Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
File:                     1dHNR6U-9X67VnvIgq0phvqsXw0.mft (raw, json)
Hash identifier:          EDQlJDZbkxE6qHGiPmluPDXZCu8rdy9mx8Sp3cpYcpo=
Subject key identifier:   17:AD:CC:85:A3:30:86:A6:F3:15:D8:17:0C:AE:37:29:A8:EF:1B:E2
Authority key identifier: D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
Certificate issuer:       /CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Certificate serial:       019E216CD4F8D8F6FC3A1D388BC280B99D69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
Manifest number:          1655
Signing time:             Wed 13 May 2026 13:00:40 +0000
Manifest this update:     Wed 13 May 2026 13:00:40 +0000
Manifest next update:     Thu 14 May 2026 13:00:40 +0000
Files and hashes:         1: 1dHNR6U-9X67VnvIgq0phvqsXw0.crl (hash: Vk57JQgLVcXGynfcobYkwlaZKuNmS1sThbMVpAGtTaU=)
                          2: GwHZp-kEEMMSmgcidpvuauk-EA0.roa (hash: Xjp5Kh43d0lOVK+MDX99KJIgb/gfu211S8//K3ogwuU=)
                          3: X-4V7xzl5bM1v7YWDyF_SZW5lrc.roa (hash: I3o7rUH/RKJK5k980x+148YLL5ZlqYblJvTvhEFHuDU=)
                          4: g9skLhoTngKF84leEtNBNhGZn9Q.roa (hash: hqQ3HiFBUbLIXn6t3JB+mw0UlnMpWW49qnJ3ApgTu0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:21:6c:d4:f8:d8:f6:fc:3a:1d:38:8b:c2:80:b9:9d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
        Validity
            Not Before: May 13 13:00:40 2026 GMT
            Not After : May 14 13:00:40 2026 GMT
        Subject: CN=17adcc85a33086a6f315d8170cae3729a8ef1be2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:53:ef:bc:b7:6e:67:01:89:d9:8d:ba:49:08:
                    d2:f6:eb:82:15:a2:ed:33:49:0f:e4:c3:7f:58:c6:
                    52:56:45:db:12:6b:80:52:1f:1d:62:b6:7a:af:8e:
                    b3:48:66:f5:1a:76:8b:44:6c:23:a6:a9:30:7d:0a:
                    b2:93:cc:57:13:b7:ff:07:41:3f:fe:77:a6:7e:f6:
                    72:57:71:82:87:af:b1:be:73:82:81:a3:d6:8c:3f:
                    98:fc:65:28:1c:b9:d1:08:fd:45:8c:f0:1d:3d:4f:
                    59:9e:17:e4:db:7b:fa:dd:8b:73:2a:b6:0e:15:ec:
                    84:97:ab:dd:e8:4a:40:66:63:d5:27:d2:8d:98:f1:
                    83:1a:2c:60:1c:2d:a3:d0:c4:20:69:b4:8f:bb:cc:
                    34:c5:2f:5c:23:0a:78:56:1d:c1:49:37:54:ed:b9:
                    3e:e0:30:4b:fe:d7:9a:3d:f3:98:a6:db:86:3d:d1:
                    dc:32:04:2a:a6:38:4d:88:1c:7d:88:cd:37:93:8e:
                    ab:53:b1:14:6d:a0:b3:85:48:fc:67:59:30:37:03:
                    2f:c8:ad:4b:f8:0c:11:3a:4f:fb:3d:2c:ad:f6:54:
                    fb:5f:82:4e:6a:c1:61:7d:97:64:24:40:f0:7d:83:
                    24:93:11:f2:57:28:28:6e:4a:7d:65:d5:55:33:d6:
                    57:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:AD:CC:85:A3:30:86:A6:F3:15:D8:17:0C:AE:37:29:A8:EF:1B:E2
            X509v3 Authority Key Identifier:
                keyid:D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:33:5b:0d:a3:55:33:30:36:c2:f7:aa:a3:42:d1:f1:c1:84:
         22:08:27:00:2d:0c:60:b5:b9:1a:40:d8:9e:b6:df:99:16:14:
         cd:08:0e:92:21:c4:48:cc:3d:1e:60:b2:81:8d:c3:12:c4:a3:
         17:89:31:84:ed:10:fb:b8:86:d8:85:44:3f:9a:9a:89:20:92:
         8a:15:ac:aa:30:8d:1e:a5:c0:79:4b:00:c8:16:10:29:90:b5:
         7a:74:51:b2:30:0e:49:36:ce:83:bd:00:f9:0c:65:3e:fb:ea:
         0d:20:96:16:17:fc:33:ee:91:d5:21:15:3c:7b:f4:d3:36:fe:
         a2:2f:ab:dd:f7:06:2c:ae:de:81:fc:53:58:e5:cc:df:e6:d5:
         14:23:cc:e9:da:c6:e7:f1:84:d1:b9:a2:ce:4c:31:b1:1e:62:
         b9:6f:6b:0c:f6:9c:72:4a:e0:22:ed:41:4d:27:80:5e:7f:9a:
         f3:42:8e:a7:12:42:d5:bc:e4:15:cb:f1:15:e7:b3:94:4a:03:
         7e:9f:44:89:a3:36:81:ed:9c:73:7c:9a:b5:ae:9a:3a:58:7b:
         4e:7c:98:d5:d5:13:f6:0b:0f:ba:71:7d:10:e1:b5:42:b7:b5:
         16:7d:7c:0b:90:a3:3c:f6:6e:f5:de:bd:eb:a9:82:ab:ca:31:
         3f:22:57:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:43:17 2026 by rpki-client