Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft
File:                     1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft (raw, json)
Hash identifier:          pFHro6bd6l2RoDFukeXp6w6/dw9uAlG8/UFqECIr9BM=
Subject key identifier:   B0:4F:3A:7C:0A:CA:45:E4:83:0E:62:DA:8F:E4:4C:EA:74:04:06:15
Authority key identifier: D5:9D:3B:8B:04:4F:1D:35:FF:27:19:0B:75:75:F3:08:06:B1:13:27
Certificate issuer:       /CN=d59d3b8b044f1d35ff27190b7575f30806b11327
Certificate serial:       019E1D22E600A33A21ECCFECC81F39DEFF85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Z07iwRPHTX_JxkLdXXzCAaxEyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft
Manifest number:          1457
Signing time:             Tue 12 May 2026 17:01:26 +0000
Manifest this update:     Tue 12 May 2026 17:01:26 +0000
Manifest next update:     Wed 13 May 2026 17:01:26 +0000
Files and hashes:         1: 1Z07iwRPHTX_JxkLdXXzCAaxEyc.crl (hash: j66gMfFv6w4vuSLpJKIYos+CMgUAwwL/wfqNNMmaffQ=)
                          2: svPKQJREMYzzw4nrwOykMCA6_Ws.roa (hash: OO4K57XkP/w3/FtcBT7vUzOVhuobiN05zaoo8Wri7/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Z07iwRPHTX_JxkLdXXzCAaxEyc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:e6:00:a3:3a:21:ec:cf:ec:c8:1f:39:de:ff:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d59d3b8b044f1d35ff27190b7575f30806b11327
        Validity
            Not Before: May 12 17:01:26 2026 GMT
            Not After : May 13 17:01:26 2026 GMT
        Subject: CN=b04f3a7c0aca45e4830e62da8fe44cea74040615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:19:f1:5e:a7:76:df:d7:b2:78:73:c5:dc:24:
                    fc:6e:67:e7:52:a8:21:2b:bb:06:3e:3c:f4:de:94:
                    f4:49:6b:fd:ca:79:9d:0a:f2:3e:43:c2:c0:33:bf:
                    25:2e:f3:ba:61:d5:1c:d1:0e:0e:33:50:ba:0d:12:
                    60:0f:31:3a:cc:7d:60:9e:e3:25:04:09:11:11:16:
                    11:06:1d:82:65:d1:77:29:a0:67:1f:d9:35:0c:92:
                    96:76:b5:71:4c:95:5c:f5:ce:b6:50:dc:bd:53:a6:
                    f5:17:69:1a:8b:c2:f3:0c:05:62:98:d6:33:ed:67:
                    df:62:78:b5:69:a0:0e:8a:5c:f5:d5:bf:44:f8:2c:
                    ea:81:fe:e8:43:6a:f7:f6:d4:1c:67:10:22:c7:8a:
                    ab:8f:e1:4c:26:8a:14:87:0d:6c:33:b6:0c:d5:70:
                    9a:3b:44:d6:61:d1:1b:3c:c1:13:80:5f:26:a8:ee:
                    8d:de:32:6e:43:cf:24:86:c1:3f:01:38:e4:71:29:
                    e6:48:3f:02:1a:69:52:a3:9e:a4:8b:fe:b2:68:a4:
                    65:f7:6b:ad:3b:93:e0:df:10:56:20:6f:73:bd:14:
                    fe:b1:f2:bf:43:95:46:7a:d8:d7:58:57:bc:33:5a:
                    bf:f3:be:37:5c:7a:50:d2:18:12:54:50:b6:54:95:
                    79:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:4F:3A:7C:0A:CA:45:E4:83:0E:62:DA:8F:E4:4C:EA:74:04:06:15
            X509v3 Authority Key Identifier:
                keyid:D5:9D:3B:8B:04:4F:1D:35:FF:27:19:0B:75:75:F3:08:06:B1:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Z07iwRPHTX_JxkLdXXzCAaxEyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:b5:96:37:7a:90:a5:ab:b5:46:f0:12:80:94:9d:13:8b:96:
         ef:4d:eb:d8:30:56:90:1c:f1:02:a0:bc:32:a1:74:26:43:b7:
         ea:ed:d8:1e:75:33:1d:6e:ab:9b:31:5f:1c:47:22:91:e0:5d:
         fd:54:11:04:ad:d2:21:cf:f0:7f:ae:77:c9:96:5a:89:6b:07:
         7d:1b:90:84:d2:23:32:53:18:52:29:ba:a9:5c:35:21:ea:f8:
         22:eb:bd:92:17:66:9e:3f:17:d1:47:83:5c:07:3a:89:5a:b2:
         39:2a:fe:c5:dd:a3:bb:d4:f2:29:92:77:53:cc:6d:75:86:cd:
         37:08:ac:ac:1a:c8:13:eb:f0:b9:38:5f:20:c1:a4:88:e1:a1:
         56:a0:26:51:c3:a9:ca:d0:0d:7f:62:a1:db:8d:94:46:7e:dd:
         8d:dd:e6:ee:a4:a0:9a:1f:d6:93:8c:69:8a:0d:de:7f:27:4e:
         59:d4:fa:ac:cd:d7:94:69:49:f1:71:31:6b:3b:3a:b3:a0:88:
         ce:9a:ed:0f:80:53:6f:48:c8:03:18:a6:ae:09:8d:3e:bc:7f:
         a6:f0:ff:24:fc:cb:f9:2d:71:58:62:5c:7b:7b:58:9b:19:c9:
         38:99:bb:b8:25:95:1e:45:41:9f:0e:ad:c9:56:8d:f9:03:20:
         98:8f:7a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:33:43 2026 by rpki-client