Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
File:                     1-14u6ugu75tlf-J5UmcmECD5RMk.mft (raw, json)
Hash identifier:          r4qV3fdwLJoNS3yo5N6FAwq29+06f4DD6iNaitcjMWw=
Subject key identifier:   BB:D1:48:30:20:B8:B9:88:C7:E5:F6:1B:34:FF:15:2D:DF:97:90:50
Authority key identifier: FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9
Certificate issuer:       /CN=fb5e2eeae82eef9b657fe2795267261020f944c9
Certificate serial:       019E1E34F093B23C64AD8E60C65CB79A4E7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
Manifest number:          0490
Signing time:             Tue 12 May 2026 22:00:46 +0000
Manifest this update:     Tue 12 May 2026 22:00:46 +0000
Manifest next update:     Wed 13 May 2026 22:00:46 +0000
Files and hashes:         1: 1-14u6ugu75tlf-J5UmcmECD5RMk.crl (hash: m3xPvZI1Pe32slcutJQBj0aFpAZs17+h0gtkAx2WWFg=)
                          2: zTtjoNNmqNJk4uedDe7ahXQuOF8.roa (hash: dHODXqFZoANMRWjrQgYBV+M06zr2Vxc9B/4+ABxunPA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:34:f0:93:b2:3c:64:ad:8e:60:c6:5c:b7:9a:4e:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5e2eeae82eef9b657fe2795267261020f944c9
        Validity
            Not Before: May 12 22:00:46 2026 GMT
            Not After : May 13 22:00:46 2026 GMT
        Subject: CN=bbd1483020b8b988c7e5f61b34ff152ddf979050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:63:c5:42:2c:06:4e:ce:4f:0b:5d:72:c4:18:
                    b9:18:19:ec:3e:aa:fc:b8:3a:6a:05:cf:a0:98:8a:
                    bc:70:80:d1:1a:91:4f:3d:5e:b1:1d:10:d1:fc:78:
                    90:59:18:4a:f4:d7:e9:2d:52:50:ef:c4:36:4f:ca:
                    34:65:8e:53:f4:4b:e9:70:5d:7d:74:5f:b4:32:c1:
                    48:41:e9:ff:7e:69:8e:66:b8:bf:dc:92:de:2b:32:
                    f7:63:aa:4d:cf:70:63:2c:10:16:1a:6f:f7:70:34:
                    6f:e6:db:41:89:75:77:bc:c2:5e:a1:c3:66:c8:9d:
                    9f:cc:48:1e:70:ad:ed:0e:af:06:cd:3c:79:0f:32:
                    eb:49:b0:fc:3a:8e:bc:9c:28:68:99:db:83:74:f6:
                    16:e1:34:0b:8e:54:0e:a1:9f:ff:e6:d4:3c:92:8f:
                    e8:14:21:c3:ad:c4:bb:d7:84:07:1f:7f:51:94:07:
                    c8:50:e5:79:1b:3e:43:2e:a6:50:75:5a:d6:1f:de:
                    68:d2:72:c8:ea:7e:e0:0d:de:60:80:cb:9f:b2:cc:
                    ec:2b:34:be:5c:3d:77:90:a2:3c:c7:f8:f2:b4:23:
                    e0:2c:c1:a2:83:ef:5e:62:a3:4d:ee:ae:ab:51:7c:
                    e0:a9:50:02:58:32:ae:ca:d2:08:f2:99:5f:2d:aa:
                    90:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D1:48:30:20:B8:B9:88:C7:E5:F6:1B:34:FF:15:2D:DF:97:90:50
            X509v3 Authority Key Identifier:
                keyid:FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:18:24:c6:2a:42:4f:9b:2a:ad:9e:a2:ff:64:bf:88:92:6f:
         11:fc:98:fc:08:55:a2:33:5f:ca:4b:a4:72:c8:d0:c1:c0:35:
         74:1e:1b:da:03:aa:ba:45:72:2b:bc:b6:33:59:6a:48:1b:ed:
         45:86:d8:fd:d1:ff:c7:a8:76:f6:aa:0a:05:fc:76:3d:f4:37:
         1f:3d:7d:5f:c5:51:ef:05:6e:d5:ce:52:5f:5e:85:d4:f0:41:
         10:40:1c:38:d7:b1:84:00:a1:c0:29:d8:f1:68:30:c8:38:0b:
         5f:e8:eb:13:82:44:b8:b8:5a:e4:67:5d:49:c0:f5:c3:8a:2a:
         02:2c:9b:96:a0:5c:88:0a:66:96:f1:52:22:d2:bd:4c:38:f2:
         18:ac:85:f2:38:c6:9a:60:03:06:d3:c8:fb:46:2f:0e:ae:1a:
         fc:01:0e:23:1f:ea:cd:07:dc:18:74:5d:3f:8b:1c:ab:30:88:
         b6:5f:c7:11:24:76:8a:74:e7:a3:0c:52:3b:ca:54:e2:03:60:
         3e:23:64:f5:93:d9:74:d8:c3:15:72:70:01:3f:59:4c:11:af:
         a7:e9:84:cf:7b:c8:ed:df:c7:f2:62:7b:3a:5b:ac:a0:ae:4a:
         93:61:08:1a:a7:2c:ce:cd:62:37:cc:80:e8:87:25:f9:71:15:
         29:d1:b9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:23:47 2026 by rpki-client