Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
File:                     CWbgXRUnUN-q3l-veRutOR3G0tQ.mft (raw, json)
Hash identifier:          6YOS7x+LbSt3l9tOusCAanIaFUp3o0jtZPG1q9AtD9c=
Subject key identifier:   EF:D8:30:C9:EF:B8:D8:34:3B:23:34:98:83:39:B4:6E:53:3B:92:AD
Authority key identifier: 09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
Certificate issuer:       /CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Certificate serial:       019E1ED9C532CD91C8519D52F458AA54762E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
Manifest number:          1148
Signing time:             Wed 13 May 2026 01:00:48 +0000
Manifest this update:     Wed 13 May 2026 01:00:48 +0000
Manifest next update:     Thu 14 May 2026 01:00:48 +0000
Files and hashes:         1: CWbgXRUnUN-q3l-veRutOR3G0tQ.crl (hash: SBCuM8IIHLN0oGZn95eElDvKAYG1Sbt3Z0TeOLzFq5k=)
                          2: VvLHzr3zCOAlK7-AXr_k4lfnOVQ.roa (hash: K7rgIOGpP+zDsf8T3qgiqdA3/otSoFPMZHtAoCJ/7Q4=)
                          3: fLM3lMDOIHwMeEuupYXPThUldrU.roa (hash: LE/OpJSbb472I3p+Lhs1DmaGG8pkRz+JrIDCohhLEEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:c5:32:cd:91:c8:51:9d:52:f4:58:aa:54:76:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0966e05d152750dfaade5faf791bad391dc6d2d4
        Validity
            Not Before: May 13 01:00:48 2026 GMT
            Not After : May 14 01:00:48 2026 GMT
        Subject: CN=efd830c9efb8d8343b2334988339b46e533b92ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:51:58:09:fc:d8:34:53:74:51:9d:f9:70:cc:
                    91:85:50:4f:5f:34:4c:50:eb:3c:9a:9a:ba:8b:ae:
                    ed:eb:cd:47:eb:0a:4b:f0:1d:90:cd:5b:e6:70:58:
                    63:5a:ec:a2:6d:71:fb:6e:0b:22:5f:a7:b3:b5:d0:
                    7c:45:e3:21:1a:c8:ec:ee:4c:82:5c:70:49:d2:54:
                    f2:9e:65:85:03:0d:1e:70:80:96:b6:a7:8a:d6:12:
                    78:cd:42:87:d0:ac:b7:1c:e3:bb:7a:5a:c2:5e:ce:
                    37:28:d6:2b:14:20:e3:27:e8:b8:8a:69:be:48:ff:
                    70:85:52:5d:2c:19:bd:42:ec:cb:6d:df:7e:3d:d7:
                    0d:c5:f8:3f:38:c7:ca:1c:65:7b:0c:13:5e:78:91:
                    9a:3d:bc:4d:20:f6:e8:ae:51:99:15:71:a0:88:8d:
                    c6:34:fd:f6:0b:3a:bc:c9:c4:cb:bf:c7:5d:e5:1f:
                    95:87:5b:78:d8:6b:e2:61:2a:a6:a7:69:89:99:16:
                    a7:83:17:7e:25:d7:a2:40:1e:6c:01:83:a5:4c:c1:
                    94:bd:34:7f:61:c6:a2:17:d2:f2:f2:33:49:0b:d6:
                    fb:68:12:a6:80:7b:52:73:ee:17:11:a9:9f:ca:b7:
                    04:9c:28:cf:7f:ca:ff:8e:e1:20:cd:71:bc:bb:74:
                    7b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D8:30:C9:EF:B8:D8:34:3B:23:34:98:83:39:B4:6E:53:3B:92:AD
            X509v3 Authority Key Identifier:
                keyid:09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:75:62:cb:51:e2:0a:ee:ec:f4:19:db:02:9c:02:54:45:75:
         e1:3a:96:29:fc:4a:14:62:f9:90:4e:1f:d0:37:ad:23:a2:fe:
         2c:21:2f:7e:58:7d:80:94:1e:65:fa:12:de:17:55:ce:78:1b:
         48:a1:60:bf:db:37:c9:00:c8:51:84:dd:29:8c:4a:0a:32:c2:
         dd:4f:67:8a:e0:67:d7:f2:b7:45:2f:66:e3:2a:88:10:fe:13:
         fc:42:c6:73:cf:7c:e6:13:ea:4d:41:fc:b5:97:93:75:fa:ac:
         4e:bc:21:20:49:01:a8:c8:a5:e8:7b:87:27:b9:03:dd:96:8a:
         ee:18:af:89:74:cc:cf:79:56:c4:fe:75:bf:4d:cd:0f:01:87:
         96:6a:d3:f4:8e:a0:0d:17:57:b7:e0:55:0b:51:51:cc:f0:ae:
         43:e7:89:40:c5:52:7c:26:4c:18:e5:06:3c:1e:86:97:a7:a4:
         cb:af:88:db:e1:9c:f4:63:79:1a:ce:ea:39:d8:72:ad:a8:e8:
         57:bc:2b:45:3c:0b:a9:4f:95:0e:4d:b2:39:1d:c1:47:48:33:
         ad:eb:65:c5:2a:8d:f0:b9:0c:95:2b:9d:d9:da:0b:52:7a:02:
         9e:7c:97:1d:94:6e:e5:91:7a:fc:e8:cc:e8:ca:90:aa:5a:6c:
         84:0b:23:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:43:06 2026 by rpki-client