Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
File:                     1-uSR_yiWEnzojsukTOx0xj--GrU.mft (raw, json)
Hash identifier:          KG/GGzuH1FrC1YZiKuOW+DKL8HNvETAuQiiVAxhvWps=
Subject key identifier:   8E:91:AB:94:03:68:CD:16:68:6E:0F:BD:3F:C3:31:30:4A:E8:ED:EB
Authority key identifier: FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5
Certificate issuer:       /CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
Certificate serial:       019E1D5970F21C61532159DEF284062A249F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
Manifest number:          0A77
Signing time:             Tue 12 May 2026 18:01:01 +0000
Manifest this update:     Tue 12 May 2026 18:01:01 +0000
Manifest next update:     Wed 13 May 2026 18:01:01 +0000
Files and hashes:         1: 1-uSR_yiWEnzojsukTOx0xj--GrU.crl (hash: mmcinwpvIFH5fazSxtrrg0bVgVdXzPKbWnKyTHGlLwM=)
                          2: kPmc5sCThKk5h79wmMSU7r2wdGk.roa (hash: cJYgegRXaUwVLkfRCxfZWWQRmJwn/LEk5WOIrzbJK84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:70:f2:1c:61:53:21:59:de:f2:84:06:2a:24:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
        Validity
            Not Before: May 12 18:01:01 2026 GMT
            Not After : May 13 18:01:01 2026 GMT
        Subject: CN=8e91ab940368cd16686e0fbd3fc331304ae8edeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d1:a4:25:29:fb:4b:06:69:dd:85:c9:b2:47:
                    21:d8:c5:42:5d:22:e2:ec:3f:05:53:2b:a2:90:ab:
                    8e:82:d2:4d:bd:8c:7c:eb:9b:f6:3c:84:22:76:d7:
                    07:6d:14:fe:9c:91:af:4c:55:9a:3c:74:65:a8:9f:
                    d7:53:33:2e:69:6f:42:a0:bf:11:e0:1a:11:cd:b0:
                    a6:8f:7b:99:24:ad:41:47:9a:0d:6e:5d:84:c1:bd:
                    75:ba:21:27:90:0e:9b:c4:8c:11:50:40:b5:c9:10:
                    a0:9e:31:11:30:f7:de:ae:44:1e:3b:8b:79:3c:dc:
                    33:25:2d:7c:72:3b:f4:63:b6:43:07:8e:06:8b:b2:
                    54:48:ec:c7:fc:b1:42:53:fc:eb:3e:3e:3f:97:6c:
                    71:6b:bc:f3:8f:79:91:8e:0d:ba:32:a8:79:ff:54:
                    17:61:23:07:56:63:87:bd:46:e6:7f:8a:b6:18:9d:
                    f6:a2:d1:7a:81:00:80:e5:e3:18:54:d4:a9:31:aa:
                    1d:dc:09:2d:3b:84:68:2f:fc:d9:2f:be:10:c0:2d:
                    e2:a8:65:7c:a9:be:b6:47:5c:12:ea:51:d5:4f:98:
                    11:bc:35:ed:59:75:30:e9:f5:0b:b3:e0:f4:46:96:
                    24:db:f5:09:32:18:0b:23:90:b1:5f:f6:25:88:b0:
                    b8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:91:AB:94:03:68:CD:16:68:6E:0F:BD:3F:C3:31:30:4A:E8:ED:EB
            X509v3 Authority Key Identifier:
                keyid:FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:7f:e2:5f:6c:a7:39:db:75:10:fb:c2:d2:08:72:22:d4:0f:
         a5:22:26:d8:cf:d5:c7:bb:3e:ab:d8:6b:9e:24:cb:ce:7a:e5:
         32:f0:4a:a4:74:7f:e1:35:71:02:72:d9:46:6e:be:35:dc:d7:
         59:37:44:8e:4a:10:7d:75:ad:6a:a7:9b:9c:12:4d:c4:99:fa:
         a0:43:e9:ea:72:14:f7:6a:1b:1a:88:8c:ac:d5:44:48:eb:64:
         a8:c5:07:75:a1:31:cc:89:76:91:8f:ab:e6:c7:58:de:9e:d7:
         55:80:e8:45:5b:6d:f4:a2:0b:02:57:00:b3:eb:65:0b:cd:62:
         e1:62:8f:4e:dc:b0:81:69:6b:13:36:7b:8b:71:41:b3:5b:20:
         0b:f2:4f:10:3c:db:79:e1:c7:83:51:20:f1:5e:dd:3d:c6:32:
         e1:fa:55:12:fb:d3:6b:79:19:76:d2:e0:71:97:4f:09:4e:82:
         ef:cf:d4:71:0d:dd:9f:17:f2:16:72:89:48:9a:68:4e:7e:2a:
         6a:cf:88:94:37:09:31:72:6f:fa:da:8a:43:e4:d2:2e:60:b7:
         98:d3:2c:6f:33:58:5c:74:6d:05:fd:f1:1c:0d:f7:a9:8a:0d:
         71:61:8c:84:33:26:c5:ec:64:b0:a5:6b:ec:7b:88:02:9e:3a:
         a8:a6:69:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:50:53 2026 by rpki-client