Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
File:                     1fBlyL23j_KU98VFSXHb-r-2wYQ.mft (raw, json)
Hash identifier:          bU4XQ8bt+of+iAuMW8mRmNHb51h8iw2P9hlbiYYeZLQ=
Subject key identifier:   53:D0:A8:FB:9F:8C:16:DD:14:91:02:48:24:0E:A8:64:5F:96:71:97
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Certificate issuer:       /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial:       019E1D90D5707487291D43EA7BA07AC2F6C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
Manifest number:          140D
Signing time:             Tue 12 May 2026 19:01:31 +0000
Manifest this update:     Tue 12 May 2026 19:01:31 +0000
Manifest next update:     Wed 13 May 2026 19:01:31 +0000
Files and hashes:         1: 1fBlyL23j_KU98VFSXHb-r-2wYQ.crl (hash: LNJnCFb+wguqEHvmG2yDTGRNn6VPMCTUgwWixOd5X7I=)
                          2: L-k_SL_s92jHONTQ4_qtQMQ0hCo.roa (hash: Ktu7W01HQP3w+NwclsoGu7pxp+ATVr6cehyCqENMhvY=)
                          3: OyDJxa-IKI9M6DEab_QdT2ZiPxM.roa (hash: TllnG1yiPkW1Kik3L852N3VXwGZ/qaH7M72QCj3GUaE=)
                          4: UZ7ePce2V0p3ZbzWXJ1ZgbnwDMQ.roa (hash: 3DbxDok/x0GzcOvaTUOPhPb4K0GtiOZj5rAjknMwnN0=)
                          5: d1jX94cFd3tk-Hm1ODBJTQjIun8.roa (hash: oZLsTmKqfymcNdDKMx79yAPIQPeIgqvN0Dz2E55v24c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:d5:70:74:87:29:1d:43:ea:7b:a0:7a:c2:f6:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
        Validity
            Not Before: May 12 19:01:31 2026 GMT
            Not After : May 13 19:01:31 2026 GMT
        Subject: CN=53d0a8fb9f8c16dd14910248240ea8645f967197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:00:00:70:71:e5:32:e5:28:6c:65:3b:64:49:
                    75:2b:59:37:01:a7:8d:5f:dc:2d:57:00:61:af:40:
                    01:8e:d4:d0:c2:67:ba:3f:7c:f8:58:ce:37:6d:0a:
                    d8:f6:f3:66:b8:37:9a:bf:3f:6f:c9:7c:b8:4b:b8:
                    20:00:09:42:d0:19:55:7c:f3:f9:c6:d9:fc:17:2d:
                    2f:c5:4c:9c:50:0e:40:60:33:73:73:df:f1:d2:41:
                    ff:e4:71:bf:75:44:02:39:2b:1b:a3:90:ed:6f:9d:
                    d5:b3:7c:c8:a1:31:6b:7e:c3:aa:16:cb:db:5b:83:
                    bc:3f:eb:dc:fc:d1:da:a9:97:a2:9b:55:04:af:4c:
                    cc:52:d2:d5:04:f9:9a:be:2d:cf:93:25:75:7f:57:
                    72:3a:7c:bc:b3:81:6c:23:84:87:ff:2f:69:66:af:
                    24:08:21:cf:a6:c7:86:c4:7c:29:b7:bc:9a:39:bf:
                    e6:e4:6e:fc:01:28:e9:2a:3b:6b:81:71:38:fd:73:
                    4a:65:84:74:5b:a5:cc:3b:a1:85:1a:1d:db:a5:c7:
                    89:f7:ea:1d:30:00:0b:b8:c3:1a:f6:24:66:c6:58:
                    d8:b2:9b:73:73:bd:3e:e6:af:dd:23:f2:d8:de:24:
                    a6:e7:53:c2:5c:ef:0b:2a:08:d4:8c:b6:db:e8:e3:
                    d3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D0:A8:FB:9F:8C:16:DD:14:91:02:48:24:0E:A8:64:5F:96:71:97
            X509v3 Authority Key Identifier:
                keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:f6:2e:30:c3:8f:6a:7f:f5:65:9d:90:20:4e:0a:ba:e8:2c:
         c5:c2:18:f3:16:a8:47:65:95:f8:1f:aa:17:9a:46:d2:62:25:
         e0:d2:0a:7d:73:aa:b5:27:79:dc:5c:ef:49:21:3e:ee:24:c5:
         fb:91:64:33:c2:a8:8b:db:b3:51:bd:ac:e8:39:42:ad:bd:3e:
         78:95:29:49:4c:35:ea:8a:95:66:40:8f:fd:25:33:57:b9:d9:
         53:ef:9a:de:af:ce:c7:1f:5a:46:5b:b6:66:63:5b:13:ea:f5:
         3e:1d:71:b2:4e:18:65:91:ce:a8:06:b9:34:ac:25:5c:9f:49:
         22:7e:f6:c4:c6:5d:ca:8a:ea:73:4b:6c:e3:43:7f:9c:7a:3a:
         6f:4d:ec:10:d9:7c:58:00:19:2c:e1:4d:45:61:c6:31:64:d3:
         7a:6c:0e:3b:b7:bc:eb:0d:88:50:ea:0b:81:b6:b7:e0:d6:f9:
         6b:28:22:e9:d9:38:db:54:c5:47:42:71:b2:d0:d6:6b:48:82:
         16:64:8e:ff:d4:56:12:26:ea:2e:13:99:7f:e2:df:b4:20:29:
         e1:02:fc:9a:cb:cb:82:ff:80:5d:b5:71:38:4e:0b:f8:1c:98:
         40:c5:e1:3c:76:54:e5:8a:51:c7:59:f2:a0:35:56:2e:94:74:
         a9:05:df:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:43:56 2026 by rpki-client