Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
File:                     tsAN1rE41q2498hDjdCy2Fg9xWY.mft (raw, json)
Hash identifier:          KU1L4luaSixkdG3N//c2lc/aaBl3opUHTEhesFO4U18=
Subject key identifier:   C2:F4:AA:A8:CC:6A:14:70:18:46:95:2D:9B:E8:EC:FA:8E:96:9B:F6
Authority key identifier: B6:C0:0D:D6:B1:38:D6:AD:B8:F7:C8:43:8D:D0:B2:D8:58:3D:C5:66
Certificate issuer:       /CN=b6c00dd6b138d6adb8f7c8438dd0b2d8583dc566
Certificate serial:       019E1F480057230D54C61B53FAC8A7E748A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
Manifest number:          01AC
Signing time:             Wed 13 May 2026 03:01:12 +0000
Manifest this update:     Wed 13 May 2026 03:01:12 +0000
Manifest next update:     Thu 14 May 2026 03:01:12 +0000
Files and hashes:         1: 7-dKMxr-QmXUlbkg1afMtX6sKE4.asa (hash: UzAeb5Ceo8+VLW1IRrYNLAEzzNGnDc8WQw44mvqtVuw=)
                          2: tsAN1rE41q2498hDjdCy2Fg9xWY.crl (hash: kdxGyPOb+zB/7QYWbQzgle6IMvSmzXSRHpnAxB44CKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:48:00:57:23:0d:54:c6:1b:53:fa:c8:a7:e7:48:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6c00dd6b138d6adb8f7c8438dd0b2d8583dc566
        Validity
            Not Before: May 13 03:01:12 2026 GMT
            Not After : May 14 03:01:12 2026 GMT
        Subject: CN=c2f4aaa8cc6a14701846952d9be8ecfa8e969bf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:88:78:fd:89:16:6d:f1:44:3d:38:fd:27:23:
                    22:16:e9:3c:0b:a0:ac:47:14:94:e4:cb:aa:83:8b:
                    46:cf:90:91:a2:62:40:ed:97:b7:18:a3:5a:73:8a:
                    ab:a0:1b:c9:73:9f:e1:83:43:cc:37:3b:99:99:43:
                    53:2a:24:c0:a4:0f:76:29:86:4c:45:e5:d3:d8:8f:
                    82:06:53:dd:13:82:3a:56:3b:c2:68:fb:d2:64:2d:
                    72:3a:d1:a7:34:03:a8:a8:7e:fc:89:54:f1:c8:06:
                    bc:60:ca:49:7f:e5:96:f9:fc:a7:cc:c0:93:ff:3d:
                    d6:92:66:4a:54:4f:8f:de:1e:77:d3:9e:80:25:3a:
                    b1:9b:dd:19:28:98:fd:98:3e:b4:30:48:48:e8:06:
                    71:50:d7:16:44:57:7a:4b:74:35:9c:dd:8c:1c:82:
                    9f:80:c2:5e:f0:34:b5:fb:d8:69:54:aa:29:93:32:
                    3f:fc:ed:cd:df:9e:b0:30:ec:6e:4b:5f:90:1a:d6:
                    f6:26:2c:f1:e8:94:08:ee:25:5f:f3:6b:01:43:d8:
                    60:5d:e1:17:12:43:6f:38:f5:51:34:31:d7:fe:c2:
                    66:6f:bd:bd:a0:ba:0f:54:1b:cc:f6:69:25:22:f0:
                    f8:16:0f:d6:9e:e8:d0:64:ce:02:de:19:86:84:fc:
                    0d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F4:AA:A8:CC:6A:14:70:18:46:95:2D:9B:E8:EC:FA:8E:96:9B:F6
            X509v3 Authority Key Identifier:
                keyid:B6:C0:0D:D6:B1:38:D6:AD:B8:F7:C8:43:8D:D0:B2:D8:58:3D:C5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:f0:2a:69:0a:f1:fe:85:2c:e2:02:65:bc:23:a8:13:e1:99:
         3a:75:98:16:47:4b:52:32:07:63:c3:43:8c:6a:eb:fd:e6:0f:
         ea:9a:65:8f:32:94:16:34:32:40:62:cd:89:d2:d8:ba:f2:88:
         56:0a:c8:c8:57:9a:5c:d1:b2:4c:51:2d:b3:ea:83:13:31:d1:
         af:d4:7c:e7:05:cd:43:d6:63:61:55:9c:c9:52:eb:65:ec:56:
         20:d4:71:53:8f:da:54:1a:9d:c0:cb:7b:cc:5c:7a:d2:54:b3:
         45:0d:34:da:58:fb:45:6b:64:1b:dd:71:c1:5f:91:3d:e0:aa:
         fa:f0:fc:5b:80:af:3a:49:0d:b7:b8:34:26:40:45:ed:38:7f:
         6e:a2:15:5d:b9:7a:30:ea:16:e6:ed:c0:d0:f8:bf:4b:81:3d:
         5c:bf:61:70:9b:56:25:c0:3d:c5:77:56:8f:11:83:8b:0b:1a:
         f4:d2:b5:d3:89:dd:96:68:67:d9:98:de:98:01:72:4d:1a:8a:
         66:d4:9b:b2:16:2a:51:ed:44:93:6b:c5:0e:f5:79:bc:45:aa:
         72:1b:29:75:e4:78:6b:72:9d:a4:1f:9e:b9:f4:57:41:da:89:
         c8:72:44:85:bb:02:72:a5:3a:40:fb:44:ec:53:f5:e5:5b:c8:
         97:14:45:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:04:18 2026 by rpki-client