Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
File:                     E3AevgZ5neCWmJkgUVDlMt7_57U.mft (raw, json)
Hash identifier:          ++x+Itr39iSuJiu2WIvXJBOVucH16T6Q6lyG/p9VdmU=
Subject key identifier:   73:57:01:91:6B:B6:BA:02:E6:CC:F3:94:D4:14:58:48:90:0C:47:56
Authority key identifier: 13:70:1E:BE:06:79:9D:E0:96:98:99:20:51:50:E5:32:DE:FF:E7:B5
Certificate issuer:       /CN=13701ebe06799de0969899205150e532deffe7b5
Certificate serial:       019E1F483053750685750E7B25212221CAC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
Manifest number:          0530
Signing time:             Wed 13 May 2026 03:01:25 +0000
Manifest this update:     Wed 13 May 2026 03:01:25 +0000
Manifest next update:     Thu 14 May 2026 03:01:25 +0000
Files and hashes:         1: E3AevgZ5neCWmJkgUVDlMt7_57U.crl (hash: bHvF4R8/yOWf/5pLUKWpdtWPdGH9tcd1rJ0MBSABB64=)
                          2: TVdDTIsyLlfmbrYuR9urFia7Kl4.roa (hash: 4Fv8uKqQZhEYXbziIHF6wwJA7WCIhujnQrmtz+ccn6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 03:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:48:30:53:75:06:85:75:0e:7b:25:21:22:21:ca:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13701ebe06799de0969899205150e532deffe7b5
        Validity
            Not Before: May 13 03:01:25 2026 GMT
            Not After : May 14 03:01:25 2026 GMT
        Subject: CN=735701916bb6ba02e6ccf394d4145848900c4756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f4:14:bf:87:43:41:9a:b9:86:d4:e4:6a:a6:
                    c2:71:f7:2c:54:88:f0:95:8e:b6:f1:6e:f8:87:16:
                    f7:25:d5:a0:21:43:a5:59:36:4f:41:61:bc:55:f4:
                    df:31:3d:fa:31:ac:f8:04:ad:e0:d5:ef:57:58:b4:
                    ed:88:d4:2a:0d:c0:31:f5:9c:d2:17:1d:cd:7d:56:
                    c9:6c:3e:7d:15:3a:af:46:ca:6a:9e:c7:8c:3a:5a:
                    f1:ae:89:6b:72:f3:7c:84:b8:f1:17:8d:17:76:03:
                    0a:e6:ad:6c:01:11:e6:d0:6f:72:ac:97:cb:62:b1:
                    8b:df:37:d6:c7:e4:a2:c1:a8:f8:5d:82:c5:18:e2:
                    8c:2e:7f:0a:2a:a1:6a:95:45:3c:23:e5:9d:b4:c7:
                    06:c0:22:3c:55:96:bc:f2:d6:be:4d:d1:21:80:a8:
                    28:9a:41:35:aa:03:32:ee:9e:d8:00:83:c1:dd:6f:
                    85:42:da:f1:6e:63:f1:06:3e:10:76:77:cc:9f:11:
                    7e:b4:27:5a:a8:19:14:fd:7e:27:c6:c2:69:23:c2:
                    3e:b3:40:97:a5:72:3d:76:02:81:19:bf:33:e0:fa:
                    b7:34:a3:03:bc:9a:d7:8a:17:4e:dc:a3:1b:dc:1f:
                    a5:97:41:72:41:a5:b2:8b:d0:b6:60:f9:7c:70:c5:
                    08:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:57:01:91:6B:B6:BA:02:E6:CC:F3:94:D4:14:58:48:90:0C:47:56
            X509v3 Authority Key Identifier:
                keyid:13:70:1E:BE:06:79:9D:E0:96:98:99:20:51:50:E5:32:DE:FF:E7:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:9e:2e:89:c6:fe:e0:ef:2f:cc:90:34:07:97:25:ed:8f:c9:
         da:75:01:12:8e:c8:5a:54:26:c7:16:e0:77:24:2b:e1:84:26:
         5d:b6:16:a8:fc:be:db:25:03:bf:63:38:f8:a8:ad:82:ca:1f:
         78:b9:b1:5d:d1:0d:c9:6f:74:79:31:04:94:55:52:a2:e0:34:
         62:fa:b7:b3:0d:c4:f8:6d:4c:4d:6e:f4:6a:ca:27:24:a8:22:
         a4:f5:a8:1d:0c:64:c6:f6:71:b7:16:7f:cf:ab:76:b7:da:7a:
         d2:ee:ce:73:f4:45:e2:46:fe:9c:20:9c:05:c6:95:c5:ff:81:
         17:10:f0:4f:0f:3a:e4:ba:6f:5e:6c:c9:9e:af:e7:7c:fc:ee:
         03:3e:3e:c2:c2:38:e3:d9:35:dc:be:cc:5f:15:d6:a5:1b:39:
         74:50:be:63:b9:95:ab:94:32:54:2a:c5:d5:50:13:87:aa:62:
         91:0c:54:4b:ca:63:e3:15:af:56:cc:bc:f4:d1:fb:9d:37:bf:
         3e:d9:ef:32:9b:fd:3b:81:c2:6e:62:14:64:5d:58:b7:5e:76:
         c9:f8:1d:ac:58:55:19:01:26:87:e4:ce:13:82:1e:94:62:5a:
         b3:19:8c:99:65:1c:b4:b3:0e:08:79:64:dd:6d:8a:9f:2d:f6:
         3a:04:64:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:26:54 2026 by rpki-client