Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
File:                     1fD0usX5pQIvwty8Sj20zGsRZkQ.mft (raw, json)
Hash identifier:          oobp9cO55nz/uuiLcBt3XzA8srt8nXKwAKcjSuV0g2k=
Subject key identifier:   E7:78:48:73:17:54:A7:ED:7B:F0:52:5F:2C:3E:F0:88:94:6B:50:5E
Authority key identifier: D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
Certificate issuer:       /CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Certificate serial:       019E1F47F4AA29D7AD2A9B509E73DA9D64D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
Manifest number:          17EE
Signing time:             Wed 13 May 2026 03:01:09 +0000
Manifest this update:     Wed 13 May 2026 03:01:09 +0000
Manifest next update:     Thu 14 May 2026 03:01:09 +0000
Files and hashes:         1: 1fD0usX5pQIvwty8Sj20zGsRZkQ.crl (hash: OwzC0D/CdyvoHl+DFiuArGUC45ThfIl32pXBmzzbb38=)
                          2: 37hbQJ7zVxzVagSbASxlGNa7rGQ.roa (hash: ZiPWwSin+eQu8Naroa7jWI6Yudz7OyFOeo7L1bmKWLo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:f4:aa:29:d7:ad:2a:9b:50:9e:73:da:9d:64:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
        Validity
            Not Before: May 13 03:01:09 2026 GMT
            Not After : May 14 03:01:09 2026 GMT
        Subject: CN=e77848731754a7ed7bf0525f2c3ef088946b505e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f9:bf:c7:8b:fb:67:4d:93:89:fc:f0:8b:15:
                    b3:d5:c9:d5:ae:d6:a5:fe:65:b0:3f:24:d5:93:01:
                    4a:da:e7:2b:8d:66:fa:1f:6c:f9:ab:fe:18:be:ed:
                    ef:8f:4f:5e:5b:31:e9:b6:59:41:e4:0a:27:c6:3f:
                    44:0e:64:0b:40:6b:08:aa:1c:df:56:22:9b:4c:08:
                    ea:5a:41:b3:de:9c:19:b5:40:1f:91:3a:f8:e9:b8:
                    34:59:fe:e5:66:0d:88:72:f7:09:d0:19:bd:ac:4d:
                    54:aa:83:96:a3:c6:b0:31:3a:be:0a:12:ed:00:0d:
                    bb:43:83:93:e3:36:f9:27:08:80:49:f2:6c:f8:0a:
                    7f:cc:50:00:6e:cb:5e:da:f7:70:41:09:c4:ce:d0:
                    b5:9a:eb:fe:c2:42:94:5a:b2:a2:9f:b1:8b:c3:96:
                    3c:5d:85:26:18:fd:89:09:63:6d:62:2e:7b:6f:7f:
                    fa:d1:5e:d9:6a:0f:a1:4e:ed:4e:3f:84:a9:45:99:
                    06:3e:98:cc:0e:85:2d:e2:e2:84:3d:69:88:9a:20:
                    3a:b7:a3:8c:4b:ed:9a:cd:9b:31:36:75:a8:7f:9c:
                    e0:88:e9:ee:3b:7e:a5:2d:07:9a:7d:e3:d5:a4:34:
                    8e:b6:45:40:ff:44:84:f5:27:49:9e:e4:28:6b:e1:
                    bd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:78:48:73:17:54:A7:ED:7B:F0:52:5F:2C:3E:F0:88:94:6B:50:5E
            X509v3 Authority Key Identifier:
                keyid:D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:74:f0:a5:07:d1:4f:6b:ee:aa:93:70:c1:3f:51:d9:f2:8d:
         4c:e3:68:49:e0:b7:3e:15:94:45:b8:f6:73:18:38:9f:8b:47:
         4e:bc:9e:80:bc:f0:9a:47:cb:7e:8d:df:dc:0d:c2:60:60:f6:
         2b:37:45:7d:f2:5e:f8:f6:54:41:4a:d0:47:de:2f:cf:89:ff:
         bb:0a:6a:45:35:1c:75:96:5c:fc:df:0b:99:08:67:c0:67:c2:
         f9:c7:02:18:14:1d:15:f5:e3:66:2b:9b:a3:3f:7e:07:40:12:
         f0:63:1f:5f:ee:c1:d9:4f:ad:b9:9f:da:9c:e0:40:c5:ae:13:
         33:6d:cf:43:78:ee:a9:79:14:6b:ac:94:95:9d:72:2f:cf:8d:
         f8:38:a0:1d:b2:01:76:b3:28:1c:f7:af:5d:d7:51:55:16:8b:
         6c:ba:76:43:33:a6:4e:3f:e1:dd:16:fe:bc:33:e7:4f:ee:aa:
         60:c1:4b:01:48:24:6a:85:3a:1e:0e:5a:8e:c7:56:ea:4e:79:
         71:8a:96:8e:d6:a9:de:b4:b5:0a:45:dc:62:1f:d5:b5:9a:09:
         55:f1:38:7f:91:9d:02:d8:fb:f0:96:85:0a:54:5c:8b:91:20:
         b4:26:3d:4e:c6:19:b4:70:ea:f8:1a:81:53:15:bf:90:0d:88:
         53:6a:12:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:19:42 2026 by rpki-client