Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
File:                     PE0_sETrHAoRvgYCrO74jl9dLd8.mft (raw, json)
Hash identifier:          u3rEOk9UpSpKRqym5RC39l5RAcqlavtnefGlNAQ4ZNo=
Subject key identifier:   2E:D0:EB:12:EE:31:78:05:69:FC:18:36:53:BD:72:90:71:99:5B:65
Authority key identifier: 3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF
Certificate issuer:       /CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
Certificate serial:       019E1D902C5879D16BD243C3A31F3C647860
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
Manifest number:          13C5
Signing time:             Tue 12 May 2026 19:00:48 +0000
Manifest this update:     Tue 12 May 2026 19:00:48 +0000
Manifest next update:     Wed 13 May 2026 19:00:48 +0000
Files and hashes:         1: 1-HOgfqgF1c2biBD-AElNfVIIn-8.roa (hash: rquQp1RP8UWH3zSrtD5UitItXmlFwyR6n5PUoIakQfM=)
                          2: 3En9ZxdA_9Y7YbhdHSy_ozRVcts.roa (hash: PrZc7gBh863UgF6RDKYSJvpsQyp10e+OlGmMtcslKPQ=)
                          3: E1V1b19ox-LvuRijY9UoK0y3Irs.roa (hash: xEI2Rqw0cuhBI9GdkvhH+W/MRGZrUkysKcXYuHoCxrU=)
                          4: PE0_sETrHAoRvgYCrO74jl9dLd8.crl (hash: JegpnM6aspb03eX0ibMP5x1lMOA2XLn4xCFQRFtUGfw=)
                          5: cIdg71qg6R6Cf1UwQuGnxjPwBGI.roa (hash: jMe0CR6Aea2kIdpRXkGxQhJEmosKzZ2QbxS6+Je/390=)
                          6: y6k3BxxnUy9kVc1135zJn5vDqY4.roa (hash: pFYM4YXhU3j9qQDJy3JbLgytoWaat/MbTIVTE6xML44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:2c:58:79:d1:6b:d2:43:c3:a3:1f:3c:64:78:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
        Validity
            Not Before: May 12 19:00:48 2026 GMT
            Not After : May 13 19:00:48 2026 GMT
        Subject: CN=2ed0eb12ee31780569fc183653bd729071995b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7c:9a:df:78:a3:1c:a1:6a:b9:19:e5:5e:a7:
                    15:74:c2:3c:f6:de:06:f3:02:53:05:8c:2d:2a:40:
                    f0:27:df:17:ed:cf:da:0f:99:d7:c1:f1:f3:0d:82:
                    fb:65:77:4d:e3:a7:5b:e2:ee:86:e3:24:eb:1e:32:
                    e5:b7:74:74:03:3c:de:b8:90:8f:87:1e:c1:3e:e2:
                    4a:a0:24:41:0f:5f:6c:29:35:70:ad:f6:0c:da:2b:
                    e6:a2:5b:ab:5a:54:61:f6:14:78:08:a6:9c:1b:20:
                    05:12:eb:8d:b8:c9:c5:50:0c:42:9f:07:0d:64:e8:
                    49:7b:d6:2a:79:a2:a8:ad:d7:70:a0:1a:54:6d:33:
                    8b:7a:2d:98:86:84:22:76:b5:c6:55:f7:d3:e3:64:
                    94:4e:b8:09:16:22:97:51:7a:64:38:81:34:f2:f7:
                    0e:9d:dd:90:c3:c6:5d:ac:f4:a9:14:5f:50:2d:7f:
                    15:5a:a5:76:67:2b:74:1a:c9:51:85:6c:c6:87:c3:
                    4d:f5:66:f2:37:61:1e:4b:28:84:80:30:eb:9a:0c:
                    85:fa:5d:79:9b:2c:06:7d:ea:92:52:10:f6:5d:75:
                    d7:e1:22:cb:47:5b:43:09:7e:ea:0b:a7:17:3e:01:
                    97:0a:12:c1:da:3b:11:85:6c:0d:c1:7a:00:46:96:
                    fc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D0:EB:12:EE:31:78:05:69:FC:18:36:53:BD:72:90:71:99:5B:65
            X509v3 Authority Key Identifier:
                keyid:3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:7f:e0:61:43:91:4d:61:cc:40:d5:ff:1d:9a:4f:e0:8c:ad:
         1e:08:10:a6:ab:7b:f5:fc:a3:89:21:2f:ea:65:13:09:a0:f6:
         ea:6c:b1:d0:ec:c8:e3:78:c4:74:6b:78:a3:ce:c9:99:cd:7e:
         e4:a7:2a:86:c3:99:de:9e:97:a1:75:80:15:bb:dd:1e:6a:af:
         44:51:da:a0:4c:dd:a7:5e:53:2e:c3:2e:ff:e1:1c:49:34:b3:
         c0:6e:cb:73:2a:f1:ec:b8:12:94:81:68:2d:ae:73:07:38:32:
         b9:49:bf:e2:7a:64:cc:50:4b:d9:19:81:c1:c5:49:21:4b:2d:
         92:39:82:cf:74:8a:17:39:41:28:af:2f:5b:18:8e:6a:e0:cf:
         0e:cc:f3:63:0d:c8:24:5d:30:8b:f1:87:de:fa:b5:3e:1f:5d:
         90:5b:ff:1c:12:6a:b8:26:7e:70:a9:30:5e:20:31:71:dd:40:
         99:56:17:58:f0:d6:16:40:06:95:d8:44:9f:c2:a6:5b:77:e0:
         9d:08:e3:6b:5d:1b:7c:8a:58:6c:31:aa:49:69:fe:e1:9d:bd:
         e4:b2:54:b8:0f:09:38:88:8d:aa:2a:b6:e2:63:4d:5c:ca:8d:
         0c:61:58:1c:77:ec:bd:3b:dc:e0:58:44:7d:90:97:65:d9:bc:
         18:67:49:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:44:26 2026 by rpki-client