Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
File:                     kMuqazbmzWh0x47UWk-N1xcwMdk.mft (raw, json)
Hash identifier:          lTJd+uoyWIjlDKX30o61J5VAmr/MpQZXo92RJD8EZfw=
Subject key identifier:   27:4B:EF:5C:FB:B2:F9:8C:A6:64:FB:D3:3E:3F:00:8A:D2:84:E2:B0
Authority key identifier: 90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9
Certificate issuer:       /CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9
Certificate serial:       019E1D59C73DAFFE9AFA3A28DD62AC58F7D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
Manifest number:          0E77
Signing time:             Tue 12 May 2026 18:01:23 +0000
Manifest this update:     Tue 12 May 2026 18:01:23 +0000
Manifest next update:     Wed 13 May 2026 18:01:23 +0000
Files and hashes:         1: kMuqazbmzWh0x47UWk-N1xcwMdk.crl (hash: 9j5iaKoqiDLWokTTjGPCRA7pl8pj/FAalO68jh+KBSY=)
                          2: pMXoRrm1A-T70xPjALrZ4oMq61E.roa (hash: FsTM7joUHNqdKecmC2zVhM+EhuHDUQROQu4Azrsbbr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:c7:3d:af:fe:9a:fa:3a:28:dd:62:ac:58:f7:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9
        Validity
            Not Before: May 12 18:01:23 2026 GMT
            Not After : May 13 18:01:23 2026 GMT
        Subject: CN=274bef5cfbb2f98ca664fbd33e3f008ad284e2b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bd:0a:79:e8:e6:24:31:88:83:71:46:33:41:
                    3b:f0:ed:be:e2:4e:0f:26:d5:b0:c7:fd:4f:a3:4a:
                    cd:8f:8f:24:6c:75:40:d8:d5:68:6b:d7:8a:40:72:
                    8b:b2:d6:00:e9:db:6d:46:de:86:93:16:d6:d0:ef:
                    d7:d5:01:98:37:32:02:31:6c:8b:44:79:09:7b:be:
                    d0:b8:22:1e:3e:b2:68:cf:a0:72:91:5b:9b:5d:8a:
                    19:4a:71:ab:ff:ee:01:2b:3d:0f:ff:08:87:d9:b6:
                    4a:17:e3:43:fe:92:87:4e:19:7a:59:73:80:2f:86:
                    93:ea:da:a8:00:30:fd:be:19:2e:ff:69:02:42:0f:
                    89:02:a5:5c:4f:a2:9c:3d:8a:6f:a9:95:4a:bf:46:
                    62:56:82:5f:c7:9f:bc:67:36:f7:d0:da:f5:e9:ff:
                    d9:1b:c9:ce:52:e4:6d:d3:bd:7d:61:eb:15:d4:b0:
                    b8:9b:ae:d4:34:30:c2:f7:00:ab:e1:d8:0f:fa:16:
                    48:4e:d9:e6:c2:dd:cf:81:cc:98:78:65:51:0e:60:
                    fb:33:59:bd:1c:47:2c:e6:0a:be:37:3b:a9:71:b4:
                    59:21:64:28:74:ea:1e:98:80:66:c0:8e:cb:be:7b:
                    ec:ec:c2:63:96:34:e8:f0:4a:f6:e0:aa:2a:81:8b:
                    94:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4B:EF:5C:FB:B2:F9:8C:A6:64:FB:D3:3E:3F:00:8A:D2:84:E2:B0
            X509v3 Authority Key Identifier:
                keyid:90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:43:d3:ac:f4:d1:36:6a:e7:cc:87:fd:dd:4e:c2:54:27:b4:
         54:81:8c:85:b8:d8:80:d0:76:28:6a:14:01:09:a9:34:ed:15:
         b5:42:25:e5:71:11:e7:b4:4d:13:ff:92:cc:d1:85:7b:ad:82:
         3a:d6:f5:2a:48:f3:fa:3d:f5:42:82:69:91:9d:b2:10:75:ec:
         36:84:33:32:eb:a9:5a:80:46:ca:5f:11:5f:7d:a8:d6:c4:10:
         b3:ad:04:5b:f6:98:7c:a5:3d:be:02:7d:34:f5:e7:11:96:79:
         2e:a1:32:66:59:ae:da:15:17:f3:18:6f:e3:07:91:5b:fc:8c:
         a2:43:a4:97:aa:bc:ae:12:90:f7:dd:ab:8b:06:2d:c7:04:83:
         e4:c4:5d:c1:6b:27:8f:31:40:c4:6c:01:38:e5:f2:c5:19:71:
         88:7a:20:2e:6e:19:e0:c8:6f:94:55:35:eb:4c:41:ec:48:8d:
         4d:52:c0:3c:cd:ea:ba:29:6d:c3:3c:88:00:9f:37:9a:32:6a:
         8e:6e:57:65:47:a8:45:a6:c5:26:fc:fe:fe:e5:11:2b:9f:b3:
         c9:b8:4e:66:02:7a:3d:4d:04:fc:d6:cf:72:02:79:c4:e1:eb:
         57:ca:ca:49:a4:ff:9b:5f:bc:39:94:0c:3c:40:d7:ce:a0:92:
         0e:3d:ce:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:49:39 2026 by rpki-client