Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
File:                     47jYb67zk4HWmiGCWVgq8oXquN8.mft (raw, json)
Hash identifier:          9nhJMfAfWN2fGf7JcewEsQsOrxRrzA7513YKRLxymC4=
Subject key identifier:   BE:A4:97:EF:46:59:93:F7:C9:9C:4A:37:69:0F:5E:A2:65:8C:5D:D7
Authority key identifier: E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
Certificate issuer:       /CN=e3b8d86faef39381d69a218259582af285eab8df
Certificate serial:       019E1C7D9048C31536497CF8DDAFDE566EA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
Manifest number:          0F03
Signing time:             Tue 12 May 2026 14:00:51 +0000
Manifest this update:     Tue 12 May 2026 14:00:51 +0000
Manifest next update:     Wed 13 May 2026 14:00:51 +0000
Files and hashes:         1: 47jYb67zk4HWmiGCWVgq8oXquN8.crl (hash: YZb5Gx6rtkyH0xSXEGgu6FPl8QwlnbaOzkO20nvxU8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:7d:90:48:c3:15:36:49:7c:f8:dd:af:de:56:6e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3b8d86faef39381d69a218259582af285eab8df
        Validity
            Not Before: May 12 14:00:51 2026 GMT
            Not After : May 13 14:00:51 2026 GMT
        Subject: CN=bea497ef465993f7c99c4a37690f5ea2658c5dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:19:b2:9e:54:21:8a:96:b2:f2:0d:b0:07:77:
                    7d:64:bf:01:3f:b0:f1:e1:0b:64:c1:e9:e8:3a:e7:
                    30:cf:71:2a:73:4a:21:7a:b8:c7:e5:1f:90:f5:db:
                    7a:25:96:41:3f:5d:77:f8:51:17:bb:b8:c3:10:c0:
                    dc:3d:46:d9:4d:da:64:aa:77:d2:70:39:00:09:c7:
                    71:98:cd:4a:c0:29:d8:1f:3f:16:dd:59:37:6b:34:
                    b3:85:14:49:6a:fc:67:27:b0:a6:e2:58:0f:ec:2b:
                    1f:e4:5f:78:c7:4d:af:8c:aa:dd:b3:ac:b6:b2:38:
                    91:ac:5e:87:bc:50:79:b2:90:21:e7:86:b3:aa:b2:
                    2c:0b:e3:fa:92:eb:2e:eb:35:5a:57:43:ff:44:1b:
                    09:45:f0:58:c7:c4:64:46:67:41:af:e8:f8:87:f5:
                    90:70:31:93:a7:31:6c:2d:36:f5:6e:6a:a8:bf:bc:
                    51:87:e4:74:b9:a6:f6:51:b5:81:0d:4b:78:43:40:
                    47:0a:c3:fd:ee:10:9c:9e:39:be:73:8b:34:9b:2a:
                    b4:02:9d:3d:d4:61:41:4c:bc:42:d5:37:1a:48:52:
                    4b:3d:dc:f9:a7:f8:61:1d:5a:cc:e6:79:36:6f:88:
                    87:79:5f:4c:7b:80:f5:2b:c7:99:69:f1:90:a8:f9:
                    26:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A4:97:EF:46:59:93:F7:C9:9C:4A:37:69:0F:5E:A2:65:8C:5D:D7
            X509v3 Authority Key Identifier:
                keyid:E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:36:0c:5c:8f:15:c0:07:e8:bc:db:37:44:68:96:de:4f:0e:
         95:4f:4b:73:cf:96:20:bc:cc:81:ac:db:d7:55:ae:42:c4:3d:
         32:6d:90:da:e1:46:ae:1d:d4:c0:47:70:9a:b8:f7:ce:5f:2b:
         4f:58:62:f8:c8:78:81:fc:7f:78:ec:ed:a1:37:81:99:04:a6:
         15:cf:df:28:ad:5e:fc:d2:a2:e6:67:a4:5e:23:ed:01:bf:d1:
         33:4d:e7:62:68:43:c0:d3:c0:dc:cc:1a:f5:32:b3:54:31:66:
         8f:eb:c2:0c:00:f5:5d:1e:09:a3:51:07:18:14:07:36:e2:f0:
         94:45:8f:bf:e5:1d:1b:cd:9d:61:c1:dc:e3:0e:02:ee:8f:96:
         c5:3a:ef:77:7f:9a:04:3e:0a:56:d1:36:0e:39:5e:6f:68:ca:
         ee:b6:9d:f0:1a:b7:7c:6f:74:96:ef:d0:14:f4:5d:2b:d3:1c:
         94:05:c0:ce:ff:6e:c2:bc:04:c1:76:ae:30:ad:6e:cc:75:81:
         db:b7:4b:23:dd:5a:42:e2:e2:bf:3a:7f:ef:78:18:11:0e:b0:
         77:d2:9c:25:84:d6:3e:66:03:56:ec:50:dd:83:dd:62:47:f4:
         a3:a5:a9:2d:57:0d:79:12:ce:fd:3d:a6:c0:ba:f3:71:79:23:
         0b:93:33:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:30:52 2026 by rpki-client