Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
File:                     735cdfZIrGkrFLwiLiwYDIY7ReI.mft (raw, json)
Hash identifier:          aTBq3AHUIbY3VSe4t1ZNXrhDc61zUwGvebYQJlnTClw=
Subject key identifier:   7D:B8:50:B4:33:C5:65:72:3C:FB:F1:B0:77:F6:D4:02:AD:5A:69:F9
Authority key identifier: EF:7E:5C:75:F6:48:AC:69:2B:14:BC:22:2E:2C:18:0C:86:3B:45:E2
Certificate issuer:       /CN=ef7e5c75f648ac692b14bc222e2c180c863b45e2
Certificate serial:       019E1CB5468AF79C5B32ED1885906B3F8CD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
Manifest number:          05A4
Signing time:             Tue 12 May 2026 15:01:42 +0000
Manifest this update:     Tue 12 May 2026 15:01:42 +0000
Manifest next update:     Wed 13 May 2026 15:01:42 +0000
Files and hashes:         1: 1j3vfqmoOqwb7Yh6DBdvRjdsFsg.roa (hash: /Uld+qa79+lTp86N22k2YZMrzBMGIznMfTj+54uPKBY=)
                          2: 735cdfZIrGkrFLwiLiwYDIY7ReI.crl (hash: dxe4opxLeM8QSR1nwZTkJzq7rdP3YdUCL8XaSDteNUk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b5:46:8a:f7:9c:5b:32:ed:18:85:90:6b:3f:8c:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef7e5c75f648ac692b14bc222e2c180c863b45e2
        Validity
            Not Before: May 12 15:01:42 2026 GMT
            Not After : May 13 15:01:42 2026 GMT
        Subject: CN=7db850b433c565723cfbf1b077f6d402ad5a69f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:24:ac:c3:aa:75:c9:55:52:7e:0e:c3:89:9b:
                    4f:6d:08:24:35:45:6e:ed:c6:6d:9b:9d:9e:07:9c:
                    70:6d:0f:96:bd:ab:0e:a0:11:52:89:38:87:01:02:
                    e9:df:67:23:7f:32:b2:1a:5a:39:a8:2a:94:09:1e:
                    e6:5e:17:26:88:8f:21:ec:f6:94:80:bc:04:7a:07:
                    39:ce:d0:cc:f6:c4:e2:6f:a0:fe:ae:81:7d:9d:94:
                    d7:57:6a:cf:ea:7b:d8:3b:d4:15:04:94:1f:1a:e6:
                    56:b8:a3:09:62:61:09:fa:54:95:d6:a4:e1:a9:99:
                    69:46:43:6e:27:b6:31:80:5e:48:42:9d:9b:0f:0a:
                    fe:5f:10:fd:bd:2c:b1:8e:58:e7:40:09:50:59:cb:
                    7f:f2:90:1f:23:d5:f8:24:f5:91:b3:13:0f:9a:c0:
                    0f:e4:24:9f:85:c8:10:ef:b5:a2:20:44:bf:23:92:
                    24:9d:16:00:8e:90:10:bc:3d:fc:0e:2b:6e:67:23:
                    6d:38:9a:ba:b0:d2:e5:3f:cf:5d:62:8d:3f:6c:f6:
                    41:c0:e5:d3:5b:74:13:5c:f2:7f:c6:ad:5b:bc:23:
                    10:6d:16:48:e4:49:1d:7d:e8:3b:68:18:50:ac:e7:
                    5a:4b:cf:50:de:9d:9a:26:a5:29:61:bb:57:5a:77:
                    da:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B8:50:B4:33:C5:65:72:3C:FB:F1:B0:77:F6:D4:02:AD:5A:69:F9
            X509v3 Authority Key Identifier:
                keyid:EF:7E:5C:75:F6:48:AC:69:2B:14:BC:22:2E:2C:18:0C:86:3B:45:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:52:47:1a:8d:28:5f:24:03:4c:d4:5d:38:3f:90:53:5f:9b:
         26:1c:13:c2:59:66:dd:9d:6f:01:00:a8:ff:48:36:27:1b:c5:
         30:dd:6d:4b:a3:f4:72:61:8e:ce:f0:ef:34:7b:2f:58:82:34:
         7e:4f:57:57:ff:49:ee:ce:48:d1:28:35:c9:08:80:b5:35:a6:
         04:cf:ff:62:b2:a7:fb:96:3a:7a:e1:08:38:ce:17:2f:72:1f:
         01:b1:5c:2d:25:b9:91:12:be:8c:41:c3:ec:a6:b2:c3:46:f8:
         33:58:0e:14:f1:25:e1:57:9f:f9:c2:d0:ae:6a:d8:fb:44:f3:
         c1:b7:df:52:92:24:95:93:36:fb:ba:35:1f:82:48:c0:55:70:
         c3:6b:85:fd:e0:55:01:6d:67:94:3a:7e:26:95:ec:10:bd:e6:
         ec:ff:31:f4:d5:84:c7:ef:58:f3:64:55:21:0e:db:e7:2e:a9:
         5a:d7:9e:c9:2b:68:1e:c9:ca:4e:6d:1c:ae:9d:3c:57:d9:ab:
         a6:4d:b3:8c:ef:c9:ba:dc:92:a3:72:ea:f4:b7:1a:ff:60:dd:
         8c:6f:a7:7c:ff:0a:b2:67:68:3f:a4:0b:bb:c7:9b:a1:b1:89:
         58:08:5c:b5:98:39:d4:1a:52:f5:f6:9a:d5:d0:3f:bb:31:bd:
         72:e8:e7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:24 2026 by rpki-client