Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
File:                     R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft (raw, json)
Hash identifier:          jsbxnv70cXmgtitqhGGjjewlkLbyA2LbocB4c9AYyeU=
Subject key identifier:   DF:FB:9F:21:F5:6D:5D:81:60:A6:00:16:D6:55:1A:15:34:4D:BD:58
Authority key identifier: 47:E5:D3:33:DA:D9:D6:2D:53:28:D1:25:78:A3:1D:EF:42:AF:8F:34
Certificate issuer:       /CN=47e5d333dad9d62d5328d12578a31def42af8f34
Certificate serial:       019E1ED9B4C26D2C97C6C49612BF4492D653
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
Manifest number:          0B87
Signing time:             Wed 13 May 2026 01:00:44 +0000
Manifest this update:     Wed 13 May 2026 01:00:44 +0000
Manifest next update:     Thu 14 May 2026 01:00:44 +0000
Files and hashes:         1: R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl (hash: gHRinT33pscacGBaq1cPw5LOK7ZraZopKfpyMgUdIr8=)
                          2: lDMKh21Wt4FbbKS1OgeKAWJLOUA.roa (hash: 3L7WTrIU7aPDIrcLzqUSb6E2nzrLgIJ/FaZM9uhhyxA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 01:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:b4:c2:6d:2c:97:c6:c4:96:12:bf:44:92:d6:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47e5d333dad9d62d5328d12578a31def42af8f34
        Validity
            Not Before: May 13 01:00:44 2026 GMT
            Not After : May 14 01:00:44 2026 GMT
        Subject: CN=dffb9f21f56d5d8160a60016d6551a15344dbd58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:58:6b:4e:bb:76:4e:b7:40:99:b8:24:7b:b0:
                    e1:d4:1a:3f:9f:5f:f8:e7:7c:e6:fd:4e:27:88:15:
                    2e:71:66:23:8e:20:19:fb:c2:0e:6d:71:b5:8f:fd:
                    78:87:31:6a:7f:35:3c:10:dc:db:6f:87:c0:10:c5:
                    97:89:33:7a:0e:97:3f:1a:02:99:72:6f:14:e8:16:
                    03:d8:2e:55:2d:1f:36:b7:ef:30:ac:15:7f:79:02:
                    6b:5b:83:58:0a:4b:bf:96:c8:9e:a5:31:4c:7a:7c:
                    b1:fd:e1:ae:f3:5f:87:c2:be:82:30:d1:2d:21:30:
                    7b:fc:97:ed:8e:f5:6b:a4:8a:26:35:c2:a4:3d:32:
                    5e:8c:8e:20:0c:1d:72:dd:d7:fa:a4:54:ab:4f:88:
                    18:86:17:58:3f:82:d8:c5:82:cd:0b:0b:d1:0c:0d:
                    51:71:d9:10:70:57:23:93:50:0a:a1:6a:21:4b:84:
                    e1:01:61:7f:67:f9:87:d2:49:82:48:b2:76:a8:b7:
                    0b:0c:1c:47:9f:0d:54:7a:f1:f8:c4:58:49:d8:6a:
                    55:04:12:54:eb:7b:8f:42:af:41:24:23:36:a0:a5:
                    2b:e7:fa:6c:31:46:0f:3e:b4:1a:3b:eb:ed:fa:ad:
                    8e:1d:44:0e:02:5d:95:80:ef:ec:d8:4b:e2:f2:f5:
                    1f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:FB:9F:21:F5:6D:5D:81:60:A6:00:16:D6:55:1A:15:34:4D:BD:58
            X509v3 Authority Key Identifier:
                keyid:47:E5:D3:33:DA:D9:D6:2D:53:28:D1:25:78:A3:1D:EF:42:AF:8F:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:e7:32:8d:4d:4f:b0:60:c3:72:69:56:d9:a6:34:b7:fe:6c:
         ae:d8:c5:f0:ed:b6:95:70:bd:a3:48:18:c1:fb:5f:3e:35:93:
         e8:e0:03:e2:e7:3c:58:fd:45:35:a5:eb:84:f7:53:09:01:d8:
         80:d8:65:5b:69:07:2c:e3:84:aa:d7:3b:47:41:2c:e7:71:41:
         40:ee:3b:b4:0a:01:22:67:88:d2:ea:b4:56:85:64:79:9f:ab:
         98:5a:b3:95:05:24:72:41:bb:34:e6:ce:5e:dd:95:d0:84:08:
         34:cf:f1:d9:d1:6f:61:cd:d8:22:b2:4f:4d:8f:f3:9f:2a:b3:
         68:28:78:4c:d8:5e:fc:f1:35:38:b9:8c:c0:d4:37:ce:8f:03:
         1d:b5:cb:3b:f4:85:79:03:1a:f7:fe:4e:77:8a:b2:27:5e:c4:
         dc:ec:08:fd:ec:0e:00:6d:c0:32:cc:87:2b:58:cb:d6:8a:9c:
         8e:f2:ff:be:de:b3:3c:67:26:ea:fb:da:55:44:b4:75:bc:37:
         3b:8b:91:d0:56:2a:fe:51:c8:1c:6b:40:8c:03:a5:46:4c:6a:
         d4:01:6f:dc:fb:b4:9f:b3:dc:50:0e:38:7f:3e:37:2c:1d:6b:
         cd:3d:b1:a8:a2:a2:14:b2:6a:50:55:6e:02:f2:fa:28:af:78:
         56:fa:4a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:37:03 2026 by rpki-client