Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
File:                     mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft (raw, json)
Hash identifier:          qfVpfINDPFb7X28MbN6SDYarNBk5J+l9naskNAVeNE8=
Subject key identifier:   29:C3:55:E2:86:98:0D:4E:72:27:A9:11:51:62:88:08:2E:50:BD:ED
Authority key identifier: 99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6
Certificate issuer:       /CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
Certificate serial:       019E1EDA7DAABC79AD1E610E315AAEA2BEC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
Manifest number:          15F5
Signing time:             Wed 13 May 2026 01:01:35 +0000
Manifest this update:     Wed 13 May 2026 01:01:35 +0000
Manifest next update:     Thu 14 May 2026 01:01:35 +0000
Files and hashes:         1: D1heTXn7CKy5zLZ_HwZK9LTU77c.roa (hash: 8+cYEf9ivILDKmKrQsHq9USPOFeHqeF4AHnuJu39UqI=)
                          2: SpSWWIAX_co-S7OGVe4xxOaTumQ.roa (hash: eWFs5jFFJQvUBfi8O0eZY0oTE1BIWFbt9F0ZJ8qa89c=)
                          3: fI9PBxiiMOsKCtnOXwqzP5WZ3iw.roa (hash: y1cXN1mGBdJu2MTeUqDUwC/XHDAJM3lueicXGuEYI3I=)
                          4: lBg3_ekP2XBYVM3th5LmKxYKUuE.roa (hash: DDkeLmqGCMtQYRPOsdUTG5xK68Edb+Mfg+tAtB+HqA8=)
                          5: mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl (hash: Tydxo63J0sA9c3Jch19I9oESAKPLF5HX24owxkEho6I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:7d:aa:bc:79:ad:1e:61:0e:31:5a:ae:a2:be:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
        Validity
            Not Before: May 13 01:01:35 2026 GMT
            Not After : May 14 01:01:35 2026 GMT
        Subject: CN=29c355e286980d4e7227a911516288082e50bded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b3:16:98:02:2d:92:f6:21:8d:2d:48:8d:5b:
                    32:18:68:a7:1f:e4:bd:a3:2f:23:55:f7:b8:df:2d:
                    a3:53:00:65:4b:8a:bb:0d:7a:ee:ef:b0:03:a8:59:
                    0c:e0:97:8f:ad:12:fa:01:a9:80:71:f9:18:44:b7:
                    c5:d3:be:28:32:e4:a7:2a:8b:d0:48:9e:b8:7f:f1:
                    dd:f6:84:6c:66:49:29:ef:1e:64:50:9f:67:d2:f6:
                    d4:b8:9a:c7:b5:45:ff:78:37:29:df:e6:32:16:68:
                    17:72:53:a4:92:03:93:a2:80:76:2e:fa:e5:f6:f0:
                    32:2f:53:54:f4:b8:29:31:45:b2:77:6c:3c:fd:f7:
                    34:1c:60:43:cf:f0:40:71:eb:ee:21:8f:79:53:b5:
                    d9:ed:d1:a6:d0:0f:4c:e3:f1:28:90:0c:7f:6f:f6:
                    9e:74:6a:a2:fa:7a:25:b3:a7:06:68:88:3b:8a:14:
                    20:64:8f:70:bc:03:db:62:04:0b:36:33:23:ad:a1:
                    b7:d4:e0:39:e5:1b:39:06:c6:4a:d1:48:fc:e4:84:
                    39:65:d7:44:c1:5b:8d:61:d5:32:47:96:d4:38:b5:
                    cf:2c:6c:95:4e:db:58:c9:d2:3b:f4:40:b9:16:a8:
                    84:7e:7e:c0:79:ea:88:b8:be:12:a7:f8:b4:36:34:
                    9f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C3:55:E2:86:98:0D:4E:72:27:A9:11:51:62:88:08:2E:50:BD:ED
            X509v3 Authority Key Identifier:
                keyid:99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:4f:1f:31:fe:6d:15:da:c9:82:af:db:62:68:11:e8:9e:50:
         db:20:f9:38:1e:b5:1d:1c:94:82:14:7b:a2:78:95:72:0f:2e:
         0a:09:90:ed:e9:02:f8:a6:4d:f3:f9:cd:df:1b:9e:37:9b:be:
         f3:b1:7e:54:d5:21:ae:2a:f5:41:ec:ce:d3:71:24:6e:3a:4a:
         62:20:0f:fa:bc:cd:9b:42:c4:9b:9b:d3:c6:af:b4:9b:1a:41:
         6e:34:76:71:8b:20:ef:99:69:2d:57:ea:d9:05:a1:c7:2f:dd:
         7c:ec:ca:5e:49:5a:08:35:21:0d:72:81:14:99:0d:5d:eb:df:
         e3:8e:75:91:50:eb:f1:63:84:30:ef:32:65:3e:54:c8:49:4b:
         7d:64:1f:11:f1:14:7f:ef:95:e7:88:33:b5:23:e0:22:21:b2:
         5b:2a:c7:76:63:c2:1f:b9:7b:ac:9c:60:1b:62:94:f6:5d:1c:
         1e:2c:b7:4e:ea:19:96:12:cc:0c:89:d8:a4:11:1a:e6:f6:95:
         54:ba:fb:96:3a:00:a7:74:b3:ac:bd:c4:e5:96:68:ec:3d:40:
         a8:2a:75:9c:4f:df:13:c7:9d:c9:5b:2f:ed:79:4f:e3:c6:bc:
         12:67:78:55:b3:ae:15:b9:f8:93:c3:6c:ff:52:64:30:43:0e:
         be:56:84:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:30:44 2026 by rpki-client