Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
File:                     5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft (raw, json)
Hash identifier:          ltoQWEvW/V9vXLd5Fzj5QEPhy7v5ygwyDkFChrD/JVM=
Subject key identifier:   1C:62:E6:D4:C7:35:6B:0C:4E:41:66:21:33:00:94:82:23:16:F0:A1
Authority key identifier: E4:39:57:DE:BA:81:6C:96:00:CE:0A:4D:07:FC:A7:D3:06:EF:EE:61
Certificate issuer:       /CN=e43957deba816c9600ce0a4d07fca7d306efee61
Certificate serial:       019E1C0FA7CA44FADA7C26AB44F055139A32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
Manifest number:          03BB
Signing time:             Tue 12 May 2026 12:00:48 +0000
Manifest this update:     Tue 12 May 2026 12:00:48 +0000
Manifest next update:     Wed 13 May 2026 12:00:48 +0000
Files and hashes:         1: 5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl (hash: fXj56SKo7OKu2810zVhJU7tvRryKDDgLEi7XM/mgLtA=)
                          2: jXP7E3ZhCPS-nhI96RhyBYQFCsE.roa (hash: TPYf0iiW2OcHHUnh4b/qsDWeDvydotieDoi8cPyorB4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:0f:a7:ca:44:fa:da:7c:26:ab:44:f0:55:13:9a:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e43957deba816c9600ce0a4d07fca7d306efee61
        Validity
            Not Before: May 12 12:00:48 2026 GMT
            Not After : May 13 12:00:48 2026 GMT
        Subject: CN=1c62e6d4c7356b0c4e416621330094822316f0a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8d:f1:6e:c2:4a:6f:e5:75:a7:0d:02:c7:5a:
                    85:67:11:dc:fb:37:92:61:7e:54:56:14:9f:3c:3c:
                    61:d5:0c:75:8f:d8:72:c6:e8:80:e5:fa:33:95:90:
                    d9:3a:5b:01:37:6f:dc:4f:07:81:97:0f:15:f6:15:
                    d4:4e:9b:73:ae:5b:84:05:37:94:ff:eb:67:f8:16:
                    e9:c2:f4:28:58:48:2a:c8:d6:39:56:c6:fa:93:59:
                    01:24:61:d7:bb:9a:e9:76:ee:74:5f:fb:9a:95:b6:
                    77:67:d9:b6:20:d1:9a:de:a5:5d:f1:bf:4f:22:a3:
                    66:f8:bf:5a:44:75:8a:9e:6a:76:05:ca:7c:fc:85:
                    20:a3:51:03:02:7d:f0:bf:e1:4b:a7:44:eb:eb:f0:
                    fd:b2:f9:63:f4:6e:e7:a5:fb:ef:d0:d4:58:7a:f7:
                    50:7f:06:5e:17:73:bb:79:3a:0b:9b:68:1d:f8:b2:
                    d5:85:3c:2b:54:70:d2:c2:93:a8:2e:fa:8d:85:05:
                    3e:07:1d:91:43:9f:59:9e:83:68:32:73:fe:d5:72:
                    ae:43:95:51:a3:41:4d:f1:e3:a3:3d:64:a6:db:4c:
                    4a:48:05:bb:3f:b3:a9:02:ce:41:a9:1e:2c:20:5a:
                    a9:9b:18:45:0b:e9:63:47:af:96:43:de:9e:36:5d:
                    e1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:62:E6:D4:C7:35:6B:0C:4E:41:66:21:33:00:94:82:23:16:F0:A1
            X509v3 Authority Key Identifier:
                keyid:E4:39:57:DE:BA:81:6C:96:00:CE:0A:4D:07:FC:A7:D3:06:EF:EE:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:88:ea:13:52:31:1b:84:aa:1b:72:dd:d7:f4:25:6d:79:b2:
         b8:9e:d6:9d:e8:c0:ce:c3:8e:46:2e:c3:54:0d:5b:e8:62:aa:
         da:99:7a:37:44:3a:bc:89:a8:91:55:39:63:fd:6c:25:cc:ac:
         a8:c4:5f:71:e8:44:bc:44:63:02:85:cb:0b:ba:5b:48:dc:f1:
         2a:28:14:2a:22:e0:2b:4a:a1:6a:98:27:2b:5b:1a:bd:69:72:
         2d:4b:34:24:4e:b6:f1:e0:fe:1a:ea:5f:cc:cb:e7:ce:de:dc:
         0f:d5:02:98:4c:76:a3:17:38:62:40:1e:ca:f0:72:19:1c:bb:
         19:10:f6:df:20:ed:d8:e6:00:35:20:23:51:9d:36:5a:2f:09:
         31:31:5b:0d:e8:36:28:c6:e4:ec:a3:05:d3:84:38:2d:22:2f:
         bd:07:6b:96:34:ab:0d:95:6b:8a:74:4d:28:7c:c8:72:6d:85:
         49:ae:41:97:b5:b4:73:91:04:38:08:60:4a:aa:13:dc:aa:b8:
         53:08:30:89:22:d6:6f:dc:9f:74:cd:cb:9f:22:99:32:8c:c5:
         7d:25:0c:d9:9c:64:ba:59:b7:b1:c6:c9:27:4c:d2:40:33:76:
         ef:bb:0b:35:ae:70:04:8e:cf:87:ed:77:f3:42:28:24:6d:13:
         1c:1c:cd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:04 2026 by rpki-client