Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
File:                     4QhbYki9cgdqtCH_oOO_75NWXp0.mft (raw, json)
Hash identifier:          jHvSaOeW96Rz+9TJWCUEyCVx0xcJw9/NbfHqn9+m9Tk=
Subject key identifier:   F3:0F:22:9B:B0:D7:CC:96:47:29:66:01:41:43:F7:21:24:E9:38:05
Authority key identifier: E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
Certificate issuer:       /CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Certificate serial:       019E1E35C4CA272AC37664BD0232F711A37F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
Manifest number:          0E5E
Signing time:             Tue 12 May 2026 22:01:40 +0000
Manifest this update:     Tue 12 May 2026 22:01:40 +0000
Manifest next update:     Wed 13 May 2026 22:01:40 +0000
Files and hashes:         1: 4QhbYki9cgdqtCH_oOO_75NWXp0.crl (hash: kd98/QTZ8AJcekKSI9wIu6qR8jtuPQWw+pWd92FnhrU=)
                          2: QtPhnyLsRRN8U6hpcPXp4Z0oWqY.roa (hash: i0nu2P6NxLQ5ERHa8d6GR72neeBYjpf7KkNPNvBe0Gs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:c4:ca:27:2a:c3:76:64:bd:02:32:f7:11:a3:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
        Validity
            Not Before: May 12 22:01:40 2026 GMT
            Not After : May 13 22:01:40 2026 GMT
        Subject: CN=f30f229bb0d7cc96472966014143f72124e93805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ad:6a:29:d5:6c:81:ac:16:85:2b:05:23:17:
                    7e:24:cf:4b:47:16:27:c3:e2:e2:51:bd:67:19:b8:
                    fb:c1:6a:f2:68:35:fc:88:bb:f1:18:0e:0f:a5:74:
                    bd:c2:4e:11:59:da:06:99:71:b0:e5:5d:61:f9:92:
                    c8:7c:cd:3e:03:31:38:1a:e8:4b:cf:72:e8:78:89:
                    4e:21:0b:46:c1:2b:70:7f:7c:db:dc:cb:06:1f:51:
                    0b:3c:e1:23:17:3a:b2:cd:ae:05:c9:34:42:5c:8c:
                    95:04:4d:86:4f:6e:03:ef:7e:65:87:1c:70:90:18:
                    e6:de:57:19:a3:d1:f5:8a:e8:b2:89:cc:a7:77:73:
                    e3:0a:6b:2b:45:b5:f4:09:40:8f:3d:61:d0:f8:81:
                    05:d8:71:e2:f6:8a:f7:02:77:d3:51:b2:ee:51:dc:
                    56:c5:b5:39:30:01:91:39:9b:79:39:04:e4:bb:95:
                    11:34:ad:cf:90:5c:89:1a:94:fd:7b:15:bd:a2:b4:
                    ca:ad:4a:55:8c:f5:24:d5:94:2d:72:6a:70:7f:ef:
                    7d:6e:da:8c:14:4b:c7:f4:e7:5f:91:59:4e:40:36:
                    3a:b4:74:b7:cd:22:0b:00:db:63:50:94:c0:1e:d9:
                    b2:db:ec:9c:65:33:a6:9e:6b:04:4d:43:5d:57:88:
                    7c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:0F:22:9B:B0:D7:CC:96:47:29:66:01:41:43:F7:21:24:E9:38:05
            X509v3 Authority Key Identifier:
                keyid:E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:e7:db:b8:51:30:55:ee:6b:61:ed:69:c4:0b:11:0b:36:30:
         bb:de:7c:47:12:8d:90:92:20:23:56:56:89:ec:be:3e:65:43:
         55:ee:55:fa:28:ef:57:fd:d0:61:c2:12:c5:db:00:9c:3a:5e:
         dd:02:a5:02:ef:21:43:56:72:c6:3d:89:3a:4d:95:d3:e8:66:
         01:5a:7b:df:c6:d4:87:30:1b:05:d8:2c:c9:c1:22:dd:e4:f8:
         2c:f3:86:c5:93:cd:5e:fd:27:85:43:46:2e:6d:5a:8f:29:f2:
         9a:88:cb:39:99:99:e4:10:3d:4d:78:43:44:25:a8:3f:7f:a2:
         1b:79:4c:bd:70:e7:64:af:e7:1b:c3:ec:ee:71:ec:4b:a2:52:
         ed:ed:82:3c:b7:6c:e0:58:c5:85:91:fe:fc:8b:57:23:89:a0:
         c1:87:8e:65:31:b4:ed:5c:bb:4f:b2:3b:e8:45:5b:8c:99:37:
         86:e8:3e:0f:e5:1f:7f:0b:1d:1e:53:43:6a:60:d5:c3:b3:76:
         11:6c:f3:04:bb:c1:85:ce:4d:19:17:93:54:49:33:13:5d:da:
         f9:e7:d7:80:ea:3b:b9:33:f1:17:0d:22:41:d3:0f:d4:70:29:
         fb:95:db:3d:8a:19:29:c2:5c:67:d1:3e:5b:51:36:df:4e:34:
         22:11:34:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:52:53 2026 by rpki-client