Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
File:                     RD7UrkP6GQwQ_SxToQ494KvZi3g.mft (raw, json)
Hash identifier:          SZAdjvFs/pDazKi8PekboK/sadpam/4VZ4SgTW+uaZo=
Subject key identifier:   39:0F:F6:FB:85:0D:09:1E:87:0C:04:72:C5:DF:FB:F1:D9:31:AE:C0
Authority key identifier: 44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78
Certificate issuer:       /CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
Certificate serial:       019E20FF27251810FC3E65806FB50BED6FB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
Manifest number:          127D
Signing time:             Wed 13 May 2026 11:00:53 +0000
Manifest this update:     Wed 13 May 2026 11:00:53 +0000
Manifest next update:     Thu 14 May 2026 11:00:53 +0000
Files and hashes:         1: RD7UrkP6GQwQ_SxToQ494KvZi3g.crl (hash: UKyhjp2gAP3KOsIpHs6Tgp1ynkDYafV681oGgfjIULU=)
                          2: xbkHK9BjxqqWppD29--gfkSmovk.roa (hash: hkkQkmlB4qFZaOaawyBYcXjPEkqDqcjHyvxZakCPMVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:ff:27:25:18:10:fc:3e:65:80:6f:b5:0b:ed:6f:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
        Validity
            Not Before: May 13 11:00:53 2026 GMT
            Not After : May 14 11:00:53 2026 GMT
        Subject: CN=390ff6fb850d091e870c0472c5dffbf1d931aec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:18:43:5a:47:d5:fa:fc:d9:7d:31:65:d8:65:
                    91:e2:b7:3c:96:43:0c:e4:84:72:af:e1:47:f7:89:
                    fc:34:57:87:eb:a9:67:e1:14:ba:12:cf:2e:93:c8:
                    a8:f5:a0:0f:9f:55:59:5a:7f:af:7f:3b:a3:4d:e8:
                    36:c0:ed:68:87:a7:6e:5c:20:95:33:e6:a7:53:db:
                    02:61:76:47:fe:c3:e7:e6:bc:c9:2a:42:af:d8:95:
                    b9:51:11:b7:49:43:eb:6c:fc:7c:7e:ac:69:dd:6f:
                    78:18:31:39:0d:cd:c6:11:89:74:ca:8d:b1:5d:85:
                    07:e7:2e:ef:a5:2b:bb:6c:43:a1:f0:a2:da:03:f9:
                    b1:cb:5f:b7:36:47:a9:49:91:35:a7:cf:90:6a:4c:
                    0e:50:35:33:dc:17:b2:8b:67:01:d0:82:1b:2c:dc:
                    38:2c:85:f0:fd:53:bb:c7:e4:77:16:3a:da:a4:03:
                    5a:41:fa:2e:fc:77:83:c1:de:2e:0f:c5:56:45:9f:
                    03:1a:ad:ae:9c:a7:54:fd:f6:44:a9:dc:dd:cd:e7:
                    92:cc:a6:be:2a:b5:37:1d:58:da:81:7a:cb:d8:d1:
                    d8:07:a7:33:20:01:c7:cf:f9:cf:74:1c:c5:82:48:
                    91:ab:c4:6b:ab:8c:bf:3a:5a:d8:fa:e7:5d:3d:9f:
                    76:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0F:F6:FB:85:0D:09:1E:87:0C:04:72:C5:DF:FB:F1:D9:31:AE:C0
            X509v3 Authority Key Identifier:
                keyid:44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:2e:f8:43:19:94:ae:af:fa:25:a2:4e:c9:4f:74:a8:04:3c:
         32:29:58:89:c3:88:4c:8e:21:d0:0f:88:81:38:59:60:e2:41:
         4a:46:17:30:af:b5:48:18:3c:06:88:b2:9b:fb:f8:62:bd:fb:
         5f:88:61:43:14:92:31:c4:d2:68:82:73:af:54:9c:30:7a:c8:
         55:f2:af:9a:ab:c2:e9:4f:69:32:23:d8:87:59:be:48:a3:6e:
         8f:5e:9a:3a:06:7c:1c:f6:bd:d1:82:d5:5b:4c:6c:e3:80:23:
         6d:d6:e1:f0:f0:e8:e9:3c:48:b2:99:c4:40:a6:e0:4f:5a:77:
         9a:e2:8a:0b:1d:0c:50:ac:ad:d4:17:6f:dc:86:29:a7:44:34:
         0e:da:44:d4:8f:03:55:af:97:3f:b7:86:8a:ec:3b:3c:5a:f8:
         05:7b:aa:e5:15:98:e1:04:d4:47:26:1c:73:a2:f9:27:07:a4:
         a8:51:88:dc:04:88:73:db:4c:fc:8b:11:40:c7:51:15:be:d8:
         99:af:7a:18:82:09:e2:13:ed:23:a8:70:05:4a:a9:c3:ee:7e:
         9d:1e:94:78:17:d5:b3:07:2d:9d:ed:dd:48:18:2c:d6:cc:9f:
         19:43:c6:5a:e9:cd:6c:a6:ae:43:7b:42:b4:63:64:75:51:c0:
         bb:6c:93:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:12:12 2026 by rpki-client