:1a:11:17:68:20:cd:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b795aaf033004c92d7a26c236c14d32552d78d94
        Validity
            Not Before: May 12 21:01:03 2026 GMT
            Not After : May 13 21:01:03 2026 GMT
        Subject: CN=56c92a3b7ab3a5ab56c2b62e37f56749ac218eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:51:d7:81:a5:2d:01:50:c7:85:d3:5d:c8:cb:
                    e1:85:dc:ac:1c:be:be:79:b7:1a:e8:c6:28:30:08:
                    b6:c1:df:ea:3a:03:ec:a2:bd:24:68:c2:21:1a:b2:
                    d7:4e:11:11:01:26:0d:11:9c:e2:0e:1d:82:5c:3f:
                    37:e4:fe:08:60:13:4b:af:8a:e7:0f:7e:77:41:64:
                    80:c0:d9:cb:ae:c6:0d:42:0b:18:17:ca:cb:c8:67:
                    d3:48:bd:eb:77:53:5e:8e:97:a6:e3:b1:88:91:41:
                    46:85:68:3e:e6:1c:5c:75:65:9f:95:e6:a3:4f:ec:
                    2a:18:69:73:c3:72:87:0a:fd:2e:16:70:ce:9b:e2:
                    a9:d1:3a:01:7d:e6:b7:2f:ae:1b:46:b4:3e:52:8d:
                    ec:49:2c:0b:e3:ad:92:5d:fe:e2:61:fe:f9:f0:b2:
                    2a:37:7b:61:3a:ba:25:7d:80:a9:8b:fd:c4:e3:ae:
                    a5:1b:9f:bd:15:45:94:0c:03:cc:83:9b:db:51:cb:
                    8c:11:44:44:98:7f:fa:1a:0c:9c:6e:c9:02:28:71:
                    5f:5e:42:db:de:62:8b:6b:05:66:06:21:ee:5f:e4:
                    31:a1:91:72:bb:29:03:cd:1e:35:4a:5f:e1:84:2d:
                    0e:cf:34:d9:fe:d1:20:f4:fe:2e:93:dd:fa:b8:d6:
                    82:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C9:2A:3B:7A:B3:A5:AB:56:C2:B6:2E:37:F5:67:49:AC:21:8E:BA
            X509v3 Authority Key Identifier:
                keyid:B7:95:AA:F0:33:00:4C:92:D7:A2:6C:23:6C:14:D3:25:52:D7:8D:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:93:cf:54:88:a3:13:62:8e:47:68:7a:b1:7d:d1:70:71:90:
         49:4e:bd:01:69:bb:91:bb:e2:cd:06:0a:7b:f0:1c:47:56:b4:
         e1:6a:9c:51:ed:be:75:4f:af:5f:07:68:0d:8a:f6:60:cd:37:
         21:e0:76:68:2e:08:40:cc:36:48:f9:35:3e:fa:d7:f9:e5:9d:
         aa:fe:83:3b:49:d1:7b:d5:30:eb:29:f5:7c:d8:3a:b8:da:86:
         43:b5:f5:c5:da:9d:46:73:ed:4e:5d:25:be:2d:4e:94:e0:58:
         01:55:16:c1:f4:c9:13:46:8f:bf:63:5d:b0:e8:02:f2:59:b1:
         18:18:f6:1a:f2:19:97:1f:fa:b0:60:46:77:20:68:e1:76:ac:
         ec:4c:10:47:0e:45:7e:e2:b8:cc:9a:8e:47:c1:0f:eb:2f:2e:
         cd:ec:a6:e0:2e:8a:27:ae:a3:bd:ce:64:59:b2:60:8f:47:b7:
         a0:2b:d8:b1:9c:99:66:45:d7:ef:be:8c:68:af:c0:85:e8:6a:
         28:d8:dc:df:78:25:eb:72:88:b0:0d:a5:f9:31:ab:95:50:8c:
         ff:4d:c0:78:0a:e8:ab:38:19:6c:89:01:c5:3d:6e:71:a7:fb:
         ba:8b:48:87:cb:44:06:34:80:a3:14:58:86:62:2d:44:59:85:
         a6:c7:35:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:50:35 2026 by rpki-client