Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
File:                     A7zvl2ZC1UtLShmY8LP_SIRakm0.mft (raw, json)
Hash identifier:          xxJy2tMrSEIE4mvWk4wJl7Xvh++NRicX9GvCM3CrUtY=
Subject key identifier:   B2:41:F3:0B:B9:87:A0:C2:CC:45:AC:5E:4B:B7:AE:F0:2E:5C:50:CE
Authority key identifier: 03:BC:EF:97:66:42:D5:4B:4B:4A:19:98:F0:B3:FF:48:84:5A:92:6D
Certificate issuer:       /CN=03bcef976642d54b4b4a1998f0b3ff48845a926d
Certificate serial:       019E1DFE66D22F05B91AB296B4D9696BB51B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
Manifest number:          1300
Signing time:             Tue 12 May 2026 21:01:12 +0000
Manifest this update:     Tue 12 May 2026 21:01:12 +0000
Manifest next update:     Wed 13 May 2026 21:01:12 +0000
Files and hashes:         1: A7zvl2ZC1UtLShmY8LP_SIRakm0.crl (hash: bzHPCMFMcbjxh9W/3syzXA7BFmrmRQHw1W3KdB992oY=)
                          2: EHGORi86xgHpvwoBk068qPN7iqE.roa (hash: YNshrsxOuHcW6UCsa9oev2SY9StlDKp1vMjVv/oevCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:66:d2:2f:05:b9:1a:b2:96:b4:d9:69:6b:b5:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bcef976642d54b4b4a1998f0b3ff48845a926d
        Validity
            Not Before: May 12 21:01:12 2026 GMT
            Not After : May 13 21:01:12 2026 GMT
        Subject: CN=b241f30bb987a0c2cc45ac5e4bb7aef02e5c50ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:48:20:14:93:67:0c:a4:94:ec:dd:af:4e:e7:
                    40:0c:f6:bc:72:3c:2d:52:5c:a0:b5:e1:4b:48:d8:
                    80:ac:94:6a:20:d0:d7:77:dc:a6:a0:3d:d4:90:a9:
                    52:9b:79:63:49:b8:14:69:97:65:56:92:23:4a:e9:
                    e8:4f:b6:cf:7b:74:d4:c3:0e:1b:70:55:04:75:fa:
                    d6:02:d7:81:2a:f7:48:34:25:95:a8:03:b4:fc:3c:
                    20:c2:04:d4:64:5a:d6:26:85:7a:27:a4:24:6f:bb:
                    83:8a:be:22:de:3a:d1:b0:58:f4:88:b4:13:72:71:
                    3b:81:13:f5:4c:d0:d3:06:7f:70:d6:57:95:ce:1e:
                    8d:5f:7d:d5:b9:1d:31:f6:b1:b2:5e:41:e5:37:16:
                    71:01:c7:b1:1b:7c:04:dc:56:25:98:30:d8:c8:4e:
                    d3:f5:de:e9:e2:32:d0:0f:df:2b:72:03:49:7c:04:
                    1e:b8:85:af:41:aa:42:31:6c:9c:3b:54:7b:a6:af:
                    87:80:18:2f:d4:cf:2b:ac:c0:72:ad:e5:89:4d:dd:
                    b7:54:5b:40:d9:7d:80:a8:01:de:59:aa:5f:f2:be:
                    ee:e7:4d:d7:db:35:b4:45:64:90:67:e2:b1:57:df:
                    25:fb:ce:d8:43:1c:f7:d8:1f:f6:7d:d1:d4:ad:cd:
                    6b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:41:F3:0B:B9:87:A0:C2:CC:45:AC:5E:4B:B7:AE:F0:2E:5C:50:CE
            X509v3 Authority Key Identifier:
                keyid:03:BC:EF:97:66:42:D5:4B:4B:4A:19:98:F0:B3:FF:48:84:5A:92:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:1f:b9:14:14:dd:68:3e:e9:33:19:0d:ca:54:39:a8:23:c7:
         77:98:e7:35:25:d5:2f:25:69:83:bd:0d:c4:35:af:ab:3a:5d:
         2a:49:22:a4:fb:7f:8c:11:97:a8:c3:ae:1e:49:88:50:dd:de:
         ad:b4:9d:d6:07:a5:a6:02:32:c5:25:90:3f:d6:92:ad:c0:51:
         61:cd:7a:3f:fa:02:03:22:6d:c4:cd:44:7b:f7:8d:19:18:ae:
         bf:b8:8a:d3:8d:8e:f7:1e:65:4f:e1:39:23:a7:e2:83:a8:1f:
         26:b1:ff:d4:0c:aa:61:d7:40:a5:1f:7b:11:a9:ed:ec:e8:0c:
         be:a9:47:8a:99:44:60:1a:0d:fc:04:7e:d1:d9:3d:2b:7c:b9:
         bf:91:e2:b4:99:f2:68:21:8b:d1:e4:1c:a7:5e:15:03:4c:8c:
         62:72:d6:9e:e3:a6:e0:58:cd:d9:21:a1:c4:91:92:02:34:db:
         bf:57:02:34:eb:7d:a0:07:7f:ba:7f:10:4f:99:b5:93:27:0c:
         44:07:cc:49:23:2a:4b:3b:ac:95:89:b8:8c:bf:a1:74:b0:0d:
         89:2c:53:b3:2f:30:a3:fe:21:bc:0b:09:56:d0:ab:bf:a1:67:
         5f:fc:76:f6:a2:34:a0:f1:99:36:49:7d:20:11:2f:ae:61:ff:
         25:90:ea:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:23:43 2026 by rpki-client