Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
File:                     N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft (raw, json)
Hash identifier:          qSZmtarexXs/SS9Y3juVbn0CbXWnDtEJWJOYHdnuOYo=
Subject key identifier:   C5:1B:8E:C0:48:9D:64:0A:B4:F9:25:27:DA:05:FE:C1:9B:55:20:B4
Authority key identifier: 37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E
Certificate issuer:       /CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
Certificate serial:       019E1E360A24ECB51CA4443D4AC1E16C572A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
Manifest number:          1652
Signing time:             Tue 12 May 2026 22:01:58 +0000
Manifest this update:     Tue 12 May 2026 22:01:58 +0000
Manifest next update:     Wed 13 May 2026 22:01:58 +0000
Files and hashes:         1: BRqvv0WLo99f8-G6ZIvnAk91o6g.roa (hash: qc6EEB2pPtQsZCtqVNu01mKKLXS0k3ijeSm0ChzNPbs=)
                          2: N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl (hash: opmdBF+14hbeelh0x7cnM2Kci2YtTeT6WPkWuv26RS4=)
                          3: WfrFEmCPRY6ziwxCZ5iAPeQrpwc.roa (hash: Mk5FHbgOkd1RMCXgBYHYmcVT6F73CxCfoHTOc1sFbTs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:36:0a:24:ec:b5:1c:a4:44:3d:4a:c1:e1:6c:57:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
        Validity
            Not Before: May 12 22:01:58 2026 GMT
            Not After : May 13 22:01:58 2026 GMT
        Subject: CN=c51b8ec0489d640ab4f92527da05fec19b5520b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:63:0a:54:44:80:49:a4:2f:ee:9f:fe:fa:ae:
                    aa:15:a5:7c:a8:d3:0a:07:e3:69:60:19:05:e8:70:
                    e2:9f:0a:86:33:f5:12:26:75:92:4d:88:a3:3c:c7:
                    e4:ed:3f:02:da:de:63:1a:4d:35:68:3b:ab:4c:4b:
                    0b:91:b9:60:48:5a:2b:44:fe:2f:3b:f4:3e:bb:ba:
                    43:17:e0:c4:14:9f:21:da:10:cf:08:3a:6e:fa:3f:
                    ba:97:c9:9f:27:41:ae:93:4f:3c:1e:28:75:65:54:
                    c1:01:c9:fa:e7:dc:33:df:4a:0e:80:90:20:d7:98:
                    e8:41:a6:53:07:8b:ac:8b:c2:4a:91:cd:a9:9e:4c:
                    1a:ae:d6:6f:b2:15:18:f9:26:a0:79:4d:e5:c8:55:
                    f6:32:10:bd:85:48:b6:bf:ea:6d:a6:8d:d2:e4:3b:
                    0b:49:96:6f:a8:cf:3d:8d:3c:81:ea:5b:00:8b:64:
                    b1:ce:07:64:da:9f:cc:56:bd:fc:c3:45:66:33:6b:
                    bd:d5:29:8f:ad:1a:ee:24:6e:68:22:22:af:d0:ea:
                    e5:24:ac:ca:8d:55:de:4e:dc:89:a7:57:84:fa:3b:
                    59:54:33:00:b9:59:f3:fc:4d:ca:5e:4a:3a:a8:94:
                    fd:55:bc:79:e1:82:3b:49:6d:70:eb:d0:c8:0e:72:
                    80:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:1B:8E:C0:48:9D:64:0A:B4:F9:25:27:DA:05:FE:C1:9B:55:20:B4
            X509v3 Authority Key Identifier:
                keyid:37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:06:20:55:fc:f8:a5:6f:7f:48:1c:45:a0:49:29:d0:38:22:
         3c:c3:25:06:a8:53:20:a5:bc:2e:fc:2a:10:c4:06:c1:7c:7f:
         f6:1b:03:f4:28:70:7b:de:ae:69:10:2b:a0:ef:74:2d:9e:c0:
         9c:29:4e:09:54:7e:60:51:d3:f9:d2:1e:10:6b:c9:f9:17:80:
         e5:81:9f:ac:3f:5d:65:ed:36:52:c0:2a:90:0d:a8:55:dc:f3:
         1c:47:15:e2:67:da:d7:9f:0e:f5:33:80:fd:aa:b9:cf:01:c9:
         6b:33:f0:1e:81:a0:c0:3f:5d:6e:c4:15:65:26:fd:80:b8:de:
         11:2c:ce:c2:43:31:4f:ac:b0:3e:6a:44:0a:9b:7f:26:c0:90:
         bb:61:f5:cd:d1:da:28:67:1c:9e:62:b3:0f:df:9a:1e:c0:ff:
         b8:b5:7b:8e:41:69:b2:2f:15:ce:2d:f0:e7:ad:8c:2c:0a:ba:
         99:f1:5b:f1:9c:6c:ee:be:e9:2a:7c:4b:46:e7:f3:80:be:6e:
         37:a0:20:59:6f:db:ac:b3:11:c3:58:8a:a1:22:37:d8:d7:23:
         8d:c9:c0:73:ea:60:b7:67:73:3b:d0:00:2d:36:4c:f6:53:90:
         4b:98:0e:7d:ba:85:bb:79:ac:c4:c6:89:70:04:6a:b3:3b:76:
         eb:22:70:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:04:14 2026 by rpki-client