Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft
File:                     1jpuJY1igPPdl6ltlIbZPULxjUs.mft (raw, json)
Hash identifier:          T9BS8CdbAUjIrwG23lx11AGfxURZbMuLeSvY7Bb8G1Q=
Subject key identifier:   5D:1B:A7:DD:75:63:99:3B:A2:A2:F7:96:C7:71:4D:00:8F:27:FD:E6
Authority key identifier: D6:3A:6E:25:8D:62:80:F3:DD:97:A9:6D:94:86:D9:3D:42:F1:8D:4B
Certificate issuer:       /CN=d63a6e258d6280f3dd97a96d9486d93d42f18d4b
Certificate serial:       019E1F10C1FBD0C96F0851747E9BF4D38B40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1jpuJY1igPPdl6ltlIbZPULxjUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft
Manifest number:          056A
Signing time:             Wed 13 May 2026 02:00:52 +0000
Manifest this update:     Wed 13 May 2026 02:00:52 +0000
Manifest next update:     Thu 14 May 2026 02:00:52 +0000
Files and hashes:         1: 1jpuJY1igPPdl6ltlIbZPULxjUs.crl (hash: hOYMY98jvt22O6QimMy9lA6iszPOih631nrIbGmKqEg=)
                          2: 3CZ316XifGJ7iXy_fvnC6yaUCL4.roa (hash: jpVzlrWllusXIidVkRRsjohQfHqCLoCDqt5WfrDTXj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1jpuJY1igPPdl6ltlIbZPULxjUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 02:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:c1:fb:d0:c9:6f:08:51:74:7e:9b:f4:d3:8b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d63a6e258d6280f3dd97a96d9486d93d42f18d4b
        Validity
            Not Before: May 13 02:00:52 2026 GMT
            Not After : May 14 02:00:52 2026 GMT
        Subject: CN=5d1ba7dd7563993ba2a2f796c7714d008f27fde6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a8:ae:38:7a:03:8f:ee:81:d9:90:93:44:b1:
                    95:d7:50:b9:34:65:1c:b6:52:0c:6a:a0:5b:dc:cf:
                    bd:da:1c:bb:29:e5:04:ba:7f:30:9a:68:ed:c2:e6:
                    a9:f0:f4:f3:c4:45:eb:67:e6:ae:7f:a7:9c:31:2e:
                    a5:50:55:50:4a:f1:d6:9a:77:0f:f4:37:bd:7f:20:
                    c1:ea:53:5d:ab:69:9e:1e:d6:24:62:6b:5c:5f:15:
                    81:04:0f:f9:59:d0:3e:7f:11:7b:53:24:bd:0c:e3:
                    e3:10:d9:b3:22:bd:05:fd:ae:7e:8d:2b:b7:fa:1b:
                    c5:bc:e3:0a:89:d4:dd:84:ed:6c:07:86:76:a1:1f:
                    d2:d9:27:d0:9f:8b:97:bf:3d:52:14:e6:88:6a:5c:
                    72:16:70:35:0d:8c:67:b6:81:c5:ce:9e:05:b7:ae:
                    b8:83:de:51:bd:f4:7c:bd:88:25:45:da:a4:0a:ce:
                    77:84:62:96:25:10:72:68:05:e1:f2:df:c1:66:53:
                    be:8b:d1:2f:c4:4d:6b:16:02:dd:7e:1d:42:9d:d8:
                    15:a9:8f:22:bf:cc:aa:c0:df:95:57:19:80:63:0d:
                    0d:4b:91:7b:14:49:fc:48:66:cb:cb:26:96:60:94:
                    65:ba:3a:38:e3:65:ee:7b:41:24:da:05:31:37:b0:
                    74:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:1B:A7:DD:75:63:99:3B:A2:A2:F7:96:C7:71:4D:00:8F:27:FD:E6
            X509v3 Authority Key Identifier:
                keyid:D6:3A:6E:25:8D:62:80:F3:DD:97:A9:6D:94:86:D9:3D:42:F1:8D:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jpuJY1igPPdl6ltlIbZPULxjUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:06:cf:22:0a:e0:84:12:62:df:4c:4b:56:6b:f6:c1:fc:14:
         b5:88:5b:a3:aa:81:cb:43:d0:49:1c:63:4d:ac:2d:dd:19:c1:
         02:88:d5:bf:33:fa:e5:d9:05:e5:1e:b4:71:a5:ea:0f:bb:72:
         39:f7:5a:a7:3f:6e:8b:d1:c0:e1:85:bf:88:a0:ec:71:c7:67:
         97:c1:5d:c0:d8:23:52:f6:09:d4:10:3c:bb:be:5f:ca:88:e1:
         e6:7e:58:30:03:93:b8:8e:23:2b:c5:3c:65:61:a0:4b:c4:48:
         cc:42:d9:70:df:b5:c0:1c:e3:b9:9b:af:3b:1f:69:24:f5:6e:
         df:e4:a3:32:af:f3:55:51:55:ab:62:b0:62:1f:cc:01:da:ba:
         e7:d9:fb:c7:92:26:11:bd:45:22:cb:09:c2:8c:73:23:6f:77:
         dd:44:6a:90:99:ef:ff:f1:a6:ab:58:9d:4b:d2:38:de:55:f9:
         4d:7a:fe:51:fc:e8:86:c7:4f:c6:bd:a2:61:fb:98:2f:7d:03:
         b6:0d:ee:68:63:ad:94:d5:dc:15:67:25:c5:49:d1:91:58:b5:
         80:cc:a7:6a:8d:d0:1d:0a:36:38:e4:2f:e7:e0:a0:51:85:22:
         39:1a:db:03:6f:0a:15:a3:0a:fb:6a:ab:ad:42:a2:de:6f:ea:
         d0:75:db:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:04:24 2026 by rpki-client