Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft
File:                     81TlIOe7fhP1Ms7PBagtK3l5UqI.mft (raw, json)
Hash identifier:          yjyJgvPxbZ6gL7QEiYQJ2vLDkmVld5TwWkXSgiiFv9w=
Subject key identifier:   21:9A:87:56:57:19:00:B2:9A:A1:50:B8:53:4A:22:21:17:0F:39:09
Authority key identifier: F3:54:E5:20:E7:BB:7E:13:F5:32:CE:CF:05:A8:2D:2B:79:79:52:A2
Certificate issuer:       /CN=f354e520e7bb7e13f532cecf05a82d2b797952a2
Certificate serial:       019E1D2368E6E4F4D7EA7CF55EB5F718773A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft
Manifest number:          0E5E
Signing time:             Tue 12 May 2026 17:02:00 +0000
Manifest this update:     Tue 12 May 2026 17:02:00 +0000
Manifest next update:     Wed 13 May 2026 17:02:00 +0000
Files and hashes:         1: 28zXLFeRXoHKQibLR_FN7To5SA4.roa (hash: 0h5lbt3CG3w27XHBcRA+PH1NQ7TLUhzbv0Xa/y3+zNw=)
                          2: 81TlIOe7fhP1Ms7PBagtK3l5UqI.crl (hash: mmkmZUAHzyqviQzY6OWdgok7PsuMTMKqDPv/x30j8DA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:23:68:e6:e4:f4:d7:ea:7c:f5:5e:b5:f7:18:77:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f354e520e7bb7e13f532cecf05a82d2b797952a2
        Validity
            Not Before: May 12 17:02:00 2026 GMT
            Not After : May 13 17:02:00 2026 GMT
        Subject: CN=219a8756571900b29aa150b8534a2221170f3909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:15:8c:50:bb:5f:31:57:b6:f3:73:d7:84:cc:
                    b5:c4:b6:f0:8d:3c:d5:02:a1:1c:e5:1c:aa:63:04:
                    c0:58:33:ef:6e:4a:6f:82:14:dc:2a:d4:a0:c4:e8:
                    a6:08:2b:c1:cb:48:53:fc:bd:a6:09:87:8f:fb:c8:
                    95:91:82:ae:bd:d7:3e:cb:17:28:82:48:a2:05:72:
                    25:d3:1a:81:94:88:35:be:58:40:8c:40:26:73:a5:
                    d6:49:87:d2:82:ce:4d:93:bd:16:9f:22:d4:db:58:
                    90:4c:fa:37:1f:c6:ff:3e:f3:40:f8:a1:bc:9f:50:
                    46:ff:1b:70:4a:a5:a0:84:c4:cb:a8:96:91:95:8f:
                    b6:56:f9:12:e5:08:14:2a:e3:b6:55:a8:0e:ab:74:
                    93:d2:05:00:13:a0:e7:2f:10:da:2c:ca:20:9b:ad:
                    59:e6:40:08:06:bf:36:42:8e:03:95:b8:08:df:da:
                    35:53:96:5b:db:05:a7:38:e3:fd:08:e3:12:dc:69:
                    3b:e7:d9:5c:73:15:40:f3:8f:06:29:84:96:f2:3f:
                    c9:6f:77:0a:fd:3d:4b:01:ed:73:e2:c5:14:64:b0:
                    6f:00:57:5f:a0:0d:1b:55:ce:ea:85:7d:de:19:ed:
                    c4:ea:cf:40:e1:a5:2b:51:7b:84:d5:fe:91:4d:49:
                    65:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:9A:87:56:57:19:00:B2:9A:A1:50:B8:53:4A:22:21:17:0F:39:09
            X509v3 Authority Key Identifier:
                keyid:F3:54:E5:20:E7:BB:7E:13:F5:32:CE:CF:05:A8:2D:2B:79:79:52:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:37:a8:9b:f0:17:1d:a6:37:66:0d:d2:78:a8:4e:2f:f7:57:
         ce:d2:64:66:80:8e:ef:ff:40:7e:da:62:2e:9e:fb:8a:0e:37:
         47:61:9c:e6:4a:7a:1f:bd:6d:4a:d5:12:28:c4:96:70:30:b8:
         bd:7a:ca:c8:9d:f4:a3:12:ca:2b:e2:45:d8:9a:45:ab:79:eb:
         32:39:e0:eb:9f:bc:b5:e1:72:b9:b6:ca:df:4a:f6:30:85:fe:
         0b:81:63:ce:b1:6c:cd:bc:e6:86:2f:aa:79:fa:8a:8d:51:b7:
         0a:f8:14:32:00:e0:c5:ea:74:7d:be:8e:11:6e:95:50:8b:47:
         69:06:af:e2:bf:f9:f8:59:e3:77:ca:8a:31:f0:04:6a:ed:ff:
         6d:5a:e0:eb:a7:97:f5:d9:43:6a:04:9f:fc:53:98:93:67:de:
         1b:44:dc:05:f9:c8:78:27:40:44:e4:25:56:70:ad:44:4e:74:
         d8:70:ef:0c:a7:6a:b7:ce:b6:cd:5f:b2:8f:1d:85:51:ae:4f:
         01:cb:09:5f:ba:76:5e:73:83:34:02:d5:85:fc:f8:2c:d0:4a:
         29:ff:9d:76:59:0a:13:c5:ad:d0:65:2f:b3:ce:bc:44:94:10:
         34:f6:34:6a:62:ec:37:db:25:54:4d:e5:a5:d2:61:1a:28:9c:
         5c:47:8f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:05:06 2026 by rpki-client