Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
File:                     9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft (raw, json)
Hash identifier:          08zssAad7lbNsLQT2OC3rLRXV9AAg/CUuXuaJbQKK6w=
Subject key identifier:   A8:F0:BE:35:87:50:B3:81:3C:A9:0E:47:06:BE:E8:A4:24:56:35:82
Authority key identifier: F5:D6:B1:D9:0E:D4:BF:16:51:AA:22:70:E6:EC:BA:C2:D8:79:22:AC
Certificate issuer:       /CN=f5d6b1d90ed4bf1651aa2270e6ecbac2d87922ac
Certificate serial:       019E1EA3345E7334C4E7EE5A56FD49237B1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
Manifest number:          02A5
Signing time:             Wed 13 May 2026 00:01:12 +0000
Manifest this update:     Wed 13 May 2026 00:01:12 +0000
Manifest next update:     Thu 14 May 2026 00:01:12 +0000
Files and hashes:         1: 9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl (hash: MlZjShoYucp0Y+6w20+TGwzzwSI40xNFxHPJoOhWCc4=)
                          2: W3uokoIan0bL_6hGsLT2Lc4cFQY.roa (hash: lnmDhnBJ1en6JgsP5wQ9r3eh318nNpbuOqRdtOpx05A=)
                          3: c7-vm7ayWM43onBxMirp6xh4ses.asa (hash: Yn9xC9hv7PLljqa8pOnthNeGkVr/8TT8ccV2WmSMABI=)
                          4: mqyazNOfM1ZVPm3cOVRYyNHDwpA.roa (hash: C7VZbHKV6HPYsBlX1X4bgcS+0xR52AiRYn6dtHpeMwc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:34:5e:73:34:c4:e7:ee:5a:56:fd:49:23:7b:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5d6b1d90ed4bf1651aa2270e6ecbac2d87922ac
        Validity
            Not Before: May 13 00:01:12 2026 GMT
            Not After : May 14 00:01:12 2026 GMT
        Subject: CN=a8f0be358750b3813ca90e4706bee8a424563582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e7:ab:2a:93:c6:4e:bf:7c:49:4a:51:ee:a2:
                    5b:11:88:42:0d:cb:4b:9b:c7:5e:97:8b:00:4f:d2:
                    40:c0:dc:1a:98:6f:b0:67:b4:91:fb:43:51:33:72:
                    38:79:ab:26:3a:10:33:9d:4e:f2:5a:78:3d:c6:ad:
                    a9:90:38:a9:fc:aa:f2:7a:eb:9f:a4:47:1e:c2:47:
                    bd:21:d6:1f:f8:b6:12:f2:cb:f2:e9:9a:e2:1b:af:
                    c2:db:bb:d0:2d:c6:28:3c:73:11:aa:fc:99:ac:30:
                    d9:22:65:86:f6:ed:fd:f6:ba:2e:71:31:b9:b7:4a:
                    ce:3f:8a:b4:bb:79:33:f9:0a:48:16:34:23:7b:ea:
                    9f:0a:9d:fc:79:5d:94:59:3a:bb:88:6f:3b:ab:8b:
                    42:07:41:85:99:ad:6c:2e:2b:2e:56:fb:88:bb:cb:
                    a3:5e:41:a5:be:ca:b7:d0:07:ec:78:ff:92:0c:3a:
                    64:76:f9:e0:3b:84:89:05:a5:0a:23:b0:7a:99:03:
                    97:ff:99:7b:b9:b1:55:26:3b:4f:4d:2d:4c:94:88:
                    65:7a:60:9e:5b:01:38:1b:64:0d:c3:af:ad:7d:43:
                    f6:a1:97:82:7c:04:a8:ed:09:b7:eb:c9:d8:d2:65:
                    ea:0e:2d:82:72:ec:9a:4a:76:9e:92:be:50:56:d3:
                    be:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F0:BE:35:87:50:B3:81:3C:A9:0E:47:06:BE:E8:A4:24:56:35:82
            X509v3 Authority Key Identifier:
                keyid:F5:D6:B1:D9:0E:D4:BF:16:51:AA:22:70:E6:EC:BA:C2:D8:79:22:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:2c:45:c0:3e:ce:22:7f:d0:a0:98:0c:2c:f3:8b:ac:88:4f:
         fd:af:d4:5c:65:f6:dd:8a:ca:8e:13:0a:1d:1d:6d:40:0f:0b:
         7e:14:56:5a:ec:a1:f8:6d:54:42:93:54:2d:67:6a:73:b3:16:
         13:9e:fc:3b:00:72:5a:33:68:5d:cc:6d:38:e1:53:70:44:79:
         44:d2:b6:d5:52:e1:9c:48:af:e5:e6:1e:21:0a:41:58:59:49:
         4f:3b:a6:d1:a1:28:a3:68:a7:02:49:0a:e0:9d:da:96:cd:70:
         b0:87:2f:b3:1d:50:7b:47:d9:73:1b:f1:78:ce:e0:0e:f5:7d:
         a7:03:d9:95:de:3d:55:69:50:0f:e7:f0:bf:d6:62:96:83:6c:
         e0:1f:f7:9c:3b:08:5f:f0:3d:dd:c9:75:12:00:70:cb:84:8f:
         24:ce:c8:f1:28:1b:9a:e6:bf:c5:c4:1b:0d:6b:26:42:ba:e2:
         f5:aa:05:67:37:73:4c:c0:09:c8:14:58:ad:86:03:f2:5a:69:
         0a:c9:73:31:0c:cb:23:78:76:21:a1:d1:88:86:71:c5:f0:59:
         0c:03:53:f3:35:af:df:8b:0b:c5:78:96:19:19:8d:9d:e0:87:
         8c:ae:b3:b9:60:c0:ef:b4:09:5c:90:0e:f7:8a:94:42:e3:be:
         be:a1:36:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:28:21 2026 by rpki-client