Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
File:                     kwd6mXyVvQGmTUCK_PVU2ItNteU.mft (raw, json)
Hash identifier:          yk5PZWOSCAG+jxfW+jrbcoXaAQc3gflCe6VpZrhGLog=
Subject key identifier:   18:24:5A:79:2F:D7:31:61:76:F9:1D:08:F4:1E:B7:00:30:44:1E:7A
Authority key identifier: 93:07:7A:99:7C:95:BD:01:A6:4D:40:8A:FC:F5:54:D8:8B:4D:B5:E5
Certificate issuer:       /CN=93077a997c95bd01a64d408afcf554d88b4db5e5
Certificate serial:       019E1F10F176B70E4FDE6999F67519ACC30D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
Manifest number:          07F1
Signing time:             Wed 13 May 2026 02:01:04 +0000
Manifest this update:     Wed 13 May 2026 02:01:04 +0000
Manifest next update:     Thu 14 May 2026 02:01:04 +0000
Files and hashes:         1: kwd6mXyVvQGmTUCK_PVU2ItNteU.crl (hash: jhtnHBkVbVN8MD3NRu2nwfl9peVvbSLZHx/yPd4TMYs=)
                          2: xCA0Tyr9gAJcBb_aRk9f4_-65Hw.roa (hash: vLJiM8h1yXdHJ3CZa6/nqFa+H4CdzM6jrN7A815VTRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:f1:76:b7:0e:4f:de:69:99:f6:75:19:ac:c3:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93077a997c95bd01a64d408afcf554d88b4db5e5
        Validity
            Not Before: May 13 02:01:04 2026 GMT
            Not After : May 14 02:01:04 2026 GMT
        Subject: CN=18245a792fd7316176f91d08f41eb70030441e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ee:d5:d8:86:85:41:25:ea:02:33:8b:b2:b1:
                    b2:ce:48:ff:97:83:e2:8a:3a:8c:59:35:d2:db:5a:
                    ea:e4:35:b2:2b:76:42:89:ee:2d:27:ab:6d:a6:a1:
                    10:de:24:ed:7e:3e:7c:59:1f:68:6b:4b:aa:b3:eb:
                    e0:9d:4c:db:64:ef:8d:0f:66:50:72:d6:63:fc:57:
                    4e:cb:b6:a6:f4:14:5a:ef:bd:32:e9:a1:1b:61:f9:
                    b6:a9:7d:17:6d:84:2f:0b:a7:ab:6a:b3:ec:52:43:
                    8b:a5:ef:c5:16:38:de:c6:90:d2:db:60:69:cb:56:
                    87:de:ad:e2:52:78:d4:ce:71:8d:ab:97:69:d4:ea:
                    35:2c:bd:58:5d:a6:47:71:01:0f:f2:cb:4a:8d:50:
                    c6:1e:29:db:d1:d0:32:e9:3e:ca:35:e8:20:bc:bd:
                    1a:f3:f5:b3:59:94:81:df:93:7c:fd:5f:b5:38:01:
                    df:b8:1d:b1:6b:34:b9:18:7c:42:64:35:cf:c5:1c:
                    75:06:13:29:9f:0b:74:43:1f:16:1e:62:b3:fb:20:
                    c3:95:0c:d7:2f:12:c9:de:fc:f8:2d:f7:9a:f6:12:
                    a7:aa:9a:9c:3b:3c:81:22:08:0a:96:0a:cb:11:e1:
                    25:e6:d8:36:3b:74:3c:0e:df:0d:b1:bb:9a:5d:06:
                    0d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:24:5A:79:2F:D7:31:61:76:F9:1D:08:F4:1E:B7:00:30:44:1E:7A
            X509v3 Authority Key Identifier:
                keyid:93:07:7A:99:7C:95:BD:01:A6:4D:40:8A:FC:F5:54:D8:8B:4D:B5:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:63:b3:52:c1:11:e3:5f:a1:9e:47:1a:12:77:52:3d:61:d3:
         27:db:34:b0:63:cc:33:ef:c8:70:05:46:52:59:02:2d:03:9c:
         a9:1d:fc:e1:01:ea:03:32:7f:83:fd:5a:11:47:04:d0:f1:23:
         3a:2f:39:af:01:85:31:a4:92:c4:c4:2e:21:2e:55:b4:77:b9:
         b8:a7:8e:e4:5f:b9:f5:67:37:20:45:5a:5d:8a:74:f2:55:4c:
         00:3d:0c:93:91:96:88:3c:5d:ce:d4:f2:e4:6e:04:70:ff:65:
         6f:07:ff:16:6c:af:e2:7c:da:a9:f4:be:2a:21:aa:a9:a8:31:
         64:c4:fb:4d:22:e6:c9:2b:a6:65:e5:3b:1f:75:af:fc:44:c4:
         85:b9:bd:85:74:17:40:76:0e:4e:df:b2:e3:12:88:bb:79:36:
         6e:9a:38:24:44:73:1a:eb:93:2b:21:10:d4:6d:92:78:e8:2c:
         6b:b6:8c:92:1c:d9:7a:9a:9c:dd:8f:1f:09:cf:3d:54:9c:fc:
         3d:95:ea:c6:42:44:4a:95:fa:41:db:fc:f4:72:84:b8:16:cf:
         c9:8b:fe:49:a1:43:fb:98:fc:36:84:c7:af:1f:84:1e:98:b3:
         b2:7c:d2:49:1f:f7:1b:44:72:27:7f:56:9c:87:c3:81:cb:82:
         16:e7:f8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:24:37 2026 by rpki-client