Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
File:                     fySblURiBoP5SziKdVGmimST7RI.mft (raw, json)
Hash identifier:          picEP7wVOWItZ0BRW9Y7CUNa+ibpdybYmRBnFOk9zVo=
Subject key identifier:   9C:B3:E9:56:D6:ED:F6:20:F0:35:54:82:54:F2:6A:43:7C:D8:D8:47
Authority key identifier: 7F:24:9B:95:44:62:06:83:F9:4B:38:8A:75:51:A6:8A:64:93:ED:12
Certificate issuer:       /CN=7f249b9544620683f94b388a7551a68a6493ed12
Certificate serial:       019E1DFEC73DCDC348048F188DC49BA9A8D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
Manifest number:          0536
Signing time:             Tue 12 May 2026 21:01:36 +0000
Manifest this update:     Tue 12 May 2026 21:01:36 +0000
Manifest next update:     Wed 13 May 2026 21:01:36 +0000
Files and hashes:         1: dnXyH3vZjdJd8T6MD3l1oA-JYEE.roa (hash: xs3AEKZ6AnA/WEhDya53kTTaCVsu33jeAdkrvd9mk2w=)
                          2: fySblURiBoP5SziKdVGmimST7RI.crl (hash: jMUWXESLD1NaNC466gfLeo1weRcO8voW+5PFkuGBmu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:c7:3d:cd:c3:48:04:8f:18:8d:c4:9b:a9:a8:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f249b9544620683f94b388a7551a68a6493ed12
        Validity
            Not Before: May 12 21:01:36 2026 GMT
            Not After : May 13 21:01:36 2026 GMT
        Subject: CN=9cb3e956d6edf620f035548254f26a437cd8d847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9f:a7:97:65:64:d3:04:f3:08:93:e3:fc:14:
                    46:fa:bf:ea:79:0e:51:09:35:c9:0e:37:c0:ae:61:
                    f6:3c:a1:51:43:8c:84:cd:e4:54:58:65:56:8f:39:
                    54:8c:73:19:83:2d:8e:ea:24:29:aa:a5:81:63:1a:
                    e3:e8:3d:cb:a9:55:75:52:64:61:48:93:74:02:7b:
                    82:67:ff:d9:11:1b:e5:9b:f0:a8:e8:ad:a4:86:cb:
                    dc:e5:f0:92:a5:e6:8e:92:71:4b:9f:40:c8:90:02:
                    06:da:2f:09:8b:69:ed:0b:65:87:81:a1:95:ad:89:
                    7b:89:38:3d:c8:0f:07:42:dd:85:1d:4f:82:92:ce:
                    93:6f:85:70:84:33:05:6f:97:04:e5:c6:06:e6:8c:
                    35:ca:bf:83:79:e0:dc:01:2e:b4:a6:47:9d:7d:df:
                    50:7b:6b:3c:12:3d:26:41:80:1d:9f:2e:a5:83:52:
                    83:1d:3a:fe:95:fa:99:f4:9b:51:fd:ee:bf:66:ae:
                    b7:a1:42:41:9f:c4:4d:65:bc:96:e5:d6:a6:17:27:
                    d8:d6:e5:3f:ee:85:4d:e3:f6:57:68:e0:7e:55:24:
                    1f:a8:9d:18:46:43:04:3f:d2:97:e7:0c:dd:3f:6b:
                    f0:55:dd:12:c6:49:aa:33:f7:17:73:fb:96:69:67:
                    4f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B3:E9:56:D6:ED:F6:20:F0:35:54:82:54:F2:6A:43:7C:D8:D8:47
            X509v3 Authority Key Identifier:
                keyid:7F:24:9B:95:44:62:06:83:F9:4B:38:8A:75:51:A6:8A:64:93:ED:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:68:1f:4f:c1:1c:fb:e6:81:f9:6b:ff:b5:05:71:bc:4c:18:
         71:8b:4f:24:97:69:dc:11:3d:22:e6:91:46:9f:9d:f1:83:eb:
         1e:4c:b5:39:e8:66:89:82:06:78:d3:30:9d:19:eb:fd:a1:f7:
         fb:5e:3b:d2:39:cc:94:56:f3:91:70:85:57:02:2b:43:91:61:
         97:c0:e5:43:d5:66:88:61:72:1b:5c:63:52:7b:81:e5:35:7e:
         c9:6d:7e:3c:d7:6f:c9:6b:1c:c7:41:9c:c8:a9:92:e9:c1:92:
         bd:49:8b:91:c1:b7:db:5f:20:6c:b2:85:d9:e2:55:b1:47:30:
         e4:6e:a8:c9:e8:d5:a9:fa:5f:a2:56:77:02:94:c0:41:d7:42:
         af:cf:c9:90:3c:aa:ba:88:d3:f0:12:f8:86:57:67:b6:69:36:
         47:7c:e4:18:6a:59:6c:2b:c5:41:cb:50:f2:69:ed:29:a9:ba:
         30:c9:00:1a:d3:f2:0d:9a:93:ae:df:83:cb:e7:c7:aa:07:80:
         24:6b:aa:39:e9:c6:55:91:fa:16:12:7d:5f:44:d6:16:25:17:
         fc:88:2c:30:8c:40:2d:ec:18:8e:d4:0a:30:81:2c:10:c8:59:
         aa:15:21:bf:44:bd:fb:c1:eb:2b:49:1a:6c:d3:8c:d1:2c:08:
         2f:4b:79:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:43:39 2026 by rpki-client