Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
File:                     58yGJhOL8enLP9H-wmxoxKY0CWs.mft (raw, json)
Hash identifier:          NgEzly+ak+1UDCv4/d2boxXV42000L8Bca81VwpgfmI=
Subject key identifier:   48:71:66:9F:0D:9B:5C:E0:5D:05:0E:D4:29:1A:B8:D9:27:C0:30:C5
Authority key identifier: E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B
Certificate issuer:       /CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b
Certificate serial:       019E216CECA34AB4F60CBD0C058D47869C2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
Manifest number:          0C4A
Signing time:             Wed 13 May 2026 13:00:47 +0000
Manifest this update:     Wed 13 May 2026 13:00:47 +0000
Manifest next update:     Thu 14 May 2026 13:00:47 +0000
Files and hashes:         1: 58yGJhOL8enLP9H-wmxoxKY0CWs.crl (hash: qlKPKbZLuBPOYpuXrKl06tlfYWNeOJdiCqaS8tNYIw4=)
                          2: kjD9MNfC0BPcwkyPzs0CEhSag-I.roa (hash: e8QlVBviEv2pFqVxAanGI81u7if0cNyxjU/3EXVOJq4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:21:6c:ec:a3:4a:b4:f6:0c:bd:0c:05:8d:47:86:9c:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b
        Validity
            Not Before: May 13 13:00:47 2026 GMT
            Not After : May 14 13:00:47 2026 GMT
        Subject: CN=4871669f0d9b5ce05d050ed4291ab8d927c030c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d4:15:6a:ea:da:7c:38:34:76:dc:ec:2c:8c:
                    ce:b6:e9:e9:55:7c:89:a4:2b:df:8e:f2:0e:62:76:
                    d9:a7:0a:83:84:aa:e6:8c:8e:66:29:22:31:a3:46:
                    53:61:a2:3e:54:68:03:c2:6d:37:ad:aa:f2:01:5f:
                    6d:63:92:34:76:6c:0b:58:7f:b3:c5:e3:f6:74:4b:
                    1e:be:09:ae:45:de:e9:35:38:24:de:7d:7b:b8:40:
                    96:73:74:d5:62:6f:cc:a7:e9:c1:c3:9c:ca:68:64:
                    d0:3d:99:3a:a7:ca:0f:9f:e0:d3:0b:93:f0:ab:07:
                    66:67:3d:90:63:cf:5f:ac:81:6c:23:e6:6e:59:74:
                    ed:b3:5e:78:46:e9:c0:78:9d:48:ad:e9:d2:85:af:
                    49:cf:e4:f3:d5:f5:84:fd:4d:59:01:e9:7f:14:5f:
                    8c:64:5e:dc:20:07:7b:79:64:9b:8c:6b:f7:b4:37:
                    0c:8e:64:fc:7d:df:09:e8:20:37:d8:45:af:9a:9e:
                    e2:c3:04:84:1e:89:db:c5:bb:03:8f:93:06:5d:1d:
                    7a:a1:f8:c0:2c:91:a7:d1:dd:44:a0:f7:14:51:29:
                    ec:d7:99:b5:af:6d:74:7c:8d:a6:03:01:13:aa:23:
                    5a:e5:a3:47:0d:b3:ad:44:5a:e8:42:df:e1:a6:a0:
                    ae:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:71:66:9F:0D:9B:5C:E0:5D:05:0E:D4:29:1A:B8:D9:27:C0:30:C5
            X509v3 Authority Key Identifier:
                keyid:E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:59:dd:77:be:e1:59:15:49:cd:a7:18:48:74:b3:23:11:11:
         7c:9f:67:63:ac:df:80:82:a6:df:19:ee:9d:8e:e7:92:ba:05:
         0b:2b:96:8b:7e:53:de:68:22:d1:de:ce:15:1c:be:d2:5e:95:
         ca:7d:57:02:05:ea:b5:df:a5:c4:9b:99:43:32:68:b3:05:da:
         7b:00:9b:f8:f8:f2:91:53:6f:7c:65:9a:23:a4:a9:5e:69:5e:
         9b:74:60:e2:00:08:8d:f2:3e:b1:2d:cf:7a:c9:ff:0c:91:4a:
         c6:a3:69:fb:ba:29:f1:c2:fc:89:1f:65:f1:94:26:28:3d:11:
         2a:7b:0f:b8:78:39:a8:98:61:c8:f0:4b:f8:41:37:5b:b7:2c:
         69:89:c2:55:fa:c5:79:87:96:f4:18:bc:5c:26:81:d9:63:f4:
         b2:ca:59:39:11:b4:b2:68:1c:12:0f:31:03:22:bd:73:42:63:
         9f:82:78:85:25:a7:cb:47:e6:99:93:33:b6:28:7f:b9:8c:88:
         c4:5b:83:e4:8e:15:e1:70:c9:3e:2a:92:14:2e:97:26:b8:3c:
         0f:2b:70:54:e3:af:82:97:ca:98:93:00:9a:d3:90:8c:74:3a:
         f7:ee:f2:79:98:c5:b5:46:e9:d0:32:8c:db:d4:25:e2:7d:98:
         96:d0:e2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:33:25 2026 by rpki-client