Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.mft
File:                     E--253AYyTVaU4hW1OueUGl19TU.mft (raw, json)
Hash identifier:          NYf/r6wf/DQ+KuvxheDSC0Q6CfzAUVl64FuC8ee9PLA=
Subject key identifier:   88:62:A1:30:5C:AE:CC:EF:0F:2F:8B:04:F3:7B:64:7B:F0:32:20:20
Authority key identifier: 13:EF:B6:E7:70:18:C9:35:5A:53:88:56:D4:EB:9E:50:69:75:F5:35
Certificate issuer:       /CN=13efb6e77018c9355a538856d4eb9e506975f535
Certificate serial:       019E1FED08879B3530885766A1E9D70C49CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E--253AYyTVaU4hW1OueUGl19TU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.mft
Manifest number:          01BF
Signing time:             Wed 13 May 2026 06:01:28 +0000
Manifest this update:     Wed 13 May 2026 06:01:28 +0000
Manifest next update:     Thu 14 May 2026 06:01:28 +0000
Files and hashes:         1: E--253AYyTVaU4hW1OueUGl19TU.crl (hash: bnRx67X1oVRK3iYMO5fP9ebW+ctTpmjDo6INFB2Iy68=)
                          2: pn0eecPtI3ydGJyzmDixGdijU0M.roa (hash: hsAKDf191EtjscgSuEpFCHm/Jr/4jq8uJLk58v0knFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E--253AYyTVaU4hW1OueUGl19TU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ed:08:87:9b:35:30:88:57:66:a1:e9:d7:0c:49:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13efb6e77018c9355a538856d4eb9e506975f535
        Validity
            Not Before: May 13 06:01:28 2026 GMT
            Not After : May 14 06:01:28 2026 GMT
        Subject: CN=8862a1305caeccef0f2f8b04f37b647bf0322020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:1f:85:7d:5e:f6:f2:7d:32:ed:19:03:84:98:
                    f3:ab:db:c4:2e:4b:e5:3e:6d:7c:8a:c2:ad:64:f0:
                    b5:4f:10:be:27:a3:e6:95:ff:01:ba:53:59:20:bb:
                    d8:53:eb:d1:52:26:50:d3:99:79:72:55:c0:bd:35:
                    c2:9d:a3:02:73:a7:c7:37:d6:5e:fc:cb:76:51:43:
                    26:b5:41:64:8f:38:c0:5b:63:38:76:6d:2e:7f:c6:
                    47:ad:97:49:d2:e1:06:15:25:ea:7d:d5:6f:13:d7:
                    fd:6f:61:ed:79:d5:8c:26:b4:50:49:99:f8:51:28:
                    41:b4:ec:57:ea:a4:b1:c3:22:c5:8c:1c:8c:87:21:
                    92:5a:33:3f:33:56:54:d2:2c:d5:44:cf:e7:ac:8d:
                    63:f7:52:fd:cc:b2:8f:ca:ed:d8:3b:d5:cf:e5:aa:
                    38:c6:1d:a3:eb:1f:b0:2d:8f:51:ec:ec:90:56:a4:
                    47:04:a9:54:e1:d0:6f:6c:0d:9d:54:6b:e5:48:2d:
                    51:34:ad:1d:c5:11:20:60:83:f6:5e:0c:6f:c3:04:
                    38:d1:0f:e5:ee:40:ba:25:28:d1:6a:23:40:c3:fe:
                    6a:3d:b0:d8:15:2e:e9:ed:80:54:9b:a6:1b:d3:7b:
                    fc:27:67:fb:e2:e6:95:32:14:8d:17:b8:c2:9b:03:
                    9d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:62:A1:30:5C:AE:CC:EF:0F:2F:8B:04:F3:7B:64:7B:F0:32:20:20
            X509v3 Authority Key Identifier:
                keyid:13:EF:B6:E7:70:18:C9:35:5A:53:88:56:D4:EB:9E:50:69:75:F5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E--253AYyTVaU4hW1OueUGl19TU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:2a:09:53:52:9a:0e:db:7c:ac:d8:e1:df:35:55:0c:82:59:
         06:1b:f1:08:26:78:92:97:a9:26:60:1b:bc:04:6a:df:0b:d4:
         d0:da:b1:6f:8b:26:49:40:e6:7d:38:62:5f:16:63:dc:5b:36:
         b3:19:b3:a0:cb:14:16:28:aa:10:13:77:db:38:83:1d:a9:a3:
         81:4f:ed:03:06:5b:14:ea:5d:aa:75:5c:ba:ba:cf:2a:30:21:
         c7:31:48:45:12:a3:d4:62:82:38:dd:c0:3e:56:b3:36:0b:bb:
         a7:a8:0d:76:01:d7:31:76:b1:c0:83:13:56:e9:95:32:14:ad:
         3f:70:f8:be:c0:99:b0:01:1f:ab:67:1b:24:31:ad:21:34:2c:
         6e:a2:03:45:1f:e4:6d:48:b1:09:c6:7e:4c:23:f6:74:b3:f1:
         6e:5c:c5:5c:5d:aa:3c:b6:df:83:97:5b:43:e9:00:26:12:7a:
         6c:15:2e:0e:55:a3:25:4f:d0:9f:ed:0a:dc:da:09:da:d3:81:
         0d:f9:2c:44:cc:df:cd:67:6e:26:57:c0:a0:b7:03:04:de:45:
         5e:18:e7:41:af:e9:d7:9a:68:de:bd:41:e1:f2:fd:7c:10:84:
         a8:9c:5c:4c:e9:71:8c:55:df:16:3b:1e:fc:ce:19:66:aa:0f:
         c8:8f:8e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:53:15 2026 by rpki-client