Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
File:                     prswRa6njo-nZIEpcU-3NgaNw3s.mft (raw, json)
Hash identifier:          WNa4VdBFAliDasqds3ZcssQ5Os1G6yG4DCokyhdgH3g=
Subject key identifier:   80:7A:1B:AA:4A:EA:04:4C:69:54:E1:EF:2B:72:FA:03:B0:DA:1B:5F
Authority key identifier: A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B
Certificate issuer:       /CN=a6bb3045aea78e8fa7648129714fb736068dc37b
Certificate serial:       019E1CEBC5502CF7EC2AF5A0B668DF2304AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
Manifest number:          0C61
Signing time:             Tue 12 May 2026 16:01:13 +0000
Manifest this update:     Tue 12 May 2026 16:01:13 +0000
Manifest next update:     Wed 13 May 2026 16:01:13 +0000
Files and hashes:         1: G42-Fdl3gJAxSTqoOxR_BXG1oH8.roa (hash: pai33aN90kyIzUMmy6nzZwQfDVVekgEOsKj6Cwhhy24=)
                          2: prswRa6njo-nZIEpcU-3NgaNw3s.crl (hash: VjAAX8ASgjHcsjxWTs1j9ANwWdUY2ixEKOO7qfBBpy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:c5:50:2c:f7:ec:2a:f5:a0:b6:68:df:23:04:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6bb3045aea78e8fa7648129714fb736068dc37b
        Validity
            Not Before: May 12 16:01:13 2026 GMT
            Not After : May 13 16:01:13 2026 GMT
        Subject: CN=807a1baa4aea044c6954e1ef2b72fa03b0da1b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b1:c9:56:5e:64:e6:0b:46:d5:2c:7c:b5:12:
                    fd:fe:bb:bd:20:16:04:08:8c:cd:0a:13:13:95:80:
                    80:a8:71:b5:0a:b7:5e:02:90:aa:77:82:fd:45:82:
                    5d:2f:8e:90:bf:81:81:10:ab:57:99:e9:03:99:84:
                    23:86:7a:a9:19:a8:03:09:96:ab:18:5d:2b:79:ea:
                    1a:95:cf:c2:30:bb:14:8c:4f:4e:86:c0:99:56:f8:
                    8d:0a:1c:4f:75:5e:2c:94:17:8d:8b:44:3f:9e:5e:
                    a8:c2:f5:64:c1:00:b8:00:97:84:59:a6:c5:21:6b:
                    74:51:bb:dc:46:c0:a1:a2:6a:bd:30:a4:99:06:8c:
                    b5:1c:ea:7e:8a:1a:e4:1c:24:cb:79:5d:c7:83:37:
                    39:1e:ad:04:e9:97:4f:0c:34:60:9e:90:48:7a:f2:
                    28:a1:25:31:4f:9c:f3:a1:87:50:65:32:b7:62:e1:
                    58:ed:c9:e5:1f:f8:fa:50:92:94:aa:37:de:74:4a:
                    4d:e5:d8:07:08:72:be:63:62:25:c0:cc:e0:21:4f:
                    e4:40:28:16:5b:9a:5a:13:14:c1:f3:26:26:55:a6:
                    0c:26:8d:e2:c7:a3:e7:c7:47:9c:06:74:b7:68:d2:
                    db:a8:47:5d:aa:c0:47:58:49:fd:f8:ce:aa:2e:f3:
                    58:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:7A:1B:AA:4A:EA:04:4C:69:54:E1:EF:2B:72:FA:03:B0:DA:1B:5F
            X509v3 Authority Key Identifier:
                keyid:A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:16:4a:fb:07:93:a1:1b:13:63:c2:7c:5e:b4:e0:b1:17:0c:
         9a:16:6d:fe:e5:e6:d7:b6:18:d2:78:5e:67:1d:fd:69:63:c8:
         87:13:d3:9c:ae:25:fa:b2:f5:1e:e8:df:26:3c:9b:70:67:9b:
         95:73:c2:bf:d2:2c:39:a9:9f:3b:ad:5b:0f:6b:c6:b1:62:9c:
         8c:2a:f1:e6:b1:dd:c4:3f:9e:16:5b:d4:7e:1e:cf:db:1f:20:
         9c:5f:4e:3b:29:a0:1a:30:5f:cf:19:b7:21:6a:35:3e:3e:ef:
         2f:ab:54:69:42:3c:2b:ab:ed:02:c3:e5:13:4f:50:71:a5:cc:
         82:99:61:25:67:54:4b:5e:42:22:73:9f:38:12:2a:f0:9d:15:
         48:0c:06:97:aa:8d:82:ff:ba:1c:80:9b:e8:a8:56:79:a6:3b:
         24:8d:21:fc:5a:71:9e:be:a7:19:a6:52:9f:68:36:8d:b9:41:
         0f:9f:24:f2:04:69:cd:9d:bf:e3:52:99:fd:31:1f:b0:5f:80:
         61:99:bc:44:19:54:18:a5:f6:d9:02:72:40:1e:c6:f1:b4:da:
         4a:13:09:8b:a5:29:65:a7:10:b0:51:e7:1d:4b:fa:95:2a:78:
         ff:35:88:12:db:67:97:d5:cd:b1:12:e7:9e:5f:18:f4:3d:b2:
         e1:65:ed:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:52:40 2026 by rpki-client