Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft
File:                     FdaRyV0UuLzeZpKgMgzA4odWsFk.mft (raw, json)
Hash identifier:          FEaEXp255uCNKqKKdjmWSxYfVj2At96aFaufs9TEXrc=
Subject key identifier:   CB:76:BF:04:BA:A7:9F:22:9A:C5:96:66:E0:D7:3A:E6:98:16:2E:C1
Authority key identifier: 15:D6:91:C9:5D:14:B8:BC:DE:66:92:A0:32:0C:C0:E2:87:56:B0:59
Certificate issuer:       /CN=15d691c95d14b8bcde6692a0320cc0e28756b059
Certificate serial:       019E1DC711E8A5907FA6399EE1F59EF46617
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FdaRyV0UuLzeZpKgMgzA4odWsFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft
Manifest number:          0736
Signing time:             Tue 12 May 2026 20:00:45 +0000
Manifest this update:     Tue 12 May 2026 20:00:45 +0000
Manifest next update:     Wed 13 May 2026 20:00:45 +0000
Files and hashes:         1: FdaRyV0UuLzeZpKgMgzA4odWsFk.crl (hash: ZBsoYJFT+tSjI3TZprH1de6gVffTyYYiQpZRkpy7D1o=)
                          2: mlDwEPyFKIVAkbAb7NWKRtLzJrA.roa (hash: kAMY1A1Garh3aSqYwq/mDKnuYkTTYygzhIcHylPq2Ik=)
                          3: vFYSHhL0cypMMBCS2q3wmkLPyPg.asa (hash: yXk9t8cHPwM7IZ6UgJ7PLJ3LoRzcTKQCZlHkkk3ubFA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FdaRyV0UuLzeZpKgMgzA4odWsFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:11:e8:a5:90:7f:a6:39:9e:e1:f5:9e:f4:66:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15d691c95d14b8bcde6692a0320cc0e28756b059
        Validity
            Not Before: May 12 20:00:45 2026 GMT
            Not After : May 13 20:00:45 2026 GMT
        Subject: CN=cb76bf04baa79f229ac59666e0d73ae698162ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:45:62:d1:65:17:4f:ca:a4:97:15:7a:b9:1a:
                    77:a2:2a:0d:55:27:72:6a:e9:f5:c0:1f:5a:ee:9e:
                    74:df:d6:79:a5:b4:38:d9:49:46:e8:2f:d4:ce:45:
                    aa:f3:52:6e:bb:33:90:98:aa:ca:7e:81:2b:6f:7b:
                    23:00:9a:de:ba:0f:e7:64:f1:1c:1c:84:0f:13:7d:
                    1f:f4:38:97:c9:a1:ff:d9:03:76:83:40:e5:83:c9:
                    c6:06:42:11:17:cb:6c:08:62:1e:4c:d7:7e:c4:77:
                    29:19:4b:ad:54:b5:6f:8a:47:46:22:7f:c5:55:22:
                    c5:0e:cd:48:a5:cc:6e:a0:1f:d2:0d:32:d9:1b:7b:
                    87:89:00:13:4e:4c:26:9a:31:6d:ce:3a:0a:61:b0:
                    bd:28:9b:9d:80:fe:f5:24:f1:d0:31:ac:d4:48:e4:
                    68:7e:8e:c1:b3:94:be:97:72:5f:aa:d0:5a:6e:a3:
                    a5:0e:d7:b9:f8:bb:ec:b6:da:8d:a8:90:82:72:84:
                    2d:ab:4b:58:09:36:64:f7:40:06:7e:fd:c1:6c:4a:
                    4b:b2:5d:39:6c:6a:f5:41:b9:1b:0f:7f:a4:48:db:
                    27:fb:30:6c:06:4a:3c:45:1e:11:27:c8:aa:53:3f:
                    e0:24:9d:9b:c9:13:0e:07:98:25:6e:40:36:ca:8e:
                    22:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:76:BF:04:BA:A7:9F:22:9A:C5:96:66:E0:D7:3A:E6:98:16:2E:C1
            X509v3 Authority Key Identifier:
                keyid:15:D6:91:C9:5D:14:B8:BC:DE:66:92:A0:32:0C:C0:E2:87:56:B0:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FdaRyV0UuLzeZpKgMgzA4odWsFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:97:0d:e6:17:9a:b6:c0:1c:22:1c:01:fb:69:db:11:f5:b6:
         a0:e5:24:fb:39:84:a4:d7:09:64:f3:28:6f:b4:bd:36:b8:43:
         52:1e:96:3a:4e:e9:67:9f:55:dd:41:db:25:be:c7:b1:42:7d:
         30:40:f2:59:bb:d5:27:3a:4d:5b:ff:f0:66:bb:ff:8a:33:3e:
         2f:7d:31:e4:3e:94:04:05:28:09:28:6b:54:17:5b:bc:6d:4b:
         91:be:15:ea:f5:7f:4f:c2:59:09:85:73:65:b5:38:41:ff:3d:
         d2:58:4f:27:27:60:c2:1d:15:7e:99:04:2c:8d:aa:f3:7b:cc:
         c8:6d:c1:e7:42:ce:5e:1c:60:a8:38:90:a5:d5:a0:ac:dd:e6:
         b2:27:b1:2e:6b:1e:ba:8c:46:47:a5:f9:05:22:83:83:19:cf:
         a5:39:a0:16:c7:d8:eb:5a:40:e5:0a:43:7a:74:d0:6b:c6:20:
         30:9c:52:ca:a6:65:b3:63:48:f0:ee:c2:b2:96:28:26:b5:f3:
         95:b5:bc:ae:a0:b5:32:03:de:85:2d:c6:80:e4:0a:9a:39:6d:
         e3:9d:37:da:5f:75:e8:0e:85:fa:4d:e8:21:c8:07:16:3d:46:
         ce:c3:10:16:c3:65:da:b9:a0:ee:c7:e1:9c:c9:f0:d9:2a:17:
         b4:72:c4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:45:51 2026 by rpki-client