Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft
File:                     1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft (raw, json)
Hash identifier:          pxlIYG1JLLUdmomr71iFSZ07UKxD4NzcYiyuSR2+38M=
Subject key identifier:   AA:B6:36:8D:9B:72:86:8B:87:E3:81:1F:86:EB:DA:4E:C0:B3:87:E3
Authority key identifier: F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35
Certificate issuer:       /CN=f970049cba7f39aeed31d65313c7b953f3fda135
Certificate serial:       019E1E358A3648AF1F7226C331B01E63F669
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft
Manifest number:          1735
Signing time:             Tue 12 May 2026 22:01:25 +0000
Manifest this update:     Tue 12 May 2026 22:01:25 +0000
Manifest next update:     Wed 13 May 2026 22:01:25 +0000
Files and hashes:         1: 1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl (hash: pO84HThOuNfGPhWd6jKcevxJdLXjJC+8bneijHrm0yA=)
                          2: 9O4dKfnZgTgqWB_iiNETLsmvwXY.roa (hash: B3+44Wl16VVGNQlYDiIt0cK5DguWkC82Gzjl2M8qljQ=)
                          3: 9wP7mpH_B0PGwWv5_AlRe4xldiA.roa (hash: zYLWTc75j+s7gKIa+ebYI+LbuI7qKTL5YSAgcKHFymE=)
                          4: HUC0yUJUDgqy27kx_QVtwVTYAPk.roa (hash: CyeQ43VG6tD5RMnxhr0UsmCBVHZpmO9VtiFMAauD0/c=)
                          5: OuUlmrN0axWfSqeYSWZ3VFyR9gQ.roa (hash: QKGtXpsKu8AS09muhwUu1IIbo7MS1z9kgfO0GKSJA9I=)
                          6: UgGCU0bNSuQOEElr01rlVK8sU_Q.roa (hash: AacHgDrHZ+OvhSoYCRcjSoSerNRKqDKHnF8VQ9u1BE8=)
                          7: Wp-glj4jLDxWifTRA7ilsUKXI0w.roa (hash: vAjHOys3Ggc83LnsEZEpKy5P5ZSFbz3QKqyxgLEsEXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:8a:36:48:af:1f:72:26:c3:31:b0:1e:63:f6:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f970049cba7f39aeed31d65313c7b953f3fda135
        Validity
            Not Before: May 12 22:01:25 2026 GMT
            Not After : May 13 22:01:25 2026 GMT
        Subject: CN=aab6368d9b72868b87e3811f86ebda4ec0b387e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:13:2b:32:1f:d9:ed:63:38:00:01:7b:7d:91:
                    7d:c0:c2:b7:28:05:bd:ed:70:7b:9e:00:84:96:8f:
                    ad:6f:66:11:04:3c:fb:bb:ec:8b:d9:fa:69:e2:c7:
                    cd:2c:bf:4d:04:5c:75:7a:9d:16:81:88:46:35:01:
                    2e:47:6c:e1:cc:73:50:a1:2d:dd:e1:38:1f:7b:74:
                    29:fd:c8:f2:57:b1:e4:59:a8:42:a9:f3:ec:9a:f1:
                    b7:83:d8:21:cc:1b:74:6c:f0:85:ab:e3:d5:97:94:
                    63:1f:3a:07:63:72:86:23:e3:6e:0a:24:0b:ac:68:
                    4d:31:56:24:55:f5:08:06:33:ad:6f:e1:57:0a:6e:
                    75:56:53:bb:1a:66:70:a6:36:11:ba:05:21:28:ba:
                    c1:f5:54:05:51:6c:81:1a:5e:49:34:77:5e:70:d2:
                    84:5d:a4:7e:83:e6:20:11:50:a1:5e:9c:03:39:18:
                    4d:a5:83:63:d7:48:e3:12:e9:65:6e:fe:4f:69:f3:
                    48:8c:25:c7:3a:39:1c:0b:7d:c3:63:62:ae:1c:fa:
                    14:41:0e:9a:0b:5b:54:28:8a:dd:89:e7:57:63:97:
                    dc:4b:9d:5f:21:93:5e:f0:e8:7b:14:03:8b:3d:ed:
                    e6:ff:9a:e2:62:a1:00:fe:d3:29:e6:87:7e:d5:2d:
                    12:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B6:36:8D:9B:72:86:8B:87:E3:81:1F:86:EB:DA:4E:C0:B3:87:E3
            X509v3 Authority Key Identifier:
                keyid:F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:5d:e4:de:fc:9d:9c:af:1d:5d:47:ba:0d:88:54:fb:33:66:
         b3:e2:f1:c2:29:75:66:cd:3f:8f:80:aa:f1:05:de:61:83:4b:
         04:79:de:c4:1c:2d:6a:ed:36:a4:23:9f:36:db:ff:23:cc:21:
         87:2c:ff:6c:be:d8:a8:e0:7f:7e:4a:23:ef:f4:be:16:97:ff:
         e5:3e:d2:f6:80:da:ea:f8:e1:cb:bd:3b:5e:07:82:7a:5f:c8:
         a4:57:a9:25:a1:a9:32:b3:90:cc:35:78:48:43:8b:01:1b:47:
         a6:c6:97:47:82:14:51:4d:b0:4f:f2:74:b5:9f:51:02:28:4d:
         93:9e:9d:54:ad:bc:a3:12:f1:28:a0:d8:27:4b:91:8c:55:76:
         5a:b3:04:6f:3d:68:dd:a1:63:27:15:8a:25:a7:8b:73:db:4a:
         4d:c9:aa:71:fa:0d:c4:e2:65:91:02:7f:97:14:5b:29:8e:2e:
         ae:c6:3e:1c:8b:f2:34:7e:34:cf:65:b7:08:e4:cf:5c:45:b3:
         d2:71:d2:ba:93:cd:23:a6:3e:a8:cb:51:54:00:19:1d:91:bb:
         59:fd:4d:c2:ba:f2:f7:a2:6a:cb:4e:0b:cc:30:35:b9:1e:cf:
         43:1c:e8:4f:2c:b4:de:24:37:ca:96:61:9a:7e:c6:eb:99:04:
         99:82:e6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:25:59 2026 by rpki-client