Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
File:                     rqUKTs9FgQz29pyXw8aFz8JJdsI.mft (raw, json)
Hash identifier:          DSytxW+Q8VEiwXDiONeiMKSl7VfV9ubmUttfiK7xa/c=
Subject key identifier:   C0:D2:72:04:E3:19:68:12:9D:FB:4C:93:67:77:2A:17:43:A8:37:70
Authority key identifier: AE:A5:0A:4E:CF:45:81:0C:F6:F6:9C:97:C3:C6:85:CF:C2:49:76:C2
Certificate issuer:       /CN=aea50a4ecf45810cf6f69c97c3c685cfc24976c2
Certificate serial:       019E1DFE83F0E05D0B2E7D98FA1E56674557
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
Manifest number:          03CB
Signing time:             Tue 12 May 2026 21:01:19 +0000
Manifest this update:     Tue 12 May 2026 21:01:19 +0000
Manifest next update:     Wed 13 May 2026 21:01:19 +0000
Files and hashes:         1: 5ELmBJPpYA7tVnLsfvJ7WFW-_ng.roa (hash: 5mmbc16KLPR+GEpL460h+oCJig1AkRpH39Lcr2Vr6J4=)
                          2: rqUKTs9FgQz29pyXw8aFz8JJdsI.crl (hash: 190EEvCZa3EMZrcr7Uu6q7d3K3jGRQK/kHek3+rIoQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:83:f0:e0:5d:0b:2e:7d:98:fa:1e:56:67:45:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aea50a4ecf45810cf6f69c97c3c685cfc24976c2
        Validity
            Not Before: May 12 21:01:19 2026 GMT
            Not After : May 13 21:01:19 2026 GMT
        Subject: CN=c0d27204e31968129dfb4c9367772a1743a83770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b4:04:b9:e3:fc:a1:a6:d2:8e:ff:9f:71:b8:
                    8b:1a:99:dc:51:bc:5c:12:ac:91:87:4f:47:dc:7b:
                    0e:55:09:27:4d:81:27:be:8e:5f:0c:ee:3f:d7:3c:
                    a0:2b:81:3a:05:52:f4:c0:92:56:1f:37:cf:61:32:
                    3c:c0:02:61:55:ea:ca:cd:1b:56:63:8c:ec:6e:52:
                    95:8d:61:35:1f:e2:4d:78:6e:13:3c:0c:ca:9b:0f:
                    7d:f5:63:5d:b5:18:be:e9:fb:40:03:71:c0:ab:49:
                    cb:ea:48:7a:5d:88:af:13:0e:b7:db:26:79:52:85:
                    3e:1c:78:8d:1f:fc:36:aa:83:85:3f:a4:3f:c6:83:
                    bd:09:ff:65:72:c6:65:84:80:8e:67:82:6d:86:3b:
                    f7:61:a9:64:65:c3:43:4e:86:3a:05:2f:e1:f3:85:
                    a8:8e:c2:a4:ca:0c:53:3c:b8:1d:d2:1c:10:52:e9:
                    e4:b8:71:8c:ba:81:1b:37:4a:62:19:01:74:0c:95:
                    ae:a1:e7:b9:fd:5b:07:c9:23:cf:df:2a:51:d9:c0:
                    62:4c:49:72:c4:e2:5d:7a:d6:54:30:76:84:5b:db:
                    a4:86:ab:da:19:b3:4f:6f:22:d1:54:25:4d:01:59:
                    57:1a:53:80:97:3e:34:ca:1e:54:d1:04:9f:5c:cc:
                    47:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D2:72:04:E3:19:68:12:9D:FB:4C:93:67:77:2A:17:43:A8:37:70
            X509v3 Authority Key Identifier:
                keyid:AE:A5:0A:4E:CF:45:81:0C:F6:F6:9C:97:C3:C6:85:CF:C2:49:76:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:83:6f:f5:ae:da:6f:f2:38:84:5e:a7:f2:11:5b:31:a5:e0:
         30:46:ac:e2:4b:32:71:a5:d1:e7:99:31:24:75:02:f9:fa:cb:
         70:47:bb:54:7e:7c:5f:a3:dc:a5:45:24:8a:f9:90:65:ac:b7:
         ca:ea:38:4d:64:bd:f2:23:83:0b:05:96:f4:ef:96:0d:94:04:
         63:70:26:58:55:e9:36:11:5b:50:49:f1:14:ee:e1:e4:f5:85:
         43:fd:15:4a:20:39:a7:8d:e9:7a:4f:2e:8e:1d:f4:ee:b4:3e:
         db:b0:76:a3:3c:85:3b:df:ca:29:8f:62:45:32:8e:41:74:2b:
         18:aa:64:fe:40:bc:85:2e:c3:bf:57:63:25:70:01:1a:7b:60:
         c4:a2:a3:56:7e:8b:2c:bc:ca:25:9b:97:67:94:af:99:4b:e1:
         05:13:43:1a:04:9a:8a:09:8e:43:dc:61:d0:a0:05:a1:ef:87:
         8f:f9:0a:1c:63:a0:87:87:0f:35:b2:1d:20:f1:d1:b5:94:c2:
         77:a4:e5:48:a6:9e:3c:b7:1d:b5:e8:af:d2:29:23:1c:5e:58:
         34:3c:76:70:4c:dc:79:57:02:59:51:5d:6c:9f:24:4e:97:a1:
         c4:7f:34:09:2c:bd:5e:32:27:d8:db:37:ae:cd:b1:c4:15:d9:
         77:8a:a0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:19:44 2026 by rpki-client