Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft
File:                     cROEjAz5BGjQfWmfcUx_10ihMmk.mft (raw, json)
Hash identifier:          BQhtBQd3zBrUpq7FQf+rpwGzaY8rjVDS5p4iBT8FYW4=
Subject key identifier:   19:E9:C5:20:DD:F4:C7:FF:B7:68:0E:79:54:1F:E3:11:81:64:A8:B2
Authority key identifier: 71:13:84:8C:0C:F9:04:68:D0:7D:69:9F:71:4C:7F:D7:48:A1:32:69
Certificate issuer:       /CN=7113848c0cf90468d07d699f714c7fd748a13269
Certificate serial:       019E1D90C028E3AC8E8D12609024AFDC5818
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cROEjAz5BGjQfWmfcUx_10ihMmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft
Manifest number:          75
Signing time:             Tue 12 May 2026 19:01:25 +0000
Manifest this update:     Tue 12 May 2026 19:01:25 +0000
Manifest next update:     Wed 13 May 2026 19:01:25 +0000
Files and hashes:         1: D1ljQNpkE18grA9Cjl9zV5PU2GE.asa (hash: OS9sXwUaA+1JocSwcXhLS2ungGRd4+pZ36fpmwGLwW8=)
                          2: cROEjAz5BGjQfWmfcUx_10ihMmk.crl (hash: 7ZVeqHT6Ul9Lccm8TpXOVrtSlS1BrFOIRXUg6XoV5nQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cROEjAz5BGjQfWmfcUx_10ihMmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:c0:28:e3:ac:8e:8d:12:60:90:24:af:dc:58:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7113848c0cf90468d07d699f714c7fd748a13269
        Validity
            Not Before: May 12 19:01:25 2026 GMT
            Not After : May 13 19:01:25 2026 GMT
        Subject: CN=19e9c520ddf4c7ffb7680e79541fe3118164a8b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c1:8f:2e:35:18:ad:48:40:52:cf:3b:fe:8c:
                    76:80:38:19:dd:5b:71:f3:2e:76:1a:c7:2b:55:e0:
                    26:a2:6f:4a:a9:97:e6:d2:f2:f9:6b:e0:81:5e:e8:
                    c9:e9:87:59:2e:bf:a9:43:66:48:03:cc:d7:59:15:
                    f8:a8:5c:dc:e8:ce:bb:b5:8d:17:0b:51:f7:b9:51:
                    db:f3:b9:92:5d:cc:50:d2:cd:86:fb:64:c7:c3:aa:
                    60:d4:2e:26:a4:a2:fb:63:2a:c4:94:cd:61:b5:c3:
                    d4:73:ab:67:38:37:df:de:e7:9c:d5:43:c3:0c:6b:
                    6b:2d:c3:40:dc:ce:8a:98:63:6c:e6:41:6b:6f:8f:
                    f2:84:ee:bf:d7:23:24:4d:d5:98:d7:d2:2b:a9:ea:
                    b2:7e:07:38:37:6c:ab:68:93:01:72:45:03:62:5b:
                    32:4e:22:81:08:53:a2:0b:66:b4:4c:f8:e4:45:4b:
                    0a:05:d7:9e:f3:09:b8:5f:dd:20:f8:0f:60:dd:85:
                    64:00:30:54:8e:95:7d:df:88:e3:c5:bd:8b:4a:5d:
                    e8:9a:c1:82:82:d3:bb:19:ff:70:91:8c:3f:b6:c1:
                    83:93:55:10:2c:ed:eb:9b:08:89:bc:78:63:ab:dd:
                    bb:49:19:5d:e0:e9:59:22:d4:1a:28:c7:45:ce:3a:
                    53:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E9:C5:20:DD:F4:C7:FF:B7:68:0E:79:54:1F:E3:11:81:64:A8:B2
            X509v3 Authority Key Identifier:
                keyid:71:13:84:8C:0C:F9:04:68:D0:7D:69:9F:71:4C:7F:D7:48:A1:32:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cROEjAz5BGjQfWmfcUx_10ihMmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:0c:b1:53:d8:43:f1:60:60:b2:5b:25:f7:37:ff:21:8c:65:
         1b:cf:f3:48:30:24:87:c1:b9:60:19:3a:d7:cd:12:ba:d1:21:
         31:ed:0e:83:3f:e9:08:ba:1a:0d:86:4b:8b:11:57:09:ac:1f:
         d5:50:81:0b:a3:16:88:34:da:b2:73:e3:4c:0e:d5:9b:36:73:
         90:51:4c:8d:73:dd:2b:7d:e0:65:68:c1:5e:86:2d:b8:dc:a0:
         2e:28:58:92:5f:7e:b8:41:bb:ea:b7:2a:39:62:f5:81:b9:0d:
         78:b6:f8:83:ca:ad:78:11:87:fd:82:33:89:c3:07:f2:91:b0:
         c2:56:db:c4:bf:02:d6:3a:5e:b9:ee:61:4a:99:e2:b9:6e:1b:
         b9:7b:fb:fe:e0:e1:a2:2b:f7:1d:f1:45:d1:75:ba:10:da:b8:
         11:8a:79:c3:7f:59:74:12:7b:5a:8c:7e:a7:65:ee:6b:7d:9c:
         eb:05:1a:5c:a6:01:84:32:4c:fd:65:96:0b:a3:25:58:1b:00:
         29:92:13:18:99:40:b7:9a:60:73:2d:7d:29:80:58:c4:b9:6c:
         46:9f:18:3e:eb:15:9f:6d:62:cb:a0:bd:25:d7:4d:0b:47:1c:
         39:63:74:75:8f:9c:c9:a8:c7:82:bb:95:e8:95:ea:3d:ea:51:
         1d:87:26:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:29:05 2026 by rpki-client