Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
File:                     SLo3AWkdKSivrTobVzWib0yZz_Y.mft (raw, json)
Hash identifier:          eFuKZZtFUdVIjkyGUAybRlnqBR0ocNSKtogeKMZ5g/g=
Subject key identifier:   68:9A:41:91:07:AD:DD:52:4D:58:21:E4:55:2F:55:67:01:F8:01:0C
Authority key identifier: 48:BA:37:01:69:1D:29:28:AF:AD:3A:1B:57:35:A2:6F:4C:99:CF:F6
Certificate issuer:       /CN=48ba3701691d2928afad3a1b5735a26f4c99cff6
Certificate serial:       019E1DC72963F07E92BE6F1A7F3237EFA396
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
Manifest number:          1816
Signing time:             Tue 12 May 2026 20:00:51 +0000
Manifest this update:     Tue 12 May 2026 20:00:51 +0000
Manifest next update:     Wed 13 May 2026 20:00:51 +0000
Files and hashes:         1: SLo3AWkdKSivrTobVzWib0yZz_Y.crl (hash: sfUENcTdM85fCzuCC58EEhTtu8L51cvqdOw4ScqBKrI=)
                          2: v3K9X62S23EsPXBUv8o5_0MHn4Y.roa (hash: 6AkfovE+X2QIgtQd8B7GXkBK4tknFic/hJn5uV1siEo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:29:63:f0:7e:92:be:6f:1a:7f:32:37:ef:a3:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48ba3701691d2928afad3a1b5735a26f4c99cff6
        Validity
            Not Before: May 12 20:00:51 2026 GMT
            Not After : May 13 20:00:51 2026 GMT
        Subject: CN=689a419107addd524d5821e4552f556701f8010c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f4:33:6b:14:c8:9a:19:97:22:cf:52:7d:2b:
                    aa:e4:0f:95:c1:f0:d7:39:a0:6d:b8:66:60:9c:6e:
                    4a:a7:e4:74:8e:c1:39:df:c0:2c:f3:fe:a5:d0:c3:
                    c3:59:e6:c7:07:ea:e5:f9:58:be:68:81:b0:33:17:
                    d6:a3:51:6e:5e:21:dd:5d:ff:82:b1:69:f7:10:8a:
                    6e:ed:36:27:13:f0:07:80:27:6f:b8:0b:c6:3e:18:
                    45:8f:27:84:82:fd:e1:1b:44:07:c4:b2:33:80:23:
                    72:66:e8:30:62:cf:e3:a0:8d:41:e9:fe:c4:55:92:
                    b6:e8:dc:c3:d4:d6:f0:a6:c2:69:f6:01:64:60:b5:
                    4c:ec:55:3e:81:5e:a5:f2:79:f3:42:46:d9:59:0f:
                    88:b9:16:44:ad:d9:cb:42:b3:44:4b:7a:19:0b:aa:
                    d8:38:7a:2c:23:c9:82:cd:2a:6c:74:20:b3:b3:3e:
                    31:20:20:95:4b:dd:a6:bf:73:34:c3:13:7d:09:5f:
                    70:57:77:3e:f1:26:7f:36:04:7a:20:d5:a4:61:05:
                    1d:11:42:be:69:23:b6:0d:e4:0c:5b:b6:68:d4:42:
                    b1:84:0b:f9:f4:2a:e6:2c:86:1b:a5:04:08:d2:1b:
                    5f:04:cb:ef:cb:d3:8d:c2:41:b6:d5:31:92:59:f1:
                    ac:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:9A:41:91:07:AD:DD:52:4D:58:21:E4:55:2F:55:67:01:F8:01:0C
            X509v3 Authority Key Identifier:
                keyid:48:BA:37:01:69:1D:29:28:AF:AD:3A:1B:57:35:A2:6F:4C:99:CF:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:b8:2f:cb:8a:92:cc:17:a3:0d:56:0a:f7:b0:ea:e4:4c:7e:
         98:f2:af:90:f9:53:80:7e:04:6e:83:f4:76:33:49:b4:5a:40:
         e1:34:13:6c:45:2c:a6:2e:63:74:7c:9a:8d:20:66:68:d2:5f:
         8c:eb:f7:c3:a7:b4:71:89:fc:59:48:13:d9:85:17:de:19:48:
         bb:ad:69:c0:98:1e:f0:c4:18:50:b1:70:7b:cf:e9:07:2e:c3:
         fb:3c:f1:52:81:19:16:8f:ee:e5:21:db:1d:f9:11:db:ae:3e:
         e7:e9:bd:7c:0c:2c:df:b3:9f:e0:e9:5a:9a:b5:b9:12:51:9e:
         36:91:2e:75:3a:00:f2:39:0c:85:1b:00:90:fd:db:c5:b6:67:
         13:cc:06:12:df:8e:38:bd:13:af:da:8b:4b:ff:ef:5d:39:94:
         98:b1:88:73:3a:67:2e:40:77:00:50:ae:f7:16:ce:54:78:b1:
         34:39:6d:12:9f:f7:5e:5f:c5:37:ab:f2:c5:4e:87:d8:24:1a:
         ca:1b:ca:db:f3:1b:5e:0c:67:72:e1:3c:f7:2d:55:f6:44:dd:
         19:01:f3:01:2a:b3:b8:8c:5f:db:65:13:25:e9:af:38:8e:91:
         53:78:ac:f0:5c:d0:30:3c:67:25:f1:57:91:ab:bf:f3:3f:bf:
         ac:ce:83:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:46:13 2026 by rpki-client