Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
File:                     cFUm-asN0naCP8Hw66od5jt9ZWw.mft (raw, json)
Hash identifier:          +zqxs3UdysWSZeOCmXHK7GmOdISa3FP6/FyZ6hYEczk=
Subject key identifier:   DB:7D:71:17:5D:C5:79:6F:C7:5C:2A:F6:93:D5:4B:03:79:37:27:4B
Authority key identifier: 70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C
Certificate issuer:       /CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c
Certificate serial:       019E2024681747CE24D431486F6415F056E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
Manifest number:          0770
Signing time:             Wed 13 May 2026 07:01:57 +0000
Manifest this update:     Wed 13 May 2026 07:01:57 +0000
Manifest next update:     Thu 14 May 2026 07:01:57 +0000
Files and hashes:         1: cFUm-asN0naCP8Hw66od5jt9ZWw.crl (hash: p5kX3Suf6faDQGnNNtL/HFdK7rNxQvBKjgivwKVKDFg=)
                          2: utX8EvzxjtNKF1hFOEPAnrUCzm8.roa (hash: klBKnxuMcoS0m9Xk0/1QlfvOXmiMTMvpWtNw0ziiP1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:24:68:17:47:ce:24:d4:31:48:6f:64:15:f0:56:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c
        Validity
            Not Before: May 13 07:01:57 2026 GMT
            Not After : May 14 07:01:57 2026 GMT
        Subject: CN=db7d71175dc5796fc75c2af693d54b037937274b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c6:a4:db:4a:f7:16:34:93:15:8e:25:7e:81:
                    e5:8d:9a:bf:29:3e:d4:a5:20:6b:87:c2:4c:e3:ee:
                    3d:59:8c:4b:14:e0:87:45:b4:cd:47:89:91:7d:b5:
                    e3:b6:19:e9:fe:2d:01:9b:7b:d4:d2:a2:56:ca:ad:
                    cd:20:69:ac:84:af:0b:e7:07:03:d1:40:e8:5e:33:
                    bd:2f:f6:c3:6f:26:eb:0c:da:8b:21:fc:a4:c8:34:
                    65:1c:25:93:1b:1d:39:89:32:75:3a:8d:52:53:77:
                    40:b9:65:92:c6:c6:df:9a:83:79:dd:62:08:ab:17:
                    3e:0f:0a:8c:03:5e:ab:f9:12:52:e3:b3:f5:8e:ae:
                    f2:14:f1:36:55:84:c2:5d:7f:54:1d:43:19:5e:34:
                    14:e5:0a:ff:2e:cc:93:2e:5b:84:c4:52:af:cd:98:
                    03:59:aa:a8:c7:4e:97:db:68:c7:f1:f3:77:ef:8e:
                    81:b6:4b:d0:03:65:75:28:7f:09:19:de:28:86:fd:
                    2f:ba:85:05:8e:7c:d0:97:c7:28:b2:c0:cd:64:73:
                    a3:87:df:32:14:69:fd:a3:95:b6:5e:e9:b7:0c:d9:
                    20:c8:e8:68:e1:49:d0:bb:d5:3c:1f:e7:02:60:19:
                    4e:ae:a2:8d:b0:27:9b:32:8e:49:45:96:fe:2b:b9:
                    9f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:7D:71:17:5D:C5:79:6F:C7:5C:2A:F6:93:D5:4B:03:79:37:27:4B
            X509v3 Authority Key Identifier:
                keyid:70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:e1:4e:70:e2:da:60:ac:6c:96:2e:45:7f:81:81:8f:4f:6d:
         b9:3b:da:d5:4d:fb:eb:87:2f:b2:4c:e9:ea:26:cc:0b:44:80:
         00:02:90:66:71:73:34:22:e0:3c:cb:8d:df:67:75:c0:95:c6:
         c0:3b:25:6a:4e:f4:30:d3:8d:c9:e3:c3:10:27:ab:78:d2:ea:
         39:c8:6b:9f:ba:df:8c:3b:60:7b:1b:d5:ec:da:aa:f2:26:61:
         1e:61:47:7b:ce:f8:f3:40:52:e2:f7:68:87:fe:6c:f0:6f:2b:
         22:ac:e8:3a:6c:0b:fe:49:8c:ec:89:d6:47:86:80:4b:f0:33:
         00:17:27:df:0a:d5:bb:84:bb:9b:29:0f:57:31:e1:ce:22:98:
         5b:37:79:84:b5:60:0f:dc:24:64:2d:b0:b2:7a:c7:c3:a4:de:
         54:20:68:68:75:54:d4:bd:0d:16:8c:55:73:1e:1e:a6:6a:83:
         c1:2b:d4:eb:25:1b:78:12:fe:ab:0c:e2:af:ec:35:e5:be:4d:
         91:0e:9a:de:1d:ef:f3:a0:ca:77:9c:47:bd:ee:13:3c:d5:9f:
         a3:5f:f0:32:58:71:05:91:56:14:1b:8a:46:04:ac:a2:f1:d7:
         17:fa:55:0c:93:6d:a9:a3:c1:05:fb:55:02:68:d1:e2:51:33:
         e3:72:d4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:19 2026 by rpki-client