Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
File:                     15-SXhc4vDUrxrXPX_lRs9gTrjk.mft (raw, json)
Hash identifier:          L+i2/dbcK3Zmshzf62DQMCNooTwk0SbrgTOIQPyaj5M=
Subject key identifier:   75:37:7E:4D:E6:7E:8E:97:82:E4:71:6D:79:36:1E:30:13:F6:56:29
Authority key identifier: D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
Certificate issuer:       /CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Certificate serial:       019E1D9136A2908EB83AF098BA2B792F89D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
Manifest number:          0988
Signing time:             Tue 12 May 2026 19:01:56 +0000
Manifest this update:     Tue 12 May 2026 19:01:56 +0000
Manifest next update:     Wed 13 May 2026 19:01:56 +0000
Files and hashes:         1: 15-SXhc4vDUrxrXPX_lRs9gTrjk.crl (hash: PK2y9o1MZPq5O33Iwi16iF+C8sx1WC+ASSwEPTMmtmo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:91:36:a2:90:8e:b8:3a:f0:98:ba:2b:79:2f:89:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
        Validity
            Not Before: May 12 19:01:56 2026 GMT
            Not After : May 13 19:01:56 2026 GMT
        Subject: CN=75377e4de67e8e9782e4716d79361e3013f65629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:75:0a:f0:e9:48:7f:6a:c2:57:2e:4a:92:03:
                    ee:0b:36:07:85:33:a4:08:94:5c:4d:df:62:00:8c:
                    96:31:89:74:f6:33:46:dd:93:0b:c8:51:77:fc:f6:
                    dd:1b:c1:eb:dd:a5:ed:90:ad:89:90:06:b1:a3:52:
                    35:bb:51:7e:e0:64:f8:c4:41:13:3b:2b:b6:54:fd:
                    b9:5c:57:8d:c5:bf:9a:97:83:66:63:11:85:92:08:
                    8d:fd:38:fe:17:78:94:bd:5a:64:bb:c4:91:e8:81:
                    47:90:e7:fa:0a:8c:ba:f6:3d:10:f0:39:e8:fb:fa:
                    f2:be:19:32:89:0e:91:13:f6:3f:40:27:e2:76:54:
                    45:6e:bc:ed:1b:8a:40:1b:20:7e:30:d0:78:0b:20:
                    ac:7b:4a:3a:79:73:2e:0b:88:3d:f3:09:6c:d9:3a:
                    79:29:5d:48:f5:06:9a:e8:22:05:ce:9e:22:5d:87:
                    95:6c:43:4e:a8:f9:26:7e:d8:8f:22:11:cd:b4:ba:
                    01:0f:80:3a:12:b8:1f:67:65:61:67:dc:6a:38:f1:
                    86:60:1d:97:f4:39:8b:3d:38:7d:08:ea:d6:0f:17:
                    86:4a:f6:42:9f:2c:65:f9:11:82:a0:e8:bb:c5:07:
                    99:34:37:02:3c:d7:b4:9d:a7:34:ba:79:2c:8c:e7:
                    f1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:37:7E:4D:E6:7E:8E:97:82:E4:71:6D:79:36:1E:30:13:F6:56:29
            X509v3 Authority Key Identifier:
                keyid:D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:be:2b:59:f7:4f:59:6e:c3:99:ab:13:04:b7:a8:0e:db:fe:
         c6:bb:e6:78:58:a3:7b:68:a3:06:e0:3b:a0:d5:0b:e4:a5:a4:
         19:f0:e4:04:99:3a:e6:d9:ee:5a:85:a9:b8:06:f0:4c:cb:1a:
         d5:46:be:73:38:01:ba:14:a7:db:10:45:50:2b:53:ce:95:a8:
         dc:64:3b:ea:46:7b:75:89:5d:66:1b:6c:e9:84:17:a1:ad:f2:
         42:f6:29:d9:65:c1:5e:8a:85:92:84:90:df:be:32:ad:b6:91:
         3d:43:4f:87:e5:68:56:9b:98:fb:91:d0:6a:d5:56:05:27:a3:
         b2:f8:a0:87:9f:b8:61:9c:47:1c:09:56:45:7d:9f:79:5c:a1:
         a9:91:19:71:24:e2:fa:a8:a0:f1:12:fb:26:ea:af:ec:9a:26:
         44:71:b2:9d:16:79:a6:4c:73:80:46:ef:1b:1a:7f:52:96:49:
         c6:c3:59:8b:61:37:b5:5e:f4:36:76:af:e2:f6:84:77:11:d4:
         33:91:85:9d:2d:15:63:a9:08:48:9b:c7:93:51:36:9d:3d:90:
         96:0f:bb:af:28:41:45:0a:53:2b:f1:d9:11:41:67:69:02:54:
         b4:dc:52:bb:ef:e9:18:40:b7:04:8e:72:af:09:e8:a4:34:cc:
         0d:50:59:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:33 2026 by rpki-client