Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
File:                     sRI3DKJgErTR0BVM73IwvYmluV0.mft (raw, json)
Hash identifier:          DYsdtz9hIcS9QxsxqhEBpKBcKUq3XfkBWh/LwyNnuNI=
Subject key identifier:   24:BB:31:4A:51:0C:F8:4E:5E:E9:1A:89:17:35:D1:C8:79:C0:6F:8F
Authority key identifier: B1:12:37:0C:A2:60:12:B4:D1:D0:15:4C:EF:72:30:BD:89:A5:B9:5D
Certificate issuer:       /CN=b112370ca26012b4d1d0154cef7230bd89a5b95d
Certificate serial:       019E202398E3FBDD78904C3BFB1ACFEC6F6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sRI3DKJgErTR0BVM73IwvYmluV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
Manifest number:          C5
Signing time:             Wed 13 May 2026 07:01:04 +0000
Manifest this update:     Wed 13 May 2026 07:01:04 +0000
Manifest next update:     Thu 14 May 2026 07:01:04 +0000
Files and hashes:         1: JQHbkZiCoz_ArYL3K_jRaitcYso.roa (hash: LSS9szWjmAex/d/OuZRvWyhXy/Z+aR2BRiVKGpC62GY=)
                          2: sRI3DKJgErTR0BVM73IwvYmluV0.crl (hash: u/Krx/QfvWfA0X8tuZ/HT8IE8iYa0zrUXyWcj5/MSVw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sRI3DKJgErTR0BVM73IwvYmluV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:23:98:e3:fb:dd:78:90:4c:3b:fb:1a:cf:ec:6f:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b112370ca26012b4d1d0154cef7230bd89a5b95d
        Validity
            Not Before: May 13 07:01:04 2026 GMT
            Not After : May 14 07:01:04 2026 GMT
        Subject: CN=24bb314a510cf84e5ee91a891735d1c879c06f8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:40:44:94:c8:18:46:b2:56:e0:39:1f:69:6e:
                    66:be:75:71:04:3d:c3:f0:74:1b:df:b2:01:22:57:
                    75:18:9f:83:bf:65:2f:3a:e0:f8:e2:2b:cd:eb:13:
                    14:7d:37:92:c7:7f:d9:c5:88:7f:5b:95:18:e3:0c:
                    b0:bf:c2:6c:17:0e:c3:54:96:bb:4c:96:fa:6b:da:
                    6b:55:a4:c9:32:74:53:27:44:a8:69:10:00:d6:f0:
                    60:9e:99:29:41:16:23:bc:e3:ef:af:61:f2:05:3d:
                    4c:6a:e6:eb:ae:6a:48:ea:fb:8e:d7:a5:0f:6a:4e:
                    ec:97:33:f9:0e:b2:0d:66:68:9c:9d:b7:2d:63:13:
                    cc:bf:4e:f3:c3:8e:18:da:6b:07:71:69:3f:7e:88:
                    ec:d0:a2:ab:73:63:a5:82:6d:7f:35:47:27:1d:8a:
                    2b:ef:ff:ae:fa:df:8f:37:7a:58:61:cc:09:61:e5:
                    dc:76:e9:c3:8d:1a:41:42:3f:52:c3:f9:fe:df:c8:
                    ed:77:d1:d1:81:ea:7f:9f:db:bc:a1:a2:c7:67:d1:
                    f0:82:81:a2:c5:c1:7c:a2:00:aa:0d:0f:40:a6:c4:
                    cf:de:64:f6:ba:c0:3c:1e:4d:a8:6a:7e:b7:f3:f2:
                    ff:de:82:cf:0f:0d:4e:d3:80:c9:85:e3:d9:12:4b:
                    63:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:BB:31:4A:51:0C:F8:4E:5E:E9:1A:89:17:35:D1:C8:79:C0:6F:8F
            X509v3 Authority Key Identifier:
                keyid:B1:12:37:0C:A2:60:12:B4:D1:D0:15:4C:EF:72:30:BD:89:A5:B9:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRI3DKJgErTR0BVM73IwvYmluV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:59:b4:35:8d:77:86:18:16:65:85:68:b6:df:65:71:e2:5b:
         43:fd:bb:c3:99:d5:0f:67:15:9b:57:3b:2d:e2:f8:cb:34:79:
         f5:4c:4f:79:f6:85:9f:24:ef:db:56:0b:92:09:ec:93:81:76:
         bb:13:02:34:aa:23:18:87:4a:bb:8c:85:30:8d:23:63:36:cc:
         c5:2a:b7:74:10:52:ac:ae:ca:62:99:c7:81:fd:02:5b:bc:5b:
         dd:77:59:16:69:65:dd:df:4b:54:c3:90:97:8a:53:25:c0:7a:
         3f:da:a7:65:73:c0:0a:a8:65:33:97:eb:82:43:93:fb:0b:de:
         71:1a:2f:6c:ab:5c:e4:c3:12:0d:03:2e:c8:e0:f4:ab:2d:e8:
         df:85:d9:e0:d9:98:a4:a6:b3:ae:db:f9:6d:a3:a0:27:dd:bc:
         ea:cb:20:13:fd:12:67:83:32:0b:7e:bd:b5:64:3f:7c:a2:4f:
         67:83:6f:c6:7e:17:6c:67:15:06:b6:82:b0:da:bb:25:28:9a:
         68:19:c0:9d:01:5e:81:04:4c:29:a5:53:68:78:45:53:64:0e:
         cd:b3:e4:26:86:a2:19:ad:03:29:0c:fc:d3:ec:cc:7e:cf:96:
         70:87:4c:78:cf:24:87:a0:59:4e:7f:1c:8c:c6:db:a1:05:36:
         4f:63:03:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:28 2026 by rpki-client