Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
File:                     FirzMC9qSffraRrElZ4az5XbbOc.mft (raw, json)
Hash identifier:          PANe7Ag3S6B5tz7ZUhFGtjsWRyrJtHiN59trZUEf0y0=
Subject key identifier:   13:C5:F7:1B:D6:B0:83:A5:12:E8:21:A7:2D:74:CE:89:F3:4E:DF:C6
Authority key identifier: 16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7
Certificate issuer:       /CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7
Certificate serial:       019E1EDA036F1FD3388CDA57A8897800CE2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
Manifest number:          18ED
Signing time:             Wed 13 May 2026 01:01:04 +0000
Manifest this update:     Wed 13 May 2026 01:01:04 +0000
Manifest next update:     Thu 14 May 2026 01:01:04 +0000
Files and hashes:         1: FirzMC9qSffraRrElZ4az5XbbOc.crl (hash: 8kqQ576VFdJc/QqCJ8YDMQatCKSOqYdqVNROOrBt5x4=)
                          2: PaB6Iu-OaufEYMBZiWD0zvYNa9Y.roa (hash: TjF06m/Mp/7aJVVxV+8vfqSIb8qTmO7jQ4Gg8K+F0O8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 01:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:03:6f:1f:d3:38:8c:da:57:a8:89:78:00:ce:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7
        Validity
            Not Before: May 13 01:01:04 2026 GMT
            Not After : May 14 01:01:04 2026 GMT
        Subject: CN=13c5f71bd6b083a512e821a72d74ce89f34edfc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ea:47:dc:ba:8f:18:24:11:d3:de:ff:18:84:
                    b5:08:c2:6b:74:8d:c0:c8:26:dd:d0:ad:8d:70:a8:
                    b7:20:a9:89:81:58:73:35:3e:5c:17:9f:f8:35:d5:
                    32:69:c1:ae:10:8f:36:ef:c2:7a:6b:e8:84:f6:c2:
                    8f:34:66:93:6c:b0:c8:3f:90:f2:b3:18:ef:81:4f:
                    05:4c:31:dc:a4:e6:83:5f:78:3f:1f:ad:60:76:7d:
                    5e:69:93:0d:d0:eb:b7:67:f8:41:80:fd:d5:4d:dc:
                    f2:29:a7:d8:4e:93:f1:29:be:48:42:fb:0c:15:21:
                    e5:1b:ae:ab:e4:30:6d:ff:ca:c4:68:f9:94:9d:d1:
                    42:7b:0c:95:d6:47:de:36:63:e7:a0:0a:1b:a1:1c:
                    8d:b5:2b:f1:fe:73:02:3c:5f:c2:86:84:8f:13:b8:
                    45:eb:f9:35:73:49:42:96:68:ae:86:dd:eb:de:c0:
                    6a:7e:dd:7b:73:3c:60:1f:71:97:5d:05:be:ed:ce:
                    90:b4:e4:a8:6c:9c:5b:d3:4b:5e:1c:bf:97:58:a0:
                    0e:8d:8d:14:10:20:57:be:a1:9f:3f:b5:6d:4a:ea:
                    3d:ec:73:f7:36:ed:83:ad:08:9a:ea:6c:6e:05:65:
                    2e:da:59:c5:fd:48:81:46:8e:93:e0:ac:ad:ca:09:
                    0c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C5:F7:1B:D6:B0:83:A5:12:E8:21:A7:2D:74:CE:89:F3:4E:DF:C6
            X509v3 Authority Key Identifier:
                keyid:16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:d7:36:3e:06:85:cc:5e:25:e4:73:4c:d2:7c:ed:f3:ef:6c:
         19:d3:7e:59:67:64:67:44:39:15:77:9a:3c:0c:6a:35:6d:d7:
         9a:9b:b0:9c:a4:67:ff:66:d4:05:09:e8:32:80:6f:85:04:62:
         a4:c4:16:7c:ae:9f:1e:52:ae:15:54:1f:69:9d:2d:87:b4:70:
         fd:de:1d:20:5c:ba:99:0f:a6:3f:87:20:1d:41:f4:61:35:2a:
         b6:20:eb:9d:f6:ac:d4:d6:73:b6:14:e9:55:c2:bc:03:8d:df:
         d4:e6:aa:fe:07:ec:70:85:c9:a5:44:61:47:2d:a8:a1:4e:bb:
         21:d2:21:c4:21:fc:a4:e0:e8:89:38:95:97:88:40:c7:54:80:
         ec:4b:93:f8:a8:e2:8d:73:9b:52:e9:19:03:6a:4a:65:b7:ef:
         06:74:d9:c9:c3:9c:29:f0:b0:11:4a:a2:94:7e:db:b8:71:c5:
         e5:86:18:72:e6:ad:59:6b:f9:09:d0:2c:96:97:03:23:36:ef:
         4b:07:b6:81:6f:3e:07:53:d8:e6:ea:e0:01:22:7f:94:99:b3:
         73:41:bb:f9:83:56:93:95:fc:3b:79:d1:90:9f:49:53:b6:4f:
         c7:7e:91:6b:54:b3:09:e7:bc:cb:01:57:e2:00:a6:75:d8:08:
         1a:2c:a2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:32:06 2026 by rpki-client