Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
File:                     H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft (raw, json)
Hash identifier:          ubzD/aRV15JvwDka4ApK5QufnxbTc9cRdTz9Ni+app8=
Subject key identifier:   F8:01:5D:F9:89:07:39:FE:AA:85:19:CB:B0:EB:7B:C6:8C:09:CB:0C
Authority key identifier: 1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3
Certificate issuer:       /CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3
Certificate serial:       019E205A93D349B8A29F52580686B28F05C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
Manifest number:          022D
Signing time:             Wed 13 May 2026 08:01:07 +0000
Manifest this update:     Wed 13 May 2026 08:01:07 +0000
Manifest next update:     Thu 14 May 2026 08:01:07 +0000
Files and hashes:         1: H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl (hash: KdG/VfAIiIDgXSJ/HtvmLIRIZfnqdyVWpFiDyk4cDkc=)
                          2: XOOQ9FAgyADXPO_GL-32MuK-1-4.roa (hash: Rqa7wVCVV9KpfmZD61heEG7d6s4LvjlFlafZP5De1nI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:5a:93:d3:49:b8:a2:9f:52:58:06:86:b2:8f:05:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3
        Validity
            Not Before: May 13 08:01:07 2026 GMT
            Not After : May 14 08:01:07 2026 GMT
        Subject: CN=f8015df9890739feaa8519cbb0eb7bc68c09cb0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:4c:76:fc:61:aa:95:30:ce:da:6c:9f:c1:4d:
                    e9:a1:e2:0c:d9:31:14:1c:62:54:b7:ed:74:3e:06:
                    88:c8:c1:6e:71:2a:6b:d5:32:c3:a9:b6:95:35:8f:
                    8c:b7:13:d0:ce:df:7f:df:1d:bc:e9:9c:f5:a5:54:
                    b9:79:f8:35:98:aa:18:09:57:0c:1b:70:69:2e:93:
                    db:62:85:13:ad:6b:64:1b:01:25:78:7d:d0:d8:04:
                    85:86:23:87:53:68:07:10:f5:a6:58:1a:94:ca:45:
                    41:c8:17:f6:54:f4:10:ad:23:fe:31:87:be:16:26:
                    ce:a3:4f:bc:77:3b:87:83:fd:8b:cd:03:3f:c5:19:
                    65:8c:7a:92:2b:84:08:fb:4b:55:16:60:d5:5c:6d:
                    1f:0c:35:77:3c:b5:a4:cf:9e:43:bb:e8:c1:d4:25:
                    14:be:7f:8f:7f:10:07:80:c5:74:b5:aa:a6:3f:1f:
                    66:8d:ae:58:f5:dd:6c:8d:71:7a:31:c5:26:42:34:
                    6f:05:45:80:fb:78:f6:67:6a:d2:2d:18:e7:f2:36:
                    75:1d:b4:8f:04:52:97:c7:00:09:2f:a6:98:21:74:
                    b9:f1:d9:ca:27:f0:5e:d9:c1:f2:03:2e:ed:84:3e:
                    27:38:83:c2:20:cc:ba:25:e1:c0:7c:b9:be:54:09:
                    82:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:01:5D:F9:89:07:39:FE:AA:85:19:CB:B0:EB:7B:C6:8C:09:CB:0C
            X509v3 Authority Key Identifier:
                keyid:1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:14:8d:64:4e:c5:44:b8:66:c8:b8:60:1a:e4:07:c7:ee:da:
         7d:4d:f7:62:e6:b6:49:8a:f5:e1:ff:92:21:f1:8b:1c:f7:d2:
         1c:6c:41:49:b0:4a:4b:63:a5:53:be:ee:bb:3d:f3:df:ef:d4:
         05:39:0a:03:71:63:91:22:7b:ab:1b:cf:e9:2a:b5:40:73:ac:
         d3:bf:a8:88:17:5e:0d:76:36:67:9f:f2:16:ac:dd:8b:66:d7:
         2b:94:62:08:09:6b:49:21:97:89:56:4f:61:1c:26:51:13:47:
         03:90:cd:f2:d2:50:c9:39:c9:e8:5b:79:8a:cb:b8:0b:79:55:
         47:a7:8c:b2:2e:5e:11:84:18:e1:50:9f:36:41:97:dc:46:7a:
         18:52:5f:1d:29:da:65:b2:b7:9e:51:ac:1a:68:e1:8e:f7:08:
         08:12:34:9c:45:d1:e8:72:71:4e:c4:68:75:4f:e5:0f:ab:fb:
         c8:65:08:6d:fb:89:db:dd:af:42:8d:0e:e2:52:a9:51:01:62:
         0a:23:1c:bf:f5:19:f7:d0:56:f6:69:3d:1e:a8:6f:a0:bc:d5:
         ae:ca:55:80:fb:b2:b5:19:58:45:ea:98:f4:b0:ef:2c:d8:31:
         1f:89:45:45:3c:08:1c:bf:71:48:da:4d:27:02:09:a9:b6:4f:
         4d:17:5f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:28:47 2026 by rpki-client