Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
File:                     _sY8Uk5V3zS_dYKCd1PnenaZx6I.mft (raw, json)
Hash identifier:          IlvJ7A5Djw65CPYw0qpePr+IgfvvgSZICtC5g/coSqQ=
Subject key identifier:   EA:1E:7D:5B:E5:51:43:2D:3F:51:A4:87:07:00:74:17:04:55:86:2F
Authority key identifier: FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2
Certificate issuer:       /CN=fec63c524e55df34bf7582827753e77a7699c7a2
Certificate serial:       019E1F10CE913F90FEB0D33BDE44A81558ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
Manifest number:          150D
Signing time:             Wed 13 May 2026 02:00:55 +0000
Manifest this update:     Wed 13 May 2026 02:00:55 +0000
Manifest next update:     Thu 14 May 2026 02:00:55 +0000
Files and hashes:         1: PDlzLdRSfiCWn5Cn9n1N3CZ3lEA.roa (hash: EEEk6xoAWgV2qpYCMx9BhEvvCT14wds/MjLsIpjnFvU=)
                          2: _sY8Uk5V3zS_dYKCd1PnenaZx6I.crl (hash: hUKxOiiAUn935MOB+gABzcMmPjSmXzurH6+LNx3ik20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:ce:91:3f:90:fe:b0:d3:3b:de:44:a8:15:58:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fec63c524e55df34bf7582827753e77a7699c7a2
        Validity
            Not Before: May 13 02:00:55 2026 GMT
            Not After : May 14 02:00:55 2026 GMT
        Subject: CN=ea1e7d5be551432d3f51a487070074170455862f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5e:41:e2:d4:3c:00:23:b0:06:69:1c:b4:d2:
                    61:71:68:23:49:64:11:67:e4:e3:fe:8a:05:a2:43:
                    08:48:43:c0:23:6c:93:09:e2:66:c3:ab:ba:3b:02:
                    02:9f:08:6e:e3:0e:a5:21:24:03:e6:6f:07:1f:13:
                    b8:21:27:a6:70:d7:c4:aa:14:6e:23:77:89:e0:b5:
                    ba:f4:e0:77:42:68:b4:44:6e:82:dc:ff:88:48:fc:
                    05:49:56:30:ba:ce:3e:2d:82:d1:28:f3:0b:61:ed:
                    e7:da:3c:1b:f8:b4:dd:11:9c:f6:be:d8:26:0c:78:
                    61:2a:55:4d:19:0b:a9:4e:45:3a:e3:15:3a:a5:fe:
                    74:85:21:6a:e4:48:a6:d6:24:e1:b5:0a:0c:f1:88:
                    98:48:aa:58:65:a6:fb:76:94:1b:b3:72:f9:48:b4:
                    74:90:bb:30:82:67:2c:56:77:f7:2d:a6:90:2b:1c:
                    30:0b:e0:6f:02:28:e7:a5:89:10:b9:aa:1f:06:01:
                    44:ca:81:61:5b:4a:60:09:f0:e8:6e:5a:af:22:95:
                    d4:3d:2b:6e:f4:4f:60:f6:25:76:97:b0:9a:71:a6:
                    36:72:c5:24:be:a6:e0:ff:6a:52:5e:54:e5:99:fd:
                    79:2e:43:ab:77:c0:14:73:c3:a3:ca:2e:29:8e:d2:
                    70:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:1E:7D:5B:E5:51:43:2D:3F:51:A4:87:07:00:74:17:04:55:86:2F
            X509v3 Authority Key Identifier:
                keyid:FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:91:58:85:1c:1a:9a:e0:db:7e:70:c0:d8:a5:d3:bb:34:34:
         3a:94:9b:56:57:d9:6b:8a:1e:60:30:28:be:a0:8c:df:f0:64:
         70:1b:9e:7e:7b:3b:48:73:76:93:05:44:d4:26:41:78:6b:23:
         c9:17:4f:bd:51:1a:6f:d0:56:12:d2:49:98:f3:27:c9:1b:d3:
         0b:3e:d7:5e:62:c6:88:55:7f:4b:b2:ea:28:6e:d4:ba:7f:5b:
         60:d8:c6:fc:e4:bd:f2:9e:ce:d7:a9:75:bb:84:bb:1d:f6:03:
         ed:9a:1d:bc:14:22:b9:7e:83:8e:dc:32:14:9e:fd:65:bc:6d:
         51:cc:11:d6:9a:52:9d:b8:30:30:fd:e7:16:47:a1:9e:b4:04:
         e9:bb:ca:e5:85:26:68:27:f5:d8:f4:15:98:c1:a4:d0:78:dd:
         48:4a:2c:df:32:07:4a:ff:d3:3b:0a:3a:c1:49:65:7b:d1:cc:
         43:02:b3:d6:9b:89:82:1a:77:22:be:52:21:1c:6e:3a:79:31:
         f7:48:ef:a7:44:ee:57:62:69:8a:e3:14:42:dd:03:cf:a4:9a:
         6a:ff:13:32:3f:16:88:87:23:2e:ee:63:58:fd:bf:7b:68:81:
         3f:af:d8:81:0f:dd:e6:89:96:f5:8e:66:6b:ed:a7:d4:1b:e3:
         84:43:38:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:20:33 2026 by rpki-client