Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
File:                     felj7OLwup93SayjhUIPnXAuqos.mft (raw, json)
Hash identifier:          lR/YXMDSwbrfDP4OwVwNYIKHh5nBbSsWiTDkB+9BoNk=
Subject key identifier:   25:C8:29:88:77:04:B8:D5:69:20:AF:F8:DE:D3:E9:62:4C:8E:A0:BA
Authority key identifier: 7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B
Certificate issuer:       /CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
Certificate serial:       019E1EA2DE112362B490ABB3FA3D73F8D91A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
Manifest number:          11B9
Signing time:             Wed 13 May 2026 00:00:50 +0000
Manifest this update:     Wed 13 May 2026 00:00:50 +0000
Manifest next update:     Thu 14 May 2026 00:00:50 +0000
Files and hashes:         1: NZpb2E9m2foAvsfyivT97O1jcng.roa (hash: 0RJf0q9CZo1wWgsu4Kz3lRf78w4e5oNe9BmVigDLVTE=)
                          2: felj7OLwup93SayjhUIPnXAuqos.crl (hash: zGzRppzE4s9/3meqyKs8pijjiWwW8dc0PQAww5FboG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:de:11:23:62:b4:90:ab:b3:fa:3d:73:f8:d9:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
        Validity
            Not Before: May 13 00:00:50 2026 GMT
            Not After : May 14 00:00:50 2026 GMT
        Subject: CN=25c829887704b8d56920aff8ded3e9624c8ea0ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2f:3b:e1:e3:f1:88:b8:f1:fe:f1:d5:5e:81:
                    38:03:47:d9:57:c8:11:03:9a:bb:6a:b7:a0:a8:a9:
                    5a:92:af:50:58:79:37:41:23:f1:8d:fb:e5:7c:4f:
                    ef:d4:6f:68:8e:1f:3b:5f:16:1b:5e:86:e5:44:e0:
                    5c:e9:c7:c9:4e:a7:b3:2a:98:29:a2:eb:f6:83:53:
                    2c:96:70:87:db:32:72:8f:ac:9e:22:e4:d9:ae:6c:
                    a4:0a:d3:1c:6e:32:95:b8:e6:a4:13:f2:8f:c4:dd:
                    db:1e:80:87:6c:74:1e:b1:b4:44:38:5c:c6:6c:fc:
                    d2:9c:66:5b:5b:67:9f:58:ef:15:fe:de:8c:96:b2:
                    91:54:74:fb:3a:d1:f1:86:fe:b2:e2:16:81:a0:32:
                    b6:3a:fe:b4:fd:b1:b9:70:83:b3:b9:50:1e:de:69:
                    5c:a5:f4:eb:0f:7e:fd:80:28:b9:bb:4e:3e:24:fa:
                    2f:e9:04:75:70:b0:2d:2c:76:f4:93:1e:b1:b5:02:
                    22:6f:74:f8:04:48:8b:9c:a3:61:3e:59:d4:68:78:
                    ac:39:2d:4c:e3:24:ff:8f:8e:84:89:5c:e1:dc:1c:
                    cb:88:b7:4a:19:5f:1f:a4:7e:cd:bc:28:52:79:7f:
                    cc:be:da:38:af:5d:e6:a9:ac:11:42:4d:eb:4d:49:
                    7a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C8:29:88:77:04:B8:D5:69:20:AF:F8:DE:D3:E9:62:4C:8E:A0:BA
            X509v3 Authority Key Identifier:
                keyid:7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:22:0d:ca:1f:fe:5f:f4:1e:3b:f4:13:7f:5f:83:d1:3a:84:
         f3:ba:35:f6:35:40:e6:34:6e:ea:79:a1:18:2a:98:92:8e:cb:
         6f:be:3d:15:f7:7c:3b:34:f8:33:77:33:2c:24:5b:92:8d:b8:
         d5:b5:a5:ff:41:ef:dd:60:97:49:64:6e:a0:c9:88:f5:58:84:
         6a:67:81:00:c5:7f:b6:a0:87:72:2c:8d:53:9e:14:ee:da:5e:
         b4:03:2b:e0:e2:f9:b2:ee:4b:5e:b9:4b:0c:3e:e4:5e:1c:bb:
         7f:e3:d5:f6:b0:c1:d0:6e:e5:0f:8c:b0:18:fd:ee:37:62:a1:
         78:db:56:49:34:27:75:46:8d:63:64:8e:06:be:2d:4e:cb:c6:
         0a:e9:5b:06:b3:e8:17:63:96:c7:ec:a9:c8:26:f1:c1:07:d5:
         f7:2a:b9:d1:21:fd:2d:df:04:b7:c2:7a:5f:ea:c5:24:55:a3:
         dc:c2:2e:2f:44:62:0b:46:68:3d:ad:3b:ec:bc:f5:b3:3a:d3:
         24:47:a9:00:6e:23:dd:fc:01:f7:bd:86:6b:6e:0a:7c:fd:25:
         f1:bc:66:e3:3e:85:ef:a2:14:28:8c:36:5f:b0:3a:08:5f:73:
         f0:5a:3d:d6:77:f0:a0:b2:a5:1c:6e:04:91:ae:df:1a:81:49:
         ee:5a:a6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:04:38 2026 by rpki-client