Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
File:                     pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft (raw, json)
Hash identifier:          CI2UdkP59LM0oHSsWwv7tVYjgiwTnGm9lturGdU6iTM=
Subject key identifier:   FA:36:0D:5A:FB:61:3B:B5:10:9E:05:64:54:43:3E:17:61:0A:D3:62
Authority key identifier: A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A
Certificate issuer:       /CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a
Certificate serial:       019E205A9E56DF2C390DCAE9ED7B7C042936
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
Manifest number:          0BEA
Signing time:             Wed 13 May 2026 08:01:10 +0000
Manifest this update:     Wed 13 May 2026 08:01:10 +0000
Manifest next update:     Thu 14 May 2026 08:01:10 +0000
Files and hashes:         1: pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl (hash: eyaZrWh/6rE3u7zRvJqP1+OOIRMBAvUzTsxIAnT/oO4=)
                          2: wqM2HbHUAexqGRCIytvhP-Jzu4U.roa (hash: HC7KYLDVfK5o/bx0neagw4IbqR4rFwFVqDH+H7VDweY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:5a:9e:56:df:2c:39:0d:ca:e9:ed:7b:7c:04:29:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a
        Validity
            Not Before: May 13 08:01:10 2026 GMT
            Not After : May 14 08:01:10 2026 GMT
        Subject: CN=fa360d5afb613bb5109e056454433e17610ad362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:88:c6:c3:1e:ca:ff:fe:b2:93:54:07:0a:3c:
                    88:f8:52:0b:06:ae:d2:f8:0c:57:70:4f:0f:10:b5:
                    de:13:53:84:1b:fd:53:fa:70:79:4e:1e:b5:62:15:
                    7c:27:03:a0:c0:d2:44:3f:60:16:84:e8:d7:bf:41:
                    b3:fc:a1:33:e6:ea:84:e6:ad:4b:36:14:e2:59:71:
                    de:be:88:d2:e0:91:4b:2f:53:c7:e0:60:9a:7a:de:
                    40:b5:fb:35:f3:38:44:a8:bb:f3:f5:6f:b9:3a:c5:
                    19:d4:ff:51:85:0b:fb:37:cd:b0:1c:97:21:05:ce:
                    5e:20:91:16:33:f1:b4:01:91:df:b3:aa:f1:21:92:
                    e9:62:21:42:bb:2e:68:af:c3:bf:46:11:f3:3d:a2:
                    b9:11:9c:a4:1d:23:36:a0:e3:ae:fb:fd:48:b4:14:
                    87:ca:1e:52:fb:2e:92:de:6f:c3:4d:4f:ce:24:af:
                    68:71:91:18:86:35:c2:f3:66:f5:58:0f:7d:81:6f:
                    f7:5e:e6:d4:c8:de:c6:fe:ba:06:f4:2f:30:0a:16:
                    1f:d4:f4:b3:87:6e:3f:cf:5d:ec:d8:0b:7d:39:c9:
                    de:52:57:c9:01:17:28:01:f5:bc:d1:6d:04:09:df:
                    2e:69:19:89:3e:e8:fc:06:97:f9:ac:2b:08:26:75:
                    8a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:36:0D:5A:FB:61:3B:B5:10:9E:05:64:54:43:3E:17:61:0A:D3:62
            X509v3 Authority Key Identifier:
                keyid:A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:32:49:9a:a4:1d:64:fb:3d:ad:2a:c9:c2:60:27:3c:36:15:
         63:ce:f4:68:83:b9:50:07:6f:e9:e6:77:b6:88:f1:7a:d8:b7:
         22:c2:7a:85:dc:9d:af:89:79:7e:db:04:bc:86:42:29:64:82:
         35:17:45:be:b3:aa:6c:cf:c7:d4:9c:47:6f:65:3d:33:35:25:
         ce:6a:c2:17:c9:f0:97:3c:c6:64:9b:e9:14:6b:ec:82:7d:9b:
         d2:21:c6:7b:31:3c:04:31:ef:c1:23:ad:27:b4:bc:87:39:60:
         94:32:96:4a:5e:3e:79:d1:1f:01:f3:bc:66:6c:20:d1:05:90:
         7b:12:9d:f5:18:17:59:d0:18:67:ec:d5:ee:ff:09:5e:aa:d0:
         fa:56:28:57:6d:51:bc:51:07:aa:4a:0a:f7:eb:3d:fd:30:f6:
         70:45:7a:3a:4a:f0:e4:b1:40:dd:12:6b:50:f5:3b:c0:15:13:
         ad:8a:e1:35:06:12:d4:f6:ea:68:9d:a6:55:cc:fc:10:a5:ab:
         d8:32:46:24:0b:5a:d9:f9:9a:a4:75:31:c0:60:95:60:89:63:
         57:cc:27:56:55:09:35:29:d9:d8:eb:49:a4:f0:21:d4:a9:f2:
         9f:73:09:b7:b7:38:77:01:0c:02:73:ed:d3:f3:42:60:4a:5e:
         04:a6:74:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:51:57 2026 by rpki-client