Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
File:                     H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft (raw, json)
Hash identifier:          yApzz9B9vR0lJxAHoPaM+EA5n5JP7bgDLTmVJzcE2uo=
Subject key identifier:   B9:4E:9B:B8:94:69:1B:32:B6:B9:93:14:1C:78:CC:DB:3F:31:F3:E4
Authority key identifier: 1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
Certificate issuer:       /CN=1f97599f63d787c65b2ef9ff70dd636527404466
Certificate serial:       019E1EDA0FB7B1838B116E18A0A60D7E0538
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
Manifest number:          1010
Signing time:             Wed 13 May 2026 01:01:07 +0000
Manifest this update:     Wed 13 May 2026 01:01:07 +0000
Manifest next update:     Thu 14 May 2026 01:01:07 +0000
Files and hashes:         1: H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl (hash: Dpw///nrifQTt10a9y6alAR14gHAg1pV5/FiTj3DU0A=)
                          2: ex-egV2q8xIsoN87xmhf0Beqsx8.roa (hash: yMk8zHkPeRJ7LF6AhIih+Hrdt/inz7ExGAHQpY4Q1X0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:0f:b7:b1:83:8b:11:6e:18:a0:a6:0d:7e:05:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f97599f63d787c65b2ef9ff70dd636527404466
        Validity
            Not Before: May 13 01:01:07 2026 GMT
            Not After : May 14 01:01:07 2026 GMT
        Subject: CN=b94e9bb894691b32b6b993141c78ccdb3f31f3e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7a:19:43:8c:45:04:f6:11:54:5e:ff:eb:58:
                    64:d7:6a:7e:de:77:5d:ee:f6:73:13:8e:a1:73:2c:
                    7d:6f:92:8a:63:4d:de:15:62:25:d6:97:9c:6d:1f:
                    62:53:e3:f1:a9:59:b5:f3:e8:51:92:2b:da:13:11:
                    2a:a3:af:02:2c:62:c0:38:e6:83:f7:2d:36:d4:37:
                    51:b7:18:2c:84:0c:d7:28:2f:45:ab:23:29:b8:bf:
                    fd:8c:fa:d3:a3:b9:ba:5a:7d:c5:84:e2:92:95:c0:
                    43:c4:92:5a:69:e2:54:d0:e9:7d:3c:ec:41:6c:e1:
                    c5:6d:2d:2e:19:7b:5d:87:28:42:90:38:db:87:bf:
                    55:a2:da:bb:a9:93:14:00:19:6a:c5:80:94:ed:d4:
                    c5:81:2f:1f:19:b1:74:e8:17:2b:d0:df:85:45:45:
                    e6:4e:39:a3:c6:37:9c:10:a2:5e:09:75:43:c6:a4:
                    af:53:e4:73:02:21:80:44:15:98:e8:da:92:c3:97:
                    c3:84:d9:b5:20:2e:70:99:06:9e:a2:94:15:c2:d5:
                    77:d1:73:4c:1e:96:48:dd:23:49:55:99:53:b9:ca:
                    08:9e:8c:e1:ac:90:63:3b:df:53:08:a2:90:8f:ed:
                    3e:a2:e0:9b:57:02:10:54:a6:b7:7e:ec:25:8d:24:
                    d7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4E:9B:B8:94:69:1B:32:B6:B9:93:14:1C:78:CC:DB:3F:31:F3:E4
            X509v3 Authority Key Identifier:
                keyid:1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:0a:76:4f:6d:bf:46:f5:91:1a:0b:2f:95:60:b6:c0:f9:b0:
         0f:72:04:d1:6a:5d:17:1a:40:54:db:cf:b2:c7:3c:c2:ff:4d:
         a4:ee:26:82:72:ff:59:8d:7d:ff:01:06:76:e1:9f:d1:c9:37:
         78:3c:e9:6d:83:b9:ca:9c:42:5a:d2:ed:84:09:b7:70:3b:e0:
         57:a1:e8:59:a5:33:f4:8b:77:1d:c3:a3:cd:ae:9a:b2:49:0d:
         b4:4e:26:fc:43:99:84:8d:ec:df:01:be:de:c3:e4:f8:48:98:
         6c:ee:8f:2e:5d:b4:78:1c:d7:a9:11:b1:45:b2:18:cc:f2:62:
         f4:00:69:af:46:cd:db:c2:1d:c9:ca:9e:b6:fa:74:01:b5:02:
         47:d5:d4:17:41:94:54:b0:cd:94:bf:f9:2e:37:25:99:d4:16:
         03:cc:9b:c8:77:26:8c:7b:d3:b9:c3:68:c7:d2:6e:ad:1a:d0:
         7e:41:95:b9:0c:00:85:ef:4a:2f:9a:0f:a7:48:57:ac:cf:4c:
         a5:85:39:78:9f:61:4c:d7:ba:1e:3b:55:17:e8:26:ff:88:6b:
         2c:9f:31:ab:c7:2e:50:56:92:1e:09:18:f5:90:6f:05:03:6e:
         64:55:4a:3f:e4:aa:e0:56:e0:ab:46:c1:ef:b0:2e:8f:29:2b:
         aa:97:11:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:30:07 2026 by rpki-client