Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
File:                     1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft (raw, json)
Hash identifier:          Gm56R2cy/TE5ntOPXmy1L38u5cDM33uhr23UmBvoSXg=
Subject key identifier:   A6:82:B1:02:D9:4B:4C:FA:16:CE:87:28:B1:80:A7:CD:C7:01:93:76
Authority key identifier: D7:0A:F9:42:46:5F:F2:65:B8:96:F0:D1:B7:62:49:0F:27:DC:32:2C
Certificate issuer:       /CN=d70af942465ff265b896f0d1b762490f27dc322c
Certificate serial:       019E1C469B0E592CA1C12ADA86E2CAC0265D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
Manifest number:          15B0
Signing time:             Tue 12 May 2026 13:00:49 +0000
Manifest this update:     Tue 12 May 2026 13:00:49 +0000
Manifest next update:     Wed 13 May 2026 13:00:49 +0000
Files and hashes:         1: 1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl (hash: ZET45l8l4EFYQ1lOe39WBkvMq0TJ6I503oM86ygJ/7c=)
                          2: pTKY06gWgEXaIu_OYznOKa1SCYQ.roa (hash: DO+JIn1Z+CZdkSG19VC8thtAj3bTLW7VrZO6RWhGcRE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:46:9b:0e:59:2c:a1:c1:2a:da:86:e2:ca:c0:26:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70af942465ff265b896f0d1b762490f27dc322c
        Validity
            Not Before: May 12 13:00:49 2026 GMT
            Not After : May 13 13:00:49 2026 GMT
        Subject: CN=a682b102d94b4cfa16ce8728b180a7cdc7019376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e2:a1:f9:82:9a:27:1d:76:b4:09:2c:69:03:
                    b5:9a:03:d6:bf:0e:4a:07:f3:93:cf:b3:7c:ca:da:
                    d2:e5:a1:77:1a:9d:d8:2f:07:5e:c5:5e:5e:a4:5c:
                    cf:c5:8e:ac:d2:14:1b:ff:8a:ae:c5:47:66:6d:ac:
                    fa:6b:67:4b:5f:ca:92:ee:36:8a:21:1e:b6:10:30:
                    43:99:4b:55:4c:5c:14:5e:ae:0e:65:b4:af:68:ae:
                    c5:d8:8d:60:d1:2f:09:5c:ed:64:d2:8b:17:bd:19:
                    53:d3:ed:05:68:ae:6b:a1:9c:3b:e7:ca:b0:7f:e8:
                    40:f5:a1:3c:0c:68:6e:3b:4f:82:ad:73:61:21:4a:
                    38:54:72:a9:c4:fd:18:f8:c2:81:3c:47:96:bd:8e:
                    a6:ec:4c:09:bc:44:40:a6:85:4e:3b:17:ae:d0:62:
                    9d:48:f8:c7:09:84:81:52:e1:37:6c:ef:f6:32:cc:
                    1c:88:0c:5b:60:08:a9:44:27:db:80:2c:b0:5b:88:
                    dc:87:87:5c:b2:67:cf:78:1d:91:b3:a9:13:3c:58:
                    90:cb:f9:ce:09:80:ca:f2:98:a1:40:78:44:7e:b0:
                    73:cf:e4:6a:24:89:74:04:ca:eb:dc:85:a5:de:cc:
                    0d:bf:3d:fc:be:7c:f6:1a:64:24:43:6c:2a:7a:92:
                    d2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:82:B1:02:D9:4B:4C:FA:16:CE:87:28:B1:80:A7:CD:C7:01:93:76
            X509v3 Authority Key Identifier:
                keyid:D7:0A:F9:42:46:5F:F2:65:B8:96:F0:D1:B7:62:49:0F:27:DC:32:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:5f:13:d1:5e:ca:72:3a:26:31:7b:c9:05:79:2a:01:19:7f:
         e0:ba:69:a0:8f:0e:11:4e:d4:e0:0a:d4:03:c1:ca:67:c8:d1:
         47:01:80:5e:2e:2b:c5:8b:0b:90:e9:58:49:ec:a9:15:f5:14:
         35:74:70:b2:a2:95:bb:df:c4:a2:ea:af:56:89:66:95:ac:cd:
         ea:70:a9:1d:4f:04:0b:3a:15:b4:d4:aa:de:da:86:49:96:ce:
         d6:83:c4:7a:67:12:2e:9b:f5:e9:37:79:c3:cc:99:59:13:ef:
         2d:07:79:90:de:a8:c8:d9:8b:43:2f:3d:e7:69:97:d2:67:03:
         3f:b3:e1:16:9f:9b:c4:37:c5:83:c3:81:ab:a2:11:68:de:6e:
         0f:f3:de:16:f5:c6:d7:db:f0:57:5a:ba:10:6d:59:a0:fa:07:
         68:71:e1:7e:9d:13:1c:00:4f:26:d6:b7:25:be:bc:d4:b4:f5:
         3d:84:98:3d:10:25:d8:89:37:b2:3d:29:a1:ec:3d:54:e6:ca:
         73:11:d3:7c:f8:53:d6:fc:7f:48:1a:37:dc:cf:d5:1c:5a:36:
         c0:3a:d0:13:1d:e5:0a:db:9a:fc:6e:7c:3c:ab:9c:66:8b:a9:
         89:90:f8:a2:8e:3b:1a:8d:3b:10:1d:73:c9:3b:c7:64:c0:5a:
         1c:65:76:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:31:15 2026 by rpki-client