Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/adf540-5379-470e-bfb4-a7bbecd5a394/1/R2IQZq9PT1jGPuQ_75tS9cj8Qqk.mft
File:                     R2IQZq9PT1jGPuQ_75tS9cj8Qqk.mft (raw, json)
Hash identifier:          4ynH7i/gB8XIimHziZpOpPenqgTq6s3cv4PTNJWMF3w=
Subject key identifier:   23:BF:92:D8:9D:9A:27:F7:86:8C:D2:63:79:50:A6:33:51:5B:66:7B
Authority key identifier: 47:62:10:66:AF:4F:4F:58:C6:3E:E4:3F:EF:9B:52:F5:C8:FC:42:A9
Certificate issuer:       /CN=47621066af4f4f58c63ee43fef9b52f5c8fc42a9
Certificate serial:       019E1F7F6EC73C0A68D00E8B2D53F4A104EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R2IQZq9PT1jGPuQ_75tS9cj8Qqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/adf540-5379-470e-bfb4-a7bbecd5a394/1/R2IQZq9PT1jGPuQ_75tS9cj8Qqk.mft
Manifest number:          37
Signing time:             Wed 13 May 2026 04:01:45 +0000
Manifest this update:     Wed 13 May 2026 04:01:45 +0000
Manifest next update:     Thu 14 May 2026 04:01:45 +0000
Files and hashes:         1: R2IQZq9PT1jGPuQ_75tS9cj8Qqk.crl (hash: b7L11oVLou8CdNj22ApiNAkFzFbbjekcSYpIH00vREg=)
                          2: Z39nPiyL47Feha5WgnFZCSCcy3g.roa (hash: 9mJiZv7ItrIrPIwP8G0w4T0RBvTILri5Zzv8pQIllIY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/adf540-5379-470e-bfb4-a7bbecd5a394/1/R2IQZq9PT1jGPuQ_75tS9cj8Qqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/adf540-5379-470e-bfb4-a7bbecd5a394/1/R2IQZq9PT1jGPuQ_75tS9cj8Qqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R2IQZq9PT1jGPuQ_75tS9cj8Qqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7f:6e:c7:3c:0a:68:d0:0e:8b:2d:53:f4:a1:04:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47621066af4f4f58c63ee43fef9b52f5c8fc42a9
        Validity
            Not Before: May 13 04:01:45 2026 GMT
            Not After : May 14 04:01:45 2026 GMT
        Subject: CN=23bf92d89d9a27f7868cd2637950a633515b667b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:de:da:55:41:9a:a5:f8:8e:66:0a:39:3f:06:
                    df:f8:38:0b:f2:54:64:fe:ea:e7:6f:a7:35:1e:ea:
                    f4:a7:31:29:1e:da:b1:90:23:5c:1a:a0:48:77:4e:
                    82:ec:84:27:29:54:3c:76:7f:d0:99:d2:71:18:13:
                    02:e8:cc:17:e5:c5:32:e3:e2:04:11:94:17:1d:ea:
                    87:bb:04:b6:75:50:92:db:f9:1f:c8:a2:1e:26:f6:
                    7f:d1:b8:31:00:90:3a:52:14:cd:eb:61:d1:bf:d0:
                    d1:90:88:e4:d0:16:5f:60:45:5e:e0:2d:db:2a:56:
                    53:93:6b:d7:62:96:5c:e9:7c:2e:d6:bc:f5:1f:d8:
                    64:c0:c5:2d:57:d9:a1:ad:12:76:2c:68:90:60:44:
                    e7:fb:50:56:6a:04:67:88:b8:6b:63:e2:69:29:ab:
                    c8:d5:e7:50:81:61:08:fc:55:88:48:e0:ca:ec:6b:
                    72:7d:a0:2d:25:97:ea:96:07:f2:08:f0:7b:18:eb:
                    e5:5e:af:b7:5b:c8:27:36:b3:a2:36:37:73:54:1d:
                    a4:bb:25:0d:7d:df:9f:eb:dc:d3:74:92:3b:2d:0c:
                    b9:43:4b:07:81:ef:fa:62:e5:b7:24:e1:ea:93:a5:
                    6d:cc:50:95:20:1f:75:c0:6c:f8:30:5a:ee:84:fc:
                    8c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BF:92:D8:9D:9A:27:F7:86:8C:D2:63:79:50:A6:33:51:5B:66:7B
            X509v3 Authority Key Identifier:
                keyid:47:62:10:66:AF:4F:4F:58:C6:3E:E4:3F:EF:9B:52:F5:C8:FC:42:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2IQZq9PT1jGPuQ_75tS9cj8Qqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/adf540-5379-470e-bfb4-a7bbecd5a394/1/R2IQZq9PT1jGPuQ_75tS9cj8Qqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/adf540-5379-470e-bfb4-a7bbecd5a394/1/R2IQZq9PT1jGPuQ_75tS9cj8Qqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:cc:57:87:3d:bf:34:fe:8e:8c:a3:49:64:8a:06:17:98:ee:
         54:8b:10:cf:5e:f2:08:16:a3:66:8e:76:42:af:f0:d1:86:74:
         7f:83:fe:83:1f:47:18:73:ff:75:20:41:51:70:16:b3:89:e5:
         0c:1a:8e:6d:51:fa:d3:96:3a:f8:e4:f0:06:d9:08:ab:39:1e:
         18:4a:0a:6a:16:2e:ac:08:aa:06:aa:7d:18:5f:45:1c:b5:05:
         fd:db:2b:ed:7d:f7:0f:a3:b0:9c:74:7d:d0:e5:05:ee:85:f9:
         6c:ee:10:b1:90:c3:27:7b:f8:e2:f0:48:ce:d5:42:39:25:83:
         37:53:c7:e2:38:63:90:fc:2c:c5:a9:1f:cd:2c:3c:c2:4b:92:
         4a:60:08:70:dc:bd:c3:67:e1:93:4e:a8:e2:ec:77:b3:df:da:
         b1:95:26:0b:64:c5:4f:54:de:01:3d:94:8f:70:f1:46:c5:16:
         7f:56:91:a4:4c:d0:17:e4:df:bd:0a:a0:09:81:d4:92:e3:ad:
         07:96:7a:12:db:9c:0b:cf:84:7a:22:71:ad:cb:a9:af:19:a0:
         f3:f8:88:67:46:49:72:c9:78:17:bb:35:e7:fa:30:c0:38:31:
         df:3a:d0:f3:e5:e9:ea:33:ba:23:9c:9a:35:6f:c1:30:2a:d8:
         e1:ee:dc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:13 2026 by rpki-client