Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
File:                     52CwD7DMWV_lQtYibj8KPlFl8cw.mft (raw, json)
Hash identifier:          vG8ZkzN0CaXkSa7Tq5Vh9TuYlrfyUf+wR4XAKZP3qLw=
Subject key identifier:   24:55:E6:8D:69:62:F5:89:21:96:69:20:78:ED:8E:C7:AB:06:61:91
Authority key identifier: E7:60:B0:0F:B0:CC:59:5F:E5:42:D6:22:6E:3F:0A:3E:51:65:F1:CC
Certificate issuer:       /CN=e760b00fb0cc595fe542d6226e3f0a3e5165f1cc
Certificate serial:       019E1C0F82F56FD4C857E91845C68B829D3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
Manifest number:          08AF
Signing time:             Tue 12 May 2026 12:00:39 +0000
Manifest this update:     Tue 12 May 2026 12:00:39 +0000
Manifest next update:     Wed 13 May 2026 12:00:39 +0000
Files and hashes:         1: 52CwD7DMWV_lQtYibj8KPlFl8cw.crl (hash: rgWKn4RZVhMXXPgrvH1NWzKZLEA2PLCd+cXKNEJa9R0=)
                          2: 5rrj-m_hEB0TpNnz9CK4K7DwWl8.roa (hash: 9owh74vfAaCJ/1OVELmifFfpJ8uxpYLTHNGPMitNfLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:0f:82:f5:6f:d4:c8:57:e9:18:45:c6:8b:82:9d:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e760b00fb0cc595fe542d6226e3f0a3e5165f1cc
        Validity
            Not Before: May 12 12:00:39 2026 GMT
            Not After : May 13 12:00:39 2026 GMT
        Subject: CN=2455e68d6962f5892196692078ed8ec7ab066191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a8:39:49:9e:0a:f2:79:91:bb:e2:f5:09:7d:
                    1b:c9:2d:1b:d2:6e:b9:7b:98:14:91:b1:7e:c1:a5:
                    2b:e3:80:b9:c2:9c:66:bc:13:e0:0b:74:f5:ec:33:
                    f3:32:a5:f8:5a:08:2f:06:18:24:77:0c:e0:5d:55:
                    ae:b1:f5:3b:3e:b1:c9:05:03:62:1a:2b:fc:f7:53:
                    1e:ce:c8:b2:cf:9b:ba:ef:52:15:77:46:56:43:94:
                    02:ac:bb:c3:f4:04:8d:70:4e:6a:46:48:ae:79:78:
                    c7:70:1e:1f:ff:81:29:8a:e3:23:10:52:49:0f:fc:
                    8b:cb:0e:f9:34:76:89:16:9c:3c:2f:b9:e9:6c:1f:
                    1f:83:ff:bc:b5:d1:63:cf:58:44:59:af:15:bf:8b:
                    0a:fe:ef:fd:0f:e9:62:80:78:1c:64:c4:0c:ad:a9:
                    8e:82:b7:e8:34:1d:59:1a:cc:ad:24:4b:86:a8:2e:
                    a0:2a:b7:38:57:c5:98:c7:13:1d:14:7d:11:be:c1:
                    dd:d3:91:76:ff:1c:dd:e9:97:ee:a0:0d:78:58:2d:
                    54:08:02:30:99:25:b0:8b:e1:d2:9f:91:5d:6b:30:
                    1e:b6:5f:e4:51:27:f3:2e:33:7b:0e:6d:0e:d5:7e:
                    65:87:a3:fd:09:7f:f5:97:69:8e:e6:8b:3a:0e:9f:
                    db:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:55:E6:8D:69:62:F5:89:21:96:69:20:78:ED:8E:C7:AB:06:61:91
            X509v3 Authority Key Identifier:
                keyid:E7:60:B0:0F:B0:CC:59:5F:E5:42:D6:22:6E:3F:0A:3E:51:65:F1:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:74:af:a5:03:1d:98:61:68:33:8f:4b:52:96:de:bc:0f:f9:
         3b:72:9d:89:c9:23:93:38:37:61:44:03:4b:a0:35:03:47:8a:
         0e:39:3e:09:e4:8a:16:a3:88:81:2e:56:4d:27:04:e1:d8:d6:
         e5:31:0f:c8:51:13:c1:74:ad:55:d6:ce:05:bc:d3:ed:1e:49:
         16:af:89:ae:4b:f9:a5:a7:64:b6:58:d8:ef:64:8c:93:71:1a:
         6b:08:b8:83:21:79:62:2b:71:b1:4c:37:48:32:8c:92:4b:de:
         7d:c4:13:57:b5:87:15:3a:ca:2d:ed:f4:11:c9:f0:b2:94:23:
         de:50:ca:fc:a9:54:78:d9:9f:09:ca:a1:55:78:6d:ec:3c:71:
         b6:4a:50:7a:c1:d6:93:36:58:76:20:6c:f9:d1:af:97:d2:91:
         6b:26:30:cb:e3:84:d0:b7:74:7a:1e:f2:36:33:c7:78:79:e8:
         63:e1:76:0c:4d:86:15:4f:9b:db:f5:55:af:5e:72:89:d0:65:
         5a:58:1a:9d:0f:22:29:54:f7:ba:ac:ea:e9:28:3c:e6:fa:a7:
         77:36:1c:56:b3:d4:94:ec:ef:25:cd:e8:34:cd:57:ce:04:fa:
         cd:cb:7b:56:6d:99:29:9f:36:8f:48:9a:3b:d8:fa:f4:1e:07:
         31:fa:ae:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:31:20 2026 by rpki-client