Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
File:                     drtZ2KtKtSd87uX_CYIIQzBiex8.mft (raw, json)
Hash identifier:          /1vRVBQysynwJ1r5LzQcT5maj/wTJ2otIL4bipHl6BE=
Subject key identifier:   B1:6B:B9:DB:C3:57:68:4C:4E:CE:0E:B9:7C:B7:96:64:01:D5:6C:82
Authority key identifier: 76:BB:59:D8:AB:4A:B5:27:7C:EE:E5:FF:09:82:08:43:30:62:7B:1F
Certificate issuer:       /CN=76bb59d8ab4ab5277ceee5ff0982084330627b1f
Certificate serial:       019E1F111DE0D3D1C5BBA9E5EF663DF764E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
Manifest number:          03BB
Signing time:             Wed 13 May 2026 02:01:15 +0000
Manifest this update:     Wed 13 May 2026 02:01:15 +0000
Manifest next update:     Thu 14 May 2026 02:01:15 +0000
Files and hashes:         1: drtZ2KtKtSd87uX_CYIIQzBiex8.crl (hash: BRImcoAUwr5lLIL8me6Q9IsrPEu4Uo6q2aJN1C0MoKc=)
                          2: lYVVRT8ck9hIF_wE0rPLM9h8sl4.roa (hash: nOQ76WC5KxHith3R9t77yLyg4sKQCt1T2XSdiC50P2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 02:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:1d:e0:d3:d1:c5:bb:a9:e5:ef:66:3d:f7:64:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76bb59d8ab4ab5277ceee5ff0982084330627b1f
        Validity
            Not Before: May 13 02:01:15 2026 GMT
            Not After : May 14 02:01:15 2026 GMT
        Subject: CN=b16bb9dbc357684c4ece0eb97cb7966401d56c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:31:9c:e4:0b:bf:ee:6d:88:e5:50:c6:45:b6:
                    8e:d5:a8:d2:a6:c8:85:5a:56:28:d1:f3:a6:d7:59:
                    21:9c:39:02:b1:9c:c4:79:15:a9:98:85:4f:4f:8e:
                    d4:2c:8d:58:17:03:37:95:b9:e4:f7:ad:72:2d:9f:
                    37:d2:2e:76:93:87:a3:23:e9:9a:5c:b5:4b:28:7b:
                    79:6e:1c:cd:8a:b7:98:06:32:e1:77:29:9e:75:ad:
                    75:4b:64:b7:49:f0:cb:ac:7b:e4:93:8e:ec:b3:0e:
                    1a:51:1a:85:6f:52:56:86:a8:6e:47:3a:dd:f4:30:
                    53:27:a4:5d:03:29:23:3d:e0:ac:42:7a:d9:4e:15:
                    f8:71:33:82:19:70:e3:6c:9d:8a:06:3c:89:95:b4:
                    cc:24:0c:ba:c4:06:5c:c1:ef:3e:20:8b:40:65:3c:
                    d2:79:f4:47:3f:ec:b6:01:5d:26:d7:3e:16:ff:9b:
                    8e:5e:da:71:0f:eb:7d:3e:41:a4:38:b3:8b:b0:dd:
                    22:ef:79:eb:5c:28:35:4a:a4:7b:64:00:7e:7b:ec:
                    3f:a8:86:4d:6d:7b:6e:1c:a3:84:cf:6b:da:32:33:
                    51:03:4e:d0:b8:59:30:9f:af:94:d9:69:9b:84:9f:
                    ab:13:44:5f:da:e4:c0:c5:40:c7:22:8c:dc:9a:a8:
                    9e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:6B:B9:DB:C3:57:68:4C:4E:CE:0E:B9:7C:B7:96:64:01:D5:6C:82
            X509v3 Authority Key Identifier:
                keyid:76:BB:59:D8:AB:4A:B5:27:7C:EE:E5:FF:09:82:08:43:30:62:7B:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:c5:b7:97:bf:32:de:80:da:93:cb:e9:0b:71:a8:f3:ca:58:
         29:7c:25:92:0a:58:01:28:d7:f1:e2:00:b0:0d:fe:0b:c6:a9:
         56:a8:d2:92:97:1b:57:db:69:fe:a6:be:ab:47:1f:c6:a5:eb:
         0e:dc:5f:38:39:67:bf:25:a1:61:60:9a:04:38:48:ae:b7:22:
         1a:64:03:ee:af:02:34:d3:a9:4e:9a:4c:ba:6f:69:e5:c1:e0:
         5f:e8:28:f4:22:dd:05:cc:a1:39:7d:95:d0:0b:d9:0c:a0:9a:
         8c:58:33:7c:fd:ed:3b:b1:f4:76:11:1d:1f:af:27:fc:3c:66:
         36:0a:bb:ac:f1:d1:ba:b1:3e:8a:5c:f8:40:e0:46:17:7c:79:
         0d:67:9b:1d:07:f3:b8:63:a9:47:e6:fc:7a:53:1a:24:96:b8:
         78:46:ed:a3:93:68:d7:00:52:c5:8a:c6:96:4b:4e:80:ac:b5:
         23:c2:a3:49:ca:ea:07:12:dd:2f:07:2c:f1:76:aa:6a:72:05:
         42:04:d7:62:fe:40:5b:b7:8d:b7:94:ce:a1:5a:d6:7f:80:09:
         4a:26:e5:ab:28:c5:ac:96:14:9b:d3:f7:a0:ef:7c:5f:b4:9e:
         23:38:f8:5a:17:65:5e:f7:fe:6b:3e:7d:8d:03:a8:84:ea:36:
         6d:90:6b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:11 2026 by rpki-client