Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.mft
File:                     CCtUsFr14-h0Pnv0r0HqYiuwlBE.mft (raw, json)
Hash identifier:          ntoRgB1RGyti3NyQ2x255yCv/TfuHTzwxlujsP9CkEk=
Subject key identifier:   B5:93:1A:C9:EA:F4:57:A2:0C:E8:60:BC:05:CD:85:CA:FF:6C:98:21
Authority key identifier: 08:2B:54:B0:5A:F5:E3:E8:74:3E:7B:F4:AF:41:EA:62:2B:B0:94:11
Certificate issuer:       /CN=082b54b05af5e3e8743e7bf4af41ea622bb09411
Certificate serial:       019E1D5983F5B04562E3E96D058E8017A872
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CCtUsFr14-h0Pnv0r0HqYiuwlBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.mft
Manifest number:          0266
Signing time:             Tue 12 May 2026 18:01:06 +0000
Manifest this update:     Tue 12 May 2026 18:01:06 +0000
Manifest next update:     Wed 13 May 2026 18:01:06 +0000
Files and hashes:         1: CCtUsFr14-h0Pnv0r0HqYiuwlBE.crl (hash: y+pkxv0wAEyP7LDi9PydU7+N6rfQSvcYKU05B2k88uM=)
                          2: Hm_m491XoXkRYN13NObfd481Amk.roa (hash: aw00i43ojCPAL/bMwtW4sU2iXT88omwAr6mDI5/DvVY=)
                          3: PQ1Cau6xIjwzfdiBMbZurFbWq4g.roa (hash: TNQeQoC/qT98wAaweVjAuTu11UnJIuOyyoosQn8fzXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CCtUsFr14-h0Pnv0r0HqYiuwlBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:83:f5:b0:45:62:e3:e9:6d:05:8e:80:17:a8:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082b54b05af5e3e8743e7bf4af41ea622bb09411
        Validity
            Not Before: May 12 18:01:06 2026 GMT
            Not After : May 13 18:01:06 2026 GMT
        Subject: CN=b5931ac9eaf457a20ce860bc05cd85caff6c9821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fe:f2:c9:57:95:d6:07:56:12:c5:e7:9e:80:
                    c2:8f:97:8f:f1:1c:b8:c9:f2:d7:ad:ee:0f:d6:3f:
                    62:82:30:ca:29:1c:bd:6d:f8:39:6b:e6:43:98:51:
                    5a:b6:e3:42:da:83:2e:7d:dc:b3:09:a4:ed:e4:af:
                    0d:7c:55:91:78:a2:d3:d2:bd:1f:05:dd:9d:f5:09:
                    e1:95:66:0b:ba:6b:4e:b7:a6:94:27:4f:9f:55:46:
                    dc:cd:bb:ca:29:4a:45:0e:c8:af:1c:ca:01:d0:be:
                    a2:3f:81:b5:b1:fd:3c:9c:81:93:e0:ce:b4:5a:74:
                    e7:7e:43:7d:26:c2:77:db:ca:9b:9b:67:06:68:1a:
                    07:ec:b8:3a:81:11:e0:ab:36:f8:fe:fd:41:b1:04:
                    b7:ae:38:92:e1:c8:24:4c:ec:b6:25:23:37:a3:cd:
                    c4:b9:bf:71:15:61:3f:ab:77:78:9d:0d:60:07:81:
                    a8:fd:d0:92:78:99:b2:3c:b4:64:21:7a:ab:ed:2f:
                    ca:60:d6:2c:60:34:e6:60:54:f5:89:79:5b:08:48:
                    92:19:bc:5b:da:75:26:8e:d7:13:c7:7d:43:4c:fc:
                    cd:85:38:d2:7c:c4:cb:09:df:1e:16:2d:e9:7b:30:
                    28:57:68:23:ab:ce:36:f4:1a:77:f0:23:52:98:bc:
                    a6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:93:1A:C9:EA:F4:57:A2:0C:E8:60:BC:05:CD:85:CA:FF:6C:98:21
            X509v3 Authority Key Identifier:
                keyid:08:2B:54:B0:5A:F5:E3:E8:74:3E:7B:F4:AF:41:EA:62:2B:B0:94:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCtUsFr14-h0Pnv0r0HqYiuwlBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:62:ad:77:a6:d7:7a:b5:cf:f5:df:65:18:58:25:e5:88:b9:
         28:cc:03:39:f0:ed:0e:43:9a:f4:27:3f:31:0e:13:43:ad:26:
         14:92:e6:15:21:6f:84:dc:fd:1e:c0:7d:ec:8e:e2:b1:f7:6d:
         4b:19:04:de:f3:b3:50:42:3e:04:e6:dd:9c:86:d6:d1:33:25:
         64:60:b4:6f:e5:66:4a:55:73:15:96:f7:fa:01:70:4c:5e:f5:
         d0:15:68:53:c8:a9:da:38:99:c1:04:aa:82:39:86:3e:d7:a3:
         ef:0d:a6:94:32:3c:1e:26:0d:91:57:c0:28:93:92:1a:08:e1:
         d1:58:f0:84:7d:d9:84:50:71:25:e7:86:a8:f8:7e:07:fc:20:
         14:97:81:bf:f5:3e:f8:9d:a5:e8:0a:ea:68:89:54:b1:00:3c:
         35:d4:31:30:21:79:b5:e0:1a:30:7d:50:20:c5:67:9e:5a:43:
         87:67:77:61:ff:9a:cc:41:1e:c3:89:94:93:ba:ac:e8:3f:80:
         b8:f7:61:6b:11:6c:db:d4:5b:b1:2b:b6:10:a0:20:fa:f7:1c:
         de:f9:11:c5:a6:3a:97:4d:5c:6a:c3:ec:7b:94:82:f6:1f:28:
         d7:6e:c6:43:68:9f:1d:97:c5:3a:42:18:9c:35:65:77:5c:82:
         ba:9a:df:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:54:26 2026 by rpki-client