Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.mft
File:                     rFxTEhWE19himH8m_3vtWuE4FqE.mft (raw, json)
Hash identifier:          dmKBBm4Tz2pJWwOFUOhSfCQR6aiUB8xhH+o5ZFeP7yg=
Subject key identifier:   22:CC:64:31:50:66:C7:D6:58:D1:63:C6:DD:9D:EC:88:C5:10:E3:29
Authority key identifier: AC:5C:53:12:15:84:D7:D8:62:98:7F:26:FF:7B:ED:5A:E1:38:16:A1
Certificate issuer:       /CN=ac5c53121584d7d862987f26ff7bed5ae13816a1
Certificate serial:       019E1ED9E1D78EA7BDC9896691D0DCB2A5F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rFxTEhWE19himH8m_3vtWuE4FqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.mft
Manifest number:          02CC
Signing time:             Wed 13 May 2026 01:00:56 +0000
Manifest this update:     Wed 13 May 2026 01:00:56 +0000
Manifest next update:     Thu 14 May 2026 01:00:56 +0000
Files and hashes:         1: Ln3OJ6zDWx7Blw5HCll4po4CH-M.roa (hash: BZd7Kwg87H/bospWBtm/c29GcUHDV3xSrqHEL2bm8Hg=)
                          2: rFxTEhWE19himH8m_3vtWuE4FqE.crl (hash: IANFDVR/7JQKKlr35l48PbFv7askeiT5yajWd/P7Rcc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rFxTEhWE19himH8m_3vtWuE4FqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:e1:d7:8e:a7:bd:c9:89:66:91:d0:dc:b2:a5:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac5c53121584d7d862987f26ff7bed5ae13816a1
        Validity
            Not Before: May 13 01:00:56 2026 GMT
            Not After : May 14 01:00:56 2026 GMT
        Subject: CN=22cc64315066c7d658d163c6dd9dec88c510e329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:73:3c:27:e0:c3:43:a1:2a:75:16:b3:9c:36:
                    9d:02:6f:d2:bf:c2:81:9b:de:46:98:2f:fc:b1:1a:
                    7b:46:9f:63:19:2e:e9:20:96:ff:fe:f0:f5:2f:f7:
                    12:18:8e:03:42:1c:f7:43:a1:5a:f4:b7:33:e9:d0:
                    d4:07:65:15:29:43:6a:b7:e6:2f:84:77:92:f6:cf:
                    7d:07:b8:1a:02:12:44:56:92:83:fe:21:2d:5c:d9:
                    0b:ee:e8:72:79:f4:dd:cc:43:ab:53:b9:e4:b7:8d:
                    cf:5c:fe:6c:ef:03:cd:ce:88:72:0b:d2:db:a9:3d:
                    7e:2a:ee:36:5b:5c:d7:1e:dd:92:0b:14:93:f1:c1:
                    17:a9:71:31:42:eb:55:91:a9:ff:08:60:df:3c:38:
                    16:4d:8a:28:90:6c:e5:b3:15:6d:1b:03:b6:42:7d:
                    e4:9c:a3:bc:2c:56:8c:2f:e1:4e:49:9b:72:a6:d9:
                    d5:56:5a:3d:38:65:94:39:f9:c9:d6:93:49:88:3d:
                    4e:9e:e0:01:4a:f1:81:bc:70:6e:35:62:cd:82:a0:
                    b9:f9:99:80:d1:79:29:e3:a4:03:94:45:a7:48:89:
                    f5:30:04:1f:bd:81:2e:b6:00:45:48:05:e8:cc:a2:
                    54:25:32:76:6e:ca:59:86:b1:f1:26:bb:08:a4:e3:
                    e6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:CC:64:31:50:66:C7:D6:58:D1:63:C6:DD:9D:EC:88:C5:10:E3:29
            X509v3 Authority Key Identifier:
                keyid:AC:5C:53:12:15:84:D7:D8:62:98:7F:26:FF:7B:ED:5A:E1:38:16:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFxTEhWE19himH8m_3vtWuE4FqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:93:65:29:4e:65:ab:4e:75:b1:d1:29:18:05:e3:e6:8f:9f:
         03:96:9d:ed:e1:c7:e6:d3:5f:fc:aa:7e:2a:dd:12:70:3e:e9:
         d1:10:a3:29:c3:36:9a:d4:0f:5a:c7:9c:f3:8a:de:cd:95:bb:
         e1:49:ea:53:88:71:10:ef:85:8e:52:43:a8:b8:43:74:9c:88:
         e6:43:2f:1a:3a:fa:9b:80:09:8f:6d:40:6c:25:a6:f3:f0:ed:
         34:e8:d9:cd:33:a1:1f:ea:8b:86:47:0d:dd:49:03:07:09:3e:
         81:d6:5e:03:ca:9c:06:30:11:ba:1e:f9:da:1b:d6:f8:6f:1a:
         ac:17:50:92:a1:a0:76:41:86:4f:e1:c5:06:da:36:38:f0:bb:
         39:bd:cd:c7:34:ae:0d:2a:43:c4:4b:d9:f9:24:44:eb:aa:f1:
         f2:24:37:c8:87:5b:24:09:46:b8:35:70:64:e0:6d:f0:2d:33:
         8a:b4:18:50:7d:3f:5a:c8:cc:92:56:cf:fc:4c:de:c4:13:55:
         30:d1:c2:af:c8:0b:5f:ed:67:9a:c4:68:91:e5:1f:a4:d8:ee:
         2e:5a:66:2b:a6:a0:4e:16:b2:38:16:fa:7e:73:1b:1e:d0:c1:
         c2:79:60:30:98:6a:c8:d5:1b:48:5d:34:79:69:67:11:ec:eb:
         a5:42:8e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:35:07 2026 by rpki-client