Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.mft
File:                     C_t1KSifiPtLuHs5577cnZ8n1fo.mft (raw, json)
Hash identifier:          n3eGsQydK1iyW0mAkbrsupgrEZj6ROU1E5vBH9A/8vk=
Subject key identifier:   8B:D8:17:A6:7F:FC:3F:9A:9F:D3:04:CC:C0:9F:22:8F:38:49:01:99
Authority key identifier: 0B:FB:75:29:28:9F:88:FB:4B:B8:7B:39:E7:BE:DC:9D:9F:27:D5:FA
Certificate issuer:       /CN=0bfb7529289f88fb4bb87b39e7bedc9d9f27d5fa
Certificate serial:       019E1D90F83C14BD3FA9B0F70ACF96B01C82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_t1KSifiPtLuHs5577cnZ8n1fo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.mft
Manifest number:          0EF1
Signing time:             Tue 12 May 2026 19:01:40 +0000
Manifest this update:     Tue 12 May 2026 19:01:40 +0000
Manifest next update:     Wed 13 May 2026 19:01:40 +0000
Files and hashes:         1: C_t1KSifiPtLuHs5577cnZ8n1fo.crl (hash: vXU/TKA4dQPdCIzzTVNHTjITQMyoQhfJTuL7QDHRHtA=)
                          2: PacmDRUdr3_cm1nyldoIF0tMWQ4.roa (hash: ucvQPyey+5Ol0ndNU3P+WFfDUQp3OYF/IiC2e8FsnB0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_t1KSifiPtLuHs5577cnZ8n1fo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:f8:3c:14:bd:3f:a9:b0:f7:0a:cf:96:b0:1c:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bfb7529289f88fb4bb87b39e7bedc9d9f27d5fa
        Validity
            Not Before: May 12 19:01:40 2026 GMT
            Not After : May 13 19:01:40 2026 GMT
        Subject: CN=8bd817a67ffc3f9a9fd304ccc09f228f38490199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:27:e0:f1:9f:1e:27:19:bb:5b:04:52:0f:b5:
                    81:69:39:ef:2a:16:ce:4f:fc:13:d3:ff:77:ae:23:
                    59:21:29:91:0f:6a:80:d0:9f:f2:9f:83:8e:0c:ea:
                    c6:8e:f7:7a:1c:02:94:47:7f:98:33:11:c0:ab:85:
                    ff:ae:41:10:1e:0f:17:dd:b2:3b:da:8e:58:7b:58:
                    52:a0:18:82:74:5f:b2:86:87:89:e8:9c:63:1a:02:
                    f4:90:69:5d:6c:a3:c0:ae:9e:67:93:1b:26:16:2b:
                    a6:65:65:88:53:87:81:42:65:31:c6:67:4f:3f:db:
                    ca:39:39:58:28:10:ba:15:a9:e3:2d:ad:45:20:df:
                    e2:d6:a2:64:4c:1e:e1:4b:5e:39:ef:5f:52:14:4a:
                    3b:cb:51:88:e9:9f:dc:11:a3:fb:c8:4d:36:9b:0e:
                    f4:3b:56:70:77:b6:b9:36:a3:c3:f9:43:2e:f8:32:
                    f1:01:4d:0b:eb:59:49:03:17:80:67:c4:d2:7b:4c:
                    d8:a6:b8:1b:75:7d:bd:ad:3b:eb:4e:4e:e2:ef:23:
                    4e:ed:c1:2b:21:97:49:7e:68:e3:b8:5e:b3:e8:c9:
                    96:ae:03:c1:15:fb:77:13:13:c6:84:14:23:e4:3d:
                    49:3a:e7:de:ea:0c:05:dc:f6:2b:a4:54:19:6b:e5:
                    63:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D8:17:A6:7F:FC:3F:9A:9F:D3:04:CC:C0:9F:22:8F:38:49:01:99
            X509v3 Authority Key Identifier:
                keyid:0B:FB:75:29:28:9F:88:FB:4B:B8:7B:39:E7:BE:DC:9D:9F:27:D5:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_t1KSifiPtLuHs5577cnZ8n1fo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:c0:6f:9c:45:3c:9a:73:5b:53:d0:f8:86:cc:87:be:71:43:
         dc:44:1c:dd:12:23:b3:85:86:32:28:3a:24:96:9f:c3:50:0d:
         66:5c:92:aa:13:2b:89:83:3e:84:b7:fb:ba:83:e3:9e:f5:23:
         e7:27:a9:96:63:bc:b7:a0:00:40:33:ca:9d:98:50:ce:59:c9:
         d9:62:f1:0a:93:b4:10:2c:01:ec:f7:4b:07:6d:99:dd:85:00:
         89:d2:b7:df:26:9b:2c:9e:54:14:c7:33:af:88:bb:bf:a6:b2:
         df:0e:99:50:26:a8:de:47:64:4c:f5:4f:44:5d:b1:57:e1:f4:
         d6:d7:ee:0c:bc:58:b6:0f:0a:0e:95:77:26:2c:78:54:4b:3f:
         a5:ae:ae:a5:90:54:a8:18:9c:a7:cd:4b:d9:ae:55:2b:aa:f2:
         d6:cb:fb:0a:78:a7:e1:1a:8f:44:7c:81:e9:f8:99:38:74:c8:
         ad:47:3b:5b:56:49:c8:b4:53:7b:14:fc:4e:b3:73:4f:56:9a:
         5b:bc:da:25:36:1d:48:b0:3c:ce:73:aa:cc:82:77:36:54:57:
         fc:2d:02:e8:d6:e8:0d:68:88:f8:e7:5a:73:3b:1e:81:75:12:
         85:27:d1:e2:9a:eb:20:04:93:41:0d:7d:bd:ab:8e:54:c2:1f:
         80:98:c6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:53:48 2026 by rpki-client