Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
File:                     _caA7hsnw6bwcBPI_CXr_wxn-50.mft (raw, json)
Hash identifier:          fVaxl0TbleK8kzr6GApNP2ayii/92Lgsl176qrndmC4=
Subject key identifier:   A4:7D:29:63:77:19:2F:B4:2E:73:D9:5C:2C:4D:52:25:0D:83:68:B2
Authority key identifier: FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D
Certificate issuer:       /CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d
Certificate serial:       019E1FECCAEF17ABB8FADA685EDB8E2F2667
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
Manifest number:          0FE8
Signing time:             Wed 13 May 2026 06:01:12 +0000
Manifest this update:     Wed 13 May 2026 06:01:12 +0000
Manifest next update:     Thu 14 May 2026 06:01:12 +0000
Files and hashes:         1: 3quKn702Vi5YqrEVXzFPYc93s0o.roa (hash: Ux1SJ1+gpjARAxZ3o2ImnrNmQoc+jmNEaDOBhy8YXGc=)
                          2: _caA7hsnw6bwcBPI_CXr_wxn-50.crl (hash: gAvyXuQ23+eDERyoAl8uXGtJQVdgh9VmdE/bZ0TlHzc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:ca:ef:17:ab:b8:fa:da:68:5e:db:8e:2f:26:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d
        Validity
            Not Before: May 13 06:01:12 2026 GMT
            Not After : May 14 06:01:12 2026 GMT
        Subject: CN=a47d296377192fb42e73d95c2c4d52250d8368b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fc:6d:0b:59:31:7a:8b:6d:d2:91:b4:e6:c1:
                    1c:99:5c:02:7b:6a:ca:5c:eb:2f:91:ee:4d:84:d6:
                    2b:35:22:7e:ee:7c:92:3d:2a:09:f9:d9:38:00:87:
                    c0:42:08:32:69:0b:14:80:f7:a8:c8:ac:7a:6c:1a:
                    11:06:15:3c:8f:d7:2b:27:c2:5b:18:41:fa:c9:b8:
                    35:b8:33:25:82:b4:83:ce:d5:6f:37:a7:aa:a2:70:
                    c6:57:f0:3b:9b:af:d5:ec:d6:9a:99:76:b0:40:ef:
                    01:42:5a:cb:5f:83:7e:23:8a:df:e3:5d:66:1c:95:
                    9f:f3:fc:d1:17:d2:ce:9f:89:62:8d:f4:56:9c:54:
                    c4:2c:dd:bb:c4:ad:e2:ef:26:a5:51:0a:23:a4:0f:
                    22:22:5d:63:52:de:53:25:d6:a7:2b:77:2d:c3:fe:
                    22:b6:35:d6:38:c3:34:6f:a7:75:e9:73:2d:56:ed:
                    31:3f:f1:45:81:e8:04:bf:03:44:87:5e:bb:31:48:
                    fe:cb:6f:0d:12:0c:b5:fe:b4:ef:a9:5f:b6:98:57:
                    32:e9:17:f1:e0:b5:c7:28:eb:a7:c9:02:da:09:47:
                    68:f9:ad:d2:54:1f:2a:47:51:8e:a0:22:15:22:97:
                    44:99:aa:88:1e:d9:e2:80:e2:3e:ee:13:38:78:9a:
                    49:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:7D:29:63:77:19:2F:B4:2E:73:D9:5C:2C:4D:52:25:0D:83:68:B2
            X509v3 Authority Key Identifier:
                keyid:FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:77:60:c3:9c:46:73:18:02:d0:b0:73:f1:b1:c0:a7:63:a1:
         50:bb:a1:20:13:5f:5b:22:d8:3f:71:75:0b:ef:d3:fb:c7:05:
         9a:e2:a8:bb:d1:49:db:e3:78:ce:5f:35:d7:6d:3a:8e:18:1e:
         22:c0:fa:4e:e9:76:a0:67:c1:1c:8a:b7:30:11:78:32:ac:11:
         0f:c1:80:ff:2e:b4:09:49:98:a5:5c:8b:c4:5e:33:2e:15:30:
         8f:50:77:55:34:f8:9f:5d:8a:a7:c8:63:b3:74:18:03:67:60:
         4e:4d:be:02:d8:3d:48:b6:3b:5d:c0:74:82:2d:c8:11:f5:45:
         50:55:41:e5:a7:21:11:55:ab:89:94:e9:42:6b:2a:48:5a:ce:
         3a:0d:de:55:55:1f:66:0a:6f:64:fd:99:e6:1d:6b:04:3b:33:
         a7:92:9f:75:72:43:9c:14:87:a0:d7:e0:20:6f:19:fc:4d:75:
         bb:b3:86:97:77:71:ca:f2:f3:40:86:32:ac:79:fe:c2:9f:10:
         dd:69:63:d9:d8:15:74:1f:a5:69:e8:1c:e1:ab:22:e7:e9:1e:
         6f:37:47:e2:93:bc:ce:54:20:63:b6:c4:14:78:4c:b9:88:da:
         dc:66:85:88:7d:63:33:a5:c2:f3:70:1b:a9:07:de:2b:4f:26:
         ae:ab:a7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:52:46 2026 by rpki-client