Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
File:                     cQUbDizppMnmEh6YPRZf6rh-w1Q.mft (raw, json)
Hash identifier:          RLtIwwPn8gDqVBnjiNLLNQTynL/D7Jcn27xlZ/1CdWU=
Subject key identifier:   36:D8:F5:69:A8:E3:D1:55:85:16:8D:65:B8:7D:99:62:38:0F:7C:18
Authority key identifier: 71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
Certificate issuer:       /CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Certificate serial:       019E1FED3666CDDBAE76308258FF59FBF3D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
Manifest number:          129D
Signing time:             Wed 13 May 2026 06:01:39 +0000
Manifest this update:     Wed 13 May 2026 06:01:39 +0000
Manifest next update:     Thu 14 May 2026 06:01:39 +0000
Files and hashes:         1: 5HKPTePj8fMVOPruXg3CGjpYfBI.roa (hash: wJlvHXRl4ES/+26PUI+1bZ8cgmanlQgp2ib+ElfT+Hk=)
                          2: StTmr8X0Ztg2Fzom2DO1s4HRJ5k.roa (hash: ByVhRdCqJLu1JdsaujozowtcN3r+tlHqhV772GdmWjU=)
                          3: WY6pvsgJR7LRmk_zcT_H6lPiyNM.roa (hash: s9khrceBdwiskxC2l1lsQTmPFSMRENlWQQ8ETb/4LxA=)
                          4: cQUbDizppMnmEh6YPRZf6rh-w1Q.crl (hash: wCd6BNxjaCWxkkXuS3DPh5RILYRdJjN2ia+S5EVJdc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ed:36:66:cd:db:ae:76:30:82:58:ff:59:fb:f3:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
        Validity
            Not Before: May 13 06:01:39 2026 GMT
            Not After : May 14 06:01:39 2026 GMT
        Subject: CN=36d8f569a8e3d15585168d65b87d9962380f7c18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5e:03:4a:cd:68:75:3b:ce:20:76:8a:23:b2:
                    41:8b:5e:8e:77:af:cb:f4:a3:f7:75:0a:da:5d:a0:
                    bf:d3:dd:c6:98:d6:66:f8:d1:cd:b6:88:cf:b6:d0:
                    b9:bf:89:22:38:60:cb:8b:c1:55:6f:fa:24:36:8e:
                    eb:8c:50:96:15:ed:4c:9e:5c:b1:66:37:72:b8:4c:
                    df:c9:c6:e0:99:2c:a7:cb:50:44:17:c9:3c:bb:f6:
                    19:9b:b0:03:87:13:f3:6f:23:56:d6:cf:f9:c0:6d:
                    c8:9f:78:b4:d0:99:47:88:06:aa:01:de:25:4b:af:
                    d6:77:07:66:03:30:a4:a6:5d:ff:55:76:63:46:e1:
                    f7:11:6f:c3:69:95:ef:0d:02:2e:5c:6f:a8:a1:dc:
                    96:3a:17:ca:9f:ab:fd:d2:30:fb:e9:45:dc:79:a0:
                    3c:bf:af:37:34:e1:be:94:82:b6:44:00:b5:ee:86:
                    39:10:3d:67:a2:3a:3d:8c:ff:43:b6:d2:67:01:35:
                    8b:5b:13:72:d0:c5:ac:8a:30:2a:97:44:7e:b2:55:
                    50:a9:63:60:7f:a3:3f:42:9d:d8:83:d2:40:7e:73:
                    ea:99:7d:52:2b:8d:32:aa:1c:ca:66:3f:40:9e:43:
                    f3:e4:50:65:ad:b1:76:1a:8f:99:bf:4a:0a:15:3f:
                    e9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D8:F5:69:A8:E3:D1:55:85:16:8D:65:B8:7D:99:62:38:0F:7C:18
            X509v3 Authority Key Identifier:
                keyid:71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:c4:0c:81:ee:fe:07:a2:3b:c4:47:ca:d9:33:4d:04:cd:7f:
         8b:69:df:c6:15:01:68:b7:56:48:c0:9b:50:ba:59:7b:b1:a9:
         b6:47:f4:a1:0b:7e:f2:ef:9c:22:da:05:49:4b:4d:47:b5:08:
         06:33:18:57:d3:cc:08:41:01:a3:f3:bf:f3:16:c4:12:56:f1:
         23:50:df:ab:4b:5a:b0:1b:57:3d:ae:1f:66:70:95:e2:19:ff:
         40:ca:01:87:c5:8b:b2:41:39:7f:74:7e:0d:94:f4:96:95:ff:
         8e:df:2c:2c:e4:ad:d2:08:f9:be:53:f7:5b:66:6c:b5:4f:ac:
         f9:76:46:60:31:60:97:96:d5:5c:c7:d1:62:fd:60:3e:7a:3f:
         39:74:b1:6a:b8:fb:ce:aa:9e:64:33:46:d0:f9:54:af:dd:5d:
         ef:e1:1d:95:86:1b:d6:f7:a6:d4:54:3d:c8:44:a1:d4:19:1a:
         6f:49:bd:02:03:4b:cc:de:cc:fb:14:e9:20:d7:5c:f5:a2:1a:
         b1:35:5c:76:84:92:6b:5a:63:65:48:f3:a7:b5:2a:05:1d:89:
         af:6a:48:f3:98:1b:e3:67:41:ea:70:7f:b9:be:8b:c8:2f:9a:
         ea:d8:57:c8:24:a3:74:64:97:23:55:b6:a6:a1:e8:ca:46:41:
         33:45:8c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:26:40 2026 by rpki-client