Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
File:                     AV8OZlqcdCI8S_4nChZZreTO8x8.mft (raw, json)
Hash identifier:          Y9asetRZK2WJCU7NshQupnhxZ5B2Kawte+bKOQmzs8A=
Subject key identifier:   75:18:B0:22:1A:64:94:D8:48:FE:D2:65:86:8B:10:5E:92:95:7F:35
Authority key identifier: 01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
Certificate issuer:       /CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Certificate serial:       019E1D59797DF954D46524D4692C38619488
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
Manifest number:          042A
Signing time:             Tue 12 May 2026 18:01:03 +0000
Manifest this update:     Tue 12 May 2026 18:01:03 +0000
Manifest next update:     Wed 13 May 2026 18:01:03 +0000
Files and hashes:         1: A9rhd59_7voAjZbMragLA3ftrbw.roa (hash: jQKHOIkJndimLRm6Iut1TREkFlVZwkrcXKBUSUJBxdk=)
                          2: AV8OZlqcdCI8S_4nChZZreTO8x8.crl (hash: svAK9KQlcF6SYGczWTZImJHQOJCnAa/Np/LJBFX74zc=)
                          3: d9Ge2npzpsYZ4-H4VMZTmU7XIWw.roa (hash: gyeML4vxjWokwcPNE5B6qDQbqzNUghx/e5PMeQjFWBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:79:7d:f9:54:d4:65:24:d4:69:2c:38:61:94:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
        Validity
            Not Before: May 12 18:01:03 2026 GMT
            Not After : May 13 18:01:03 2026 GMT
        Subject: CN=7518b0221a6494d848fed265868b105e92957f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:71:53:1f:2e:23:7e:b2:b8:84:ab:cb:39:a3:
                    9f:58:99:e8:2c:72:d7:31:b6:43:c1:87:8b:d6:bf:
                    0a:c2:46:8c:ac:3f:30:73:3b:f8:86:17:35:c8:ae:
                    18:1a:49:2c:c5:78:84:b7:56:8b:94:05:71:a6:f2:
                    fe:fb:7c:18:51:ed:62:88:f4:8b:b2:91:c5:96:15:
                    a8:ac:84:7e:fd:33:26:5e:04:f6:c4:af:c1:39:d4:
                    0a:5c:b0:b7:ec:07:9f:c0:fa:c8:5c:fe:9c:81:e8:
                    2b:8b:5c:11:02:67:7d:42:56:c4:76:6c:50:71:d1:
                    63:1c:10:73:c7:79:72:74:31:c7:a6:3f:62:0e:68:
                    bd:a9:6c:78:cc:b4:fd:3e:d7:34:c7:b9:2f:40:73:
                    8f:83:e8:ca:93:2a:c1:16:95:bf:69:7d:8a:0a:b0:
                    f4:30:3e:ac:4f:df:4a:bd:4a:5e:83:32:a9:f2:41:
                    c0:77:fc:d1:fc:44:f3:eb:98:1f:14:40:27:14:ec:
                    8a:8c:c9:c7:b0:b3:73:00:75:af:ba:28:f0:80:62:
                    4a:a9:8d:e3:15:ee:69:43:e8:25:fb:60:21:81:55:
                    cd:76:c4:bd:c3:b9:a7:f8:ea:b6:df:b6:b9:48:80:
                    19:6f:31:26:ba:b9:12:05:52:3f:ed:1f:93:a1:bf:
                    a3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:18:B0:22:1A:64:94:D8:48:FE:D2:65:86:8B:10:5E:92:95:7F:35
            X509v3 Authority Key Identifier:
                keyid:01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:54:c3:df:89:8a:59:59:ed:0a:e8:0f:26:68:76:55:6f:3d:
         ec:c8:01:dc:f8:6e:90:42:8c:bc:66:32:7b:64:75:3a:c7:e8:
         c1:9d:65:1d:34:71:d8:dc:ba:5c:fa:3b:0f:60:a3:b7:5e:4b:
         86:7b:8c:74:f9:1d:c2:29:61:19:fa:81:e0:11:0a:3a:51:09:
         93:ba:d5:ab:bb:e9:fa:36:07:f3:34:4c:42:0d:bc:be:72:62:
         88:af:04:59:f7:af:68:4d:2e:ac:98:01:b1:d7:4e:06:fa:ad:
         dd:22:75:8d:e0:be:de:73:1d:2c:7c:fb:a3:8f:79:4b:55:29:
         7c:0a:be:78:c5:7b:85:0a:90:87:f0:1c:a3:a6:38:f7:8c:3a:
         f0:2e:cb:68:c8:91:b0:03:e8:7a:8f:69:fd:dd:5d:cc:7d:44:
         78:29:f6:f1:e0:8c:4e:5b:f8:ff:df:f0:5b:ea:48:ac:57:e5:
         e2:b7:dd:1b:51:6e:ea:e0:bf:cd:4d:45:22:7e:5a:2e:6a:5d:
         6f:99:02:f6:ae:a2:74:34:99:3a:44:61:ff:a4:13:66:c3:67:
         0f:8b:08:ab:8d:17:09:8a:6d:a4:b7:82:ce:b4:13:03:e5:d0:
         05:fa:3f:92:5a:0b:8c:f6:12:f5:c9:7f:99:43:c6:83:e4:89:
         0b:0b:7f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:08 2026 by rpki-client