Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
File:                     71LcaSC94AdFBjC7_AIWreTgP2I.mft (raw, json)
Hash identifier:          uJnROTk3tDyxbfzF+UjjkisLyaMQAyrUmxpoiLS6cKQ=
Subject key identifier:   0E:FA:BA:F3:2E:9E:D4:C6:A0:E0:C5:B3:08:5F:8B:C5:7D:38:64:CB
Authority key identifier: EF:52:DC:69:20:BD:E0:07:45:06:30:BB:FC:02:16:AD:E4:E0:3F:62
Certificate issuer:       /CN=ef52dc6920bde007450630bbfc0216ade4e03f62
Certificate serial:       019E1BD9271D5960EECEA3F488A89B60FD87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
Manifest number:          13D0
Signing time:             Tue 12 May 2026 11:01:16 +0000
Manifest this update:     Tue 12 May 2026 11:01:16 +0000
Manifest next update:     Wed 13 May 2026 11:01:16 +0000
Files and hashes:         1: 1-U6aXSNrwCxTePFdNUR5lBDEtfE.roa (hash: 5TwFfZ3mjpXZiK+WWFipXkRuzwCPyvQ/Hl+kyatEY/M=)
                          2: 71LcaSC94AdFBjC7_AIWreTgP2I.crl (hash: SyiBrqOPW7aBZ9UeouzvBnxgMfVPQKykAdVh5Ia7798=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 11:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1b:d9:27:1d:59:60:ee:ce:a3:f4:88:a8:9b:60:fd:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef52dc6920bde007450630bbfc0216ade4e03f62
        Validity
            Not Before: May 12 11:01:16 2026 GMT
            Not After : May 13 11:01:16 2026 GMT
        Subject: CN=0efabaf32e9ed4c6a0e0c5b3085f8bc57d3864cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cf:8c:72:ff:f9:f3:87:1a:61:cc:0d:7e:da:
                    e1:f6:d5:60:be:3b:ce:40:22:8e:7e:4d:e6:2d:36:
                    c3:f4:56:f6:98:0a:e7:92:9b:d4:7a:2e:50:1a:81:
                    4b:22:0e:bf:63:e6:c2:c7:0f:89:47:66:3d:87:13:
                    0f:8e:32:6c:d8:94:77:a9:02:de:f1:ef:2c:b2:f3:
                    4f:4b:64:eb:22:41:91:91:95:f3:2b:07:42:bf:99:
                    1c:50:ef:d0:70:45:93:7e:83:df:46:07:23:42:8c:
                    8e:cf:77:99:e2:16:67:58:de:4c:f2:b5:eb:27:7b:
                    22:8f:15:89:a5:28:bf:3b:39:fb:52:d2:6d:97:aa:
                    ce:63:15:99:4e:48:ed:bf:ff:88:f7:e1:39:a8:ce:
                    5d:62:28:31:be:c2:7b:53:ac:c8:8c:3c:60:86:da:
                    77:1e:15:f1:cd:b9:34:b6:dc:1f:11:de:0e:67:9b:
                    9c:41:1b:26:38:5e:88:81:8e:62:7c:9e:21:d1:cb:
                    91:69:76:36:09:eb:a7:b5:27:bf:1b:f2:18:55:1a:
                    6e:cf:c0:44:53:c2:64:f1:61:2f:3d:f9:fa:9a:0a:
                    3b:06:b3:49:ba:21:12:82:b0:5f:1b:3f:fb:07:88:
                    29:05:f4:dc:8c:29:85:43:52:3f:bf:2c:9c:cc:ad:
                    27:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:FA:BA:F3:2E:9E:D4:C6:A0:E0:C5:B3:08:5F:8B:C5:7D:38:64:CB
            X509v3 Authority Key Identifier:
                keyid:EF:52:DC:69:20:BD:E0:07:45:06:30:BB:FC:02:16:AD:E4:E0:3F:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:45:6c:30:6f:bc:1f:73:5d:8f:c8:c5:36:c4:4a:ec:d7:0b:
         7e:4a:e1:42:25:ac:ae:1e:1a:0c:2d:0a:65:5b:46:e2:4f:ae:
         f2:c8:96:44:c9:4e:a3:62:04:f1:44:f6:fd:6e:e5:c7:bb:5d:
         23:e1:d8:4c:1b:c6:a0:0d:4a:46:54:64:7f:a0:9d:22:e2:7c:
         59:76:e8:e0:5b:76:74:33:7e:d6:80:ba:18:bb:ec:c3:8e:75:
         f8:2e:ad:62:5f:d9:e5:63:89:a5:df:ae:c7:17:11:b9:f2:40:
         a1:ec:e8:f3:20:33:ec:04:13:29:c5:84:73:5b:09:ce:43:02:
         a9:06:ce:10:aa:00:47:58:32:0b:1a:84:58:88:24:fd:10:07:
         40:2d:a4:22:35:65:dd:d1:97:28:85:4c:76:e3:53:96:b9:2e:
         9d:98:19:fe:ad:d2:13:62:20:dd:36:ce:fa:5c:0c:a7:35:07:
         83:f0:82:9c:f1:84:07:2d:20:2b:ec:32:a1:95:65:1e:f0:5e:
         96:40:ac:53:ef:b4:39:4c:5a:1a:e8:9f:fe:06:ad:58:f4:e8:
         97:66:46:28:66:0c:4f:f9:35:a6:45:71:2c:13:49:56:1e:5c:
         c2:57:c5:fb:41:40:96:29:a8:58:47:56:40:65:43:3f:3c:3d:
         ce:17:7c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:13 2026 by rpki-client