Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
File:                     1s58fCGSd6ByuiaVTVyj7M6ymEo.mft (raw, json)
Hash identifier:          agEUbJ7OJsdsbHwl9Mv7g40QVocd0qvRleKMuIF0eQA=
Subject key identifier:   E6:99:5C:03:5F:0C:9C:3F:4B:47:FF:51:84:8F:8C:E1:45:96:0A:A1
Authority key identifier: D6:CE:7C:7C:21:92:77:A0:72:BA:26:95:4D:5C:A3:EC:CE:B2:98:4A
Certificate issuer:       /CN=d6ce7c7c219277a072ba26954d5ca3ecceb2984a
Certificate serial:       019E1EDA6181725C81E975C677C65FE59F52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1s58fCGSd6ByuiaVTVyj7M6ymEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
Manifest number:          0101
Signing time:             Wed 13 May 2026 01:01:28 +0000
Manifest this update:     Wed 13 May 2026 01:01:28 +0000
Manifest next update:     Thu 14 May 2026 01:01:28 +0000
Files and hashes:         1: 1s58fCGSd6ByuiaVTVyj7M6ymEo.crl (hash: y+3HVEyiCrDryuw8erAflxaON3EJGEmWKehUuJ7LrVY=)
                          2: qS1_3wEIQuVYlhTs3iloYf1YjMc.roa (hash: Uzfr9K7CjY3AFHyO0zyI/Bv4ovC6HD2V9T5Yebzh90M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1s58fCGSd6ByuiaVTVyj7M6ymEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:61:81:72:5c:81:e9:75:c6:77:c6:5f:e5:9f:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6ce7c7c219277a072ba26954d5ca3ecceb2984a
        Validity
            Not Before: May 13 01:01:28 2026 GMT
            Not After : May 14 01:01:28 2026 GMT
        Subject: CN=e6995c035f0c9c3f4b47ff51848f8ce145960aa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:98:cf:77:f1:28:60:b4:54:c9:dc:28:f8:52:
                    d3:5c:81:48:91:5f:f1:f8:fb:3d:dc:e0:bd:23:45:
                    3d:74:e7:7e:bc:36:d6:50:f7:7b:4a:ae:57:37:a9:
                    a9:e6:74:1b:af:43:2e:47:60:e3:78:80:e5:be:de:
                    c0:02:a8:a2:1e:24:c5:59:ba:e2:9c:ba:49:b0:00:
                    64:3a:f1:28:df:5a:af:8a:29:59:ae:ca:e1:18:9a:
                    96:d6:44:92:e0:ce:79:14:d2:ab:e1:b5:45:b3:1d:
                    4c:c2:8d:66:83:43:df:84:65:81:97:a6:bf:93:1c:
                    5d:46:c2:4f:d7:93:df:bd:bb:e8:9c:20:fd:c6:9e:
                    dd:bb:01:80:5a:68:26:72:66:d1:4f:f3:53:d1:bd:
                    3f:56:c6:2c:3b:ec:3d:39:00:59:51:df:a7:c1:c3:
                    28:91:00:86:d8:c7:7a:e2:a2:d6:67:67:06:a9:fb:
                    79:8f:e8:bc:4e:ca:75:2f:38:65:ec:93:aa:1d:7f:
                    66:58:26:b5:85:e5:8a:4e:4d:49:67:7e:bd:68:49:
                    96:05:73:f0:98:4a:b8:b1:36:06:b3:85:be:1b:ac:
                    da:62:16:4c:61:45:a0:39:47:3e:b7:d2:22:f5:1d:
                    6e:ad:75:3d:c5:e9:2b:a5:24:43:2f:be:6c:1b:b3:
                    94:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:99:5C:03:5F:0C:9C:3F:4B:47:FF:51:84:8F:8C:E1:45:96:0A:A1
            X509v3 Authority Key Identifier:
                keyid:D6:CE:7C:7C:21:92:77:A0:72:BA:26:95:4D:5C:A3:EC:CE:B2:98:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s58fCGSd6ByuiaVTVyj7M6ymEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:d0:0d:ae:7d:23:f9:fd:4e:82:87:ab:e4:27:ca:df:9d:f7:
         78:7b:f5:09:22:e3:b7:a5:8c:0d:58:c1:11:09:23:9b:20:12:
         31:6e:53:74:a2:e4:fa:a2:cc:15:0e:a9:d9:17:8f:99:11:e9:
         2d:1f:e3:75:aa:32:75:1b:22:f8:89:08:87:9b:54:2d:b1:42:
         ac:82:6f:71:7e:5f:c2:a4:d0:ab:14:70:34:59:97:9f:3f:d0:
         53:6b:24:87:50:c1:34:cd:a7:88:6f:ff:59:85:ba:da:58:9b:
         0c:3e:68:55:57:3f:16:24:74:bc:bf:24:52:2c:79:cc:7e:26:
         4c:ca:d8:f8:22:f3:c4:3e:3b:34:5d:ee:61:08:5f:7c:96:f8:
         a6:e1:c7:8b:66:52:7e:fc:65:aa:5c:dd:83:7f:64:0b:c9:ce:
         2b:23:db:f5:d7:6d:22:1e:67:c3:69:fc:d6:b4:07:3d:18:2b:
         7a:f7:bd:e3:1d:64:40:ed:1b:33:b9:fb:61:e2:8d:5f:94:2c:
         30:17:e7:6a:d9:f3:9b:b7:aa:92:64:f6:79:31:a9:2f:0a:a1:
         01:02:f6:57:f2:41:ad:7c:8d:3f:e5:d0:e4:c5:b1:d1:20:35:
         e9:43:3e:18:7c:31:55:ee:b4:9a:af:5e:01:db:77:18:cb:73:
         3d:15:85:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:20:09 2026 by rpki-client