Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
File:                     mPArXPtBclCOBze_Jc1dIqAdxFo.mft (raw, json)
Hash identifier:          gYon/iwLx9ZhEHP751Lhmm9IULlCSpppejVAPVeqOQ8=
Subject key identifier:   1E:21:5F:27:52:EF:4F:93:6D:C5:60:81:D3:E6:C3:E7:23:78:73:0E
Authority key identifier: 98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A
Certificate issuer:       /CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a
Certificate serial:       019E1FED237B6BFBC4AC17FABB90B53FECC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
Manifest number:          0A37
Signing time:             Wed 13 May 2026 06:01:35 +0000
Manifest this update:     Wed 13 May 2026 06:01:35 +0000
Manifest next update:     Thu 14 May 2026 06:01:35 +0000
Files and hashes:         1: Kch5YnfnliI8NHiCA07xVEbQzV4.roa (hash: 6jE9VEbDYjIrbBsLXEa9CMfNyqfSxGZFUWK682Q2o9I=)
                          2: mPArXPtBclCOBze_Jc1dIqAdxFo.crl (hash: P8V9EZ1hzW995/hecg/DgR5+7SWhLiz+TVwIZ0/2Qp4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ed:23:7b:6b:fb:c4:ac:17:fa:bb:90:b5:3f:ec:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a
        Validity
            Not Before: May 13 06:01:35 2026 GMT
            Not After : May 14 06:01:35 2026 GMT
        Subject: CN=1e215f2752ef4f936dc56081d3e6c3e72378730e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5d:55:1a:89:25:a5:b5:d7:df:42:99:01:e2:
                    fd:96:fa:d1:04:09:48:30:8f:26:ff:34:bd:91:3c:
                    6f:e5:ee:13:57:62:3e:ef:b3:f8:6f:86:0c:17:99:
                    e4:60:8e:e8:bb:40:aa:08:6c:77:c3:76:67:a8:e1:
                    2b:72:57:f3:e1:24:87:48:d4:ab:d2:71:91:be:9c:
                    89:1a:84:58:4e:2c:37:02:7b:e7:ef:f8:2d:5f:93:
                    d2:e5:e6:f2:67:6a:ae:95:6d:66:11:46:b9:4c:6a:
                    28:4a:8c:56:a8:37:9e:bc:c6:d6:9c:d6:24:ae:14:
                    63:9f:76:45:72:33:86:0a:03:4a:e5:69:d1:0b:30:
                    dd:8c:66:18:da:35:25:43:75:d0:62:5c:99:73:e6:
                    e2:38:af:fd:77:52:30:be:e8:60:03:1d:1d:e1:32:
                    03:21:17:2e:d0:db:3b:48:e6:32:e6:cd:f9:34:0d:
                    29:b5:56:a5:ac:f5:e0:c5:d7:64:52:92:f0:5f:94:
                    76:f4:b4:27:ef:ca:c3:e9:d9:cc:85:28:62:dc:cc:
                    83:fe:f1:b3:f0:4a:bc:8b:2b:40:f4:bd:31:fc:eb:
                    84:ec:f7:df:17:ce:a3:67:d5:0e:1d:aa:45:54:82:
                    d4:d2:a9:5e:5d:80:df:80:18:a0:dc:03:6b:48:fe:
                    fb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:21:5F:27:52:EF:4F:93:6D:C5:60:81:D3:E6:C3:E7:23:78:73:0E
            X509v3 Authority Key Identifier:
                keyid:98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:06:4e:ac:be:f0:45:38:26:70:87:e6:f4:13:20:07:e9:e1:
         81:9f:bc:29:a5:d4:c8:a7:67:67:01:02:38:72:80:3d:b5:8e:
         7b:a9:97:2f:60:a1:51:f1:af:7a:b3:05:c8:66:be:b4:62:44:
         0d:2a:c4:6a:29:83:ef:b3:86:20:76:d3:55:96:04:c3:71:dd:
         43:68:a9:ea:45:f0:82:8e:4a:fd:75:5e:13:b1:4b:23:ee:e8:
         44:28:8e:93:27:9f:3d:c5:d3:97:5d:fe:8f:ad:8a:92:3f:77:
         cb:14:51:89:ea:3d:47:7c:8a:11:b3:a4:6d:67:04:eb:bf:fc:
         69:27:0f:0e:d1:98:4e:8f:2f:25:e4:79:25:f9:9a:8f:3c:22:
         0f:d8:b8:66:62:ff:3f:25:cd:11:5a:a9:c8:b0:8d:92:4d:db:
         99:c2:f8:56:49:16:ed:32:8b:94:62:de:3c:a1:62:0e:63:31:
         7a:44:cc:4b:0a:6c:70:2f:53:94:53:d0:f3:ed:ce:b6:ee:60:
         f2:26:1d:54:65:7a:70:2d:9e:82:13:9a:f6:a7:37:51:54:f7:
         c1:82:65:89:b5:a0:8a:de:08:58:d3:01:d9:97:f5:d9:86:f1:
         6e:06:92:c4:97:b6:38:49:9d:0a:bd:25:f1:b8:15:ba:42:f2:
         bf:14:2a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:34:36 2026 by rpki-client