Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
File:                     4kB6dpbweYQUMFTUEePKXxg27NQ.mft (raw, json)
Hash identifier:          JOIDaD6NGCKToUvsHgwPZbHL4qEYELUAI9c+gerxKoY=
Subject key identifier:   F4:5C:09:F6:85:71:6F:B9:CC:C1:92:A0:FD:64:5D:1F:27:28:30:FE
Authority key identifier: E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4
Certificate issuer:       /CN=e2407a7696f07984143054d411e3ca5f1836ecd4
Certificate serial:       019E1F7E688A25BDE009055B4B3DAEA43563
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
Manifest number:          0DD1
Signing time:             Wed 13 May 2026 04:00:38 +0000
Manifest this update:     Wed 13 May 2026 04:00:38 +0000
Manifest next update:     Thu 14 May 2026 04:00:38 +0000
Files and hashes:         1: 4kB6dpbweYQUMFTUEePKXxg27NQ.crl (hash: Ls0m8NPn+OEJLuexA4M/hOLv05khhn2CmINaUvZuFjI=)
                          2: XexrTT-WjOfF1IH0hIaeXZfiLag.roa (hash: HDA8bu6O9RqOeUyNIrj9FwIn/BuM4ZQvluzThKczOzQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7e:68:8a:25:bd:e0:09:05:5b:4b:3d:ae:a4:35:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2407a7696f07984143054d411e3ca5f1836ecd4
        Validity
            Not Before: May 13 04:00:38 2026 GMT
            Not After : May 14 04:00:38 2026 GMT
        Subject: CN=f45c09f685716fb9ccc192a0fd645d1f272830fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:27:38:d7:6c:88:2f:6d:da:91:a9:a9:32:15:
                    9c:1e:5d:7e:e2:16:e3:1b:49:3d:6f:f2:83:8e:b3:
                    59:e1:5e:00:78:1b:69:f1:7b:14:12:a6:12:58:28:
                    52:7d:dc:df:49:c6:ab:f5:5d:b2:4e:7a:dd:63:a4:
                    f9:c9:7a:42:cd:13:66:fa:05:1c:19:45:a9:a1:fe:
                    44:cb:7b:cd:65:86:77:28:85:6f:13:da:73:3c:49:
                    8e:8a:47:77:85:f4:e9:85:17:f6:1b:d7:8e:05:67:
                    90:87:b9:bf:ea:c7:38:93:87:10:e0:3d:7c:61:20:
                    cd:0e:34:f8:d2:ae:82:db:b2:c1:4a:f1:0d:44:cd:
                    02:78:02:ae:e8:03:02:58:f3:ca:54:0d:88:0d:0a:
                    20:4d:63:8a:1c:41:ee:c8:b6:22:45:59:7e:15:b3:
                    e5:7f:2e:3e:6e:b7:dc:78:31:1b:6d:a8:2c:8e:9f:
                    2d:19:42:04:f4:5e:a3:03:53:33:92:8d:11:f3:58:
                    f4:45:52:e4:a6:69:43:9f:22:23:d4:55:ae:6d:67:
                    a5:fb:a0:b6:10:f5:c1:6d:89:77:85:b3:3e:ba:25:
                    a4:f4:6e:fa:28:1f:50:85:92:3e:16:09:6d:5c:a4:
                    0e:dc:ad:82:a7:c7:1a:9f:0e:b3:d6:f6:62:84:82:
                    3b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:5C:09:F6:85:71:6F:B9:CC:C1:92:A0:FD:64:5D:1F:27:28:30:FE
            X509v3 Authority Key Identifier:
                keyid:E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:bd:7d:44:80:07:df:ab:e5:69:43:b3:20:4b:bd:5d:d7:aa:
         0f:60:dd:c7:2a:d5:55:98:1b:31:fc:fc:ba:d7:62:25:aa:6e:
         cf:d8:42:8e:c9:98:0c:01:57:ac:94:2b:a1:b0:04:d8:16:5e:
         9d:55:e0:08:7d:a7:a4:36:e7:80:f5:8e:c3:86:6e:e0:c7:06:
         48:1d:28:4d:04:41:9e:34:6d:ad:9e:e4:e1:2e:1f:33:ba:04:
         b5:d9:3e:cc:10:8b:5e:d0:4b:16:47:18:38:9c:ce:c3:9d:aa:
         34:fe:80:44:c0:b9:07:01:71:6e:5f:3e:2f:20:b0:df:55:71:
         ee:e3:70:7f:42:28:0c:01:27:d0:95:18:57:d2:e5:03:9b:26:
         03:02:b1:ad:df:8c:5c:68:2d:53:77:e1:4f:1e:b9:98:80:e9:
         8e:df:d6:aa:08:9c:e3:05:54:07:8f:63:23:8b:45:7f:6c:bd:
         3f:59:a4:df:8a:6b:ad:4f:c8:9b:cb:3b:2e:91:4f:9a:e5:a7:
         1e:1c:a8:18:b7:7e:31:c2:64:5e:04:92:c5:75:81:d5:8a:b8:
         69:bc:3d:61:5d:15:04:e4:82:f4:d1:cc:c8:b1:c3:5e:39:b3:
         fb:7a:4b:6d:30:47:40:be:14:0d:a8:06:d7:cd:ea:6b:55:0e:
         e3:37:e0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:50:04 2026 by rpki-client