Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft
File:                     Ja5VGvC7XXl36nP2iW8l8eyij50.mft (raw, json)
Hash identifier:          WhOBWuAQR3L2qYpNfOE5/SFMUdVvjBpDgKQ6kudo68E=
Subject key identifier:   51:6A:67:42:76:48:C7:F1:A1:40:E1:F1:74:ED:31:A8:C9:E5:63:70
Authority key identifier: 25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
Certificate issuer:       /CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Certificate serial:       019E1F11237486CA217D98139FB841CF547F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft
Manifest number:          1437
Signing time:             Wed 13 May 2026 02:01:17 +0000
Manifest this update:     Wed 13 May 2026 02:01:17 +0000
Manifest next update:     Thu 14 May 2026 02:01:17 +0000
Files and hashes:         1: 0vxysV8K8K16kmkjIj4RtAbD-UU.roa (hash: iyJv/+zD+LriBgc6xgCjkmEFLCEbY7odbgSqK8CwFw4=)
                          2: Ja5VGvC7XXl36nP2iW8l8eyij50.crl (hash: eu0sdZEgD7ehgWZBnafKOJQI3/GJ/mLAvo8OJE2+3Qk=)
                          3: O0O4Xg_devCgcZBCCVmryZVuD10.roa (hash: wlEVDlOa0NYJ2GQtXHiIWwkp+eia1OUendMc/DWWx98=)
                          4: PDAogfhHzjl2Oe7BmcnlQeQBWEI.roa (hash: ckoFLIB1Tcwfzt65rV/FjUZ2mj8Mb8q8+QFTh956cAA=)
                          5: TBrPU9fPKBDqqHBRaNxMA1UegDw.roa (hash: W7DQYQNuoI+QoqbkUzHRzRQaCn8sMhNXKaSmuQh0wgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:23:74:86:ca:21:7d:98:13:9f:b8:41:cf:54:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
        Validity
            Not Before: May 13 02:01:17 2026 GMT
            Not After : May 14 02:01:17 2026 GMT
        Subject: CN=516a67427648c7f1a140e1f174ed31a8c9e56370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:87:a0:68:5e:cc:0b:87:64:5d:5a:20:22:6b:
                    f8:f5:0f:26:eb:88:18:be:95:6f:b5:ff:93:41:fd:
                    ef:4d:e5:7f:b2:32:d9:f8:10:f2:5e:2e:18:c0:2c:
                    19:fd:40:9b:18:e8:64:59:35:b4:73:6d:ba:98:f8:
                    d5:e7:cc:be:07:b3:f7:e3:cf:0e:0b:d2:a0:4e:03:
                    79:b5:a9:5e:b3:68:2b:35:48:e2:7e:5f:c3:e4:c7:
                    3b:fc:92:8d:1f:8a:42:2e:bf:96:42:50:02:c3:e8:
                    06:c7:80:a0:90:95:61:28:9c:26:0b:f4:4e:8c:04:
                    33:f9:99:7d:a4:73:da:01:3d:cb:39:90:de:be:08:
                    45:18:45:a6:2f:3e:dd:ba:4d:da:d6:42:96:ae:a0:
                    ec:de:f6:ca:48:55:f8:b5:59:5b:b9:c8:f6:2a:c0:
                    70:02:d4:c2:8a:68:64:9e:5e:c6:38:89:15:1e:bb:
                    db:4c:af:4f:51:c1:d3:e1:77:9e:f4:ae:b3:85:6a:
                    6e:75:49:b3:fe:d9:50:97:c2:52:78:9e:27:a1:e8:
                    1f:13:e1:23:c1:e7:f6:89:c0:0e:99:bc:b3:f0:79:
                    3b:c8:ef:68:d6:d6:02:8e:be:40:29:56:f7:5a:4a:
                    ab:1b:a4:03:35:e6:33:ba:94:19:a8:01:f2:8f:b3:
                    25:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:6A:67:42:76:48:C7:F1:A1:40:E1:F1:74:ED:31:A8:C9:E5:63:70
            X509v3 Authority Key Identifier:
                keyid:25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:c6:57:dc:2f:3b:68:50:27:6d:b8:fb:2f:23:7b:0c:29:81:
         eb:b4:e5:8c:5a:6c:1d:10:de:c9:64:9c:79:bc:c2:4b:4f:2f:
         76:f6:00:56:60:dc:58:22:63:2d:e3:fe:84:ed:38:18:3e:0b:
         cc:c5:ab:53:27:4f:9f:eb:16:a3:85:fa:a3:b2:0d:69:0c:62:
         ec:3e:2b:1a:23:91:00:1d:0f:ee:a7:4e:26:46:30:3a:f5:5b:
         f7:04:fe:75:ea:39:76:24:7a:e8:34:7d:d3:dd:e6:71:ef:5f:
         ec:a6:44:39:5a:46:38:35:23:54:e2:29:33:1c:c0:76:4b:4c:
         d9:fb:69:fc:78:e9:e7:4b:ff:07:1a:5d:05:d3:8f:03:6c:04:
         7c:cf:f5:bb:0a:91:ff:1a:0b:33:64:06:c9:1b:fc:c9:3e:f4:
         a1:0c:7d:83:4f:30:ca:c5:30:70:95:28:a1:52:88:e9:f2:71:
         97:5b:0c:95:46:b5:26:9d:7c:6a:47:f1:48:c1:20:18:40:d6:
         44:4c:36:19:56:f7:72:9a:da:32:ae:5f:f3:b3:21:ba:45:de:
         eb:92:b9:8d:76:38:26:8c:3f:b7:01:13:80:1f:70:27:15:3d:
         9b:b2:6e:cb:6c:3b:13:c2:0b:04:71:b6:40:30:f9:78:cb:ee:
         06:8f:56:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:49:33 2026 by rpki-client