Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft
File:                     Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft (raw, json)
Hash identifier:          lmnAsHXfPjE6uwNYk1KR4SG+jpvQBhvqW7CDNT9gStg=
Subject key identifier:   D2:41:F8:A1:BE:27:18:82:0B:B9:5E:74:EC:E7:34:E1:F4:59:51:64
Authority key identifier: 16:9E:A0:27:5C:76:5E:17:60:3E:B5:9E:EF:39:E2:FA:B5:38:0E:F0
Certificate issuer:       /CN=169ea0275c765e17603eb59eef39e2fab5380ef0
Certificate serial:       019E1F10CB8A7BB414483747A0AB5B60CFA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft
Manifest number:          0D7D
Signing time:             Wed 13 May 2026 02:00:54 +0000
Manifest this update:     Wed 13 May 2026 02:00:54 +0000
Manifest next update:     Thu 14 May 2026 02:00:54 +0000
Files and hashes:         1: Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl (hash: 7Oam0nAMj6RQgPsplvg8meLuxzzgLxrKEnD2xqc4+Xw=)
                          2: jPp4Av3P5IVYrkqxOGqhOqwt480.roa (hash: cRa8LYV5Wo5t1Qa11CdMWIS8CjSo634/LpDIUbcvW3w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:cb:8a:7b:b4:14:48:37:47:a0:ab:5b:60:cf:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=169ea0275c765e17603eb59eef39e2fab5380ef0
        Validity
            Not Before: May 13 02:00:54 2026 GMT
            Not After : May 14 02:00:54 2026 GMT
        Subject: CN=d241f8a1be2718820bb95e74ece734e1f4595164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:91:b6:89:ff:6f:86:97:7b:2f:e3:49:21:01:
                    ee:14:14:b3:a8:20:e2:de:f9:59:f1:98:a8:cf:36:
                    9e:f4:0f:57:d1:4b:6a:64:6b:a2:9c:f8:ce:d2:89:
                    66:58:fe:c8:6c:d5:ef:bc:30:bf:6b:c8:3f:02:d7:
                    91:3d:00:b6:82:1d:06:3c:81:04:f1:5d:cd:b9:87:
                    63:68:20:ff:20:c5:85:61:9e:05:07:bb:8a:3a:37:
                    08:28:78:39:f9:3a:d4:c3:f2:d7:d2:3f:a4:76:7e:
                    ae:ce:94:d0:1a:c1:e6:10:1b:d7:46:5a:ee:0c:e1:
                    4c:b6:18:f6:45:f7:cc:03:d7:89:66:ac:32:7e:bd:
                    a7:88:50:f7:a6:92:85:7e:42:d2:c1:93:94:b8:a8:
                    b2:2e:aa:bc:9b:65:c4:3d:2e:e4:ca:0a:7e:ec:f8:
                    a2:b2:04:63:6a:be:3e:21:89:f0:94:a7:c5:48:9f:
                    d1:05:c1:20:ae:1c:da:05:5c:ce:57:a4:bd:3b:b6:
                    9b:e8:86:36:9e:0d:d4:ef:d8:3d:ca:47:a9:2f:40:
                    c6:c3:8b:9f:ec:f1:9d:a3:fb:c4:61:c9:87:77:90:
                    8f:68:b1:42:e2:62:74:83:78:2a:d2:d7:ad:b7:59:
                    94:2e:89:49:55:9d:ad:fb:34:43:68:c1:46:fa:0a:
                    d9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:41:F8:A1:BE:27:18:82:0B:B9:5E:74:EC:E7:34:E1:F4:59:51:64
            X509v3 Authority Key Identifier:
                keyid:16:9E:A0:27:5C:76:5E:17:60:3E:B5:9E:EF:39:E2:FA:B5:38:0E:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:e3:86:54:bb:da:55:72:c8:05:c4:b8:aa:2a:6b:17:21:71:
         ec:f9:34:ae:f7:55:90:0d:4c:99:77:89:d0:60:70:46:61:13:
         68:1c:e5:47:29:5a:d5:84:5d:40:ce:46:3c:d6:41:91:c7:1e:
         e5:0e:c6:e6:a3:7e:97:99:a8:74:38:2b:45:35:b4:a7:f1:2b:
         fb:3d:87:22:a6:66:ed:e7:84:c3:01:85:aa:c8:c5:d2:30:ed:
         39:63:82:7b:0c:41:b9:f1:8e:51:68:47:11:24:28:4e:be:e5:
         52:3e:56:db:82:7d:97:57:62:e2:79:37:9c:31:7e:26:a2:18:
         19:81:de:50:c7:7b:50:50:02:21:59:29:c2:ae:31:d8:90:a1:
         f8:4f:e6:da:49:78:99:91:93:1a:67:41:81:6e:2f:d4:a4:f1:
         a2:cf:e1:77:cd:7d:08:c8:39:91:68:2b:4d:c2:0a:2f:00:45:
         dc:1c:90:f4:0c:18:47:c8:31:7e:45:68:64:49:2e:89:29:93:
         ff:50:4e:06:0c:b8:d1:76:30:17:e6:6c:31:6d:62:71:29:95:
         b1:ff:30:72:f4:71:78:64:a9:b1:8e:df:d5:a1:cf:60:9a:e4:
         26:96:fc:f2:96:a1:1f:c5:47:5e:a2:01:d6:9b:a3:81:56:fb:
         f6:b4:16:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:04:21 2026 by rpki-client