Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.mft
File:                     e2nv5gFvctRZLxsLq5GGR2_zop0.mft (raw, json)
Hash identifier:          SGjTA8X6cixfHoBlGP8eHyFM85QRe5YMNa8/utjnMeM=
Subject key identifier:   0A:87:D2:5D:C6:7C:47:3E:C6:F6:D9:8F:83:1A:C5:78:6C:A2:88:CE
Authority key identifier: 7B:69:EF:E6:01:6F:72:D4:59:2F:1B:0B:AB:91:86:47:6F:F3:A2:9D
Certificate issuer:       /CN=7b69efe6016f72d4592f1b0bab9186476ff3a29d
Certificate serial:       019E1D597590D01645E723FE846E0F4E1076
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e2nv5gFvctRZLxsLq5GGR2_zop0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.mft
Manifest number:          0115
Signing time:             Tue 12 May 2026 18:01:02 +0000
Manifest this update:     Tue 12 May 2026 18:01:02 +0000
Manifest next update:     Wed 13 May 2026 18:01:02 +0000
Files and hashes:         1: DhhEzrCSvtlaHslOfzFqY95aZ90.roa (hash: VOvJoF9EWNuxMkJTKQzWpsIdU1FWWr51hxl56iJSfuY=)
                          2: ICKL-vNS4Ve2n8KrobzVtvKP7a8.roa (hash: KJYnqYyOofOZzadxEkB/wfQ8LlG+IKUvm99MnwqJGO4=)
                          3: X1S1z6CrzJkdF4dCeCm-se-s4J8.roa (hash: Y5udF7iCsk7tkEh52H+ceEwvOnXrZWaMJVMZZgF25Vw=)
                          4: e2nv5gFvctRZLxsLq5GGR2_zop0.crl (hash: 6OYU2ZUtnBnzUTVn539mGgSYQmfp8GwCiylRY6c4lVA=)
                          5: oNyVV9F-UayJsBNMERK1JiJ0D7o.roa (hash: k7jOjhLjlTb4tvt1HZS9xHgB6yHXR3vwiFuwHTGcB/0=)
                          6: pwN-2lFR66jS8tzjgg4a5hQ9SZc.roa (hash: vx5holsz8fk1dc3w+YKiWzzSNZ1ZzCCUAaCQLnUJmIY=)
                          7: r23QCb42Tz1gHCNmFF9MYh0kkS0.roa (hash: ULoM0qs6keKyvA3e5JZk0wAwuCLfnphbYK3aR4+GSfE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e2nv5gFvctRZLxsLq5GGR2_zop0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:75:90:d0:16:45:e7:23:fe:84:6e:0f:4e:10:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b69efe6016f72d4592f1b0bab9186476ff3a29d
        Validity
            Not Before: May 12 18:01:02 2026 GMT
            Not After : May 13 18:01:02 2026 GMT
        Subject: CN=0a87d25dc67c473ec6f6d98f831ac5786ca288ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f2:77:ea:6b:71:ca:b7:2c:6f:95:fd:56:f9:
                    83:6f:6d:eb:08:4b:5a:12:78:6f:8c:54:74:85:16:
                    d6:93:c3:86:c8:01:8d:38:39:60:53:9b:a0:a8:39:
                    ca:69:15:99:58:aa:42:7f:25:a3:aa:1b:4d:2f:b1:
                    98:33:fc:52:e0:4c:08:60:0e:72:a4:a4:01:d6:8c:
                    3f:de:9d:28:5e:f6:de:92:b2:db:a2:10:ac:04:bf:
                    7b:fb:09:ed:79:74:24:c5:51:73:1e:ea:ed:89:d2:
                    6f:35:77:f1:35:a5:0a:9e:f3:1b:b1:86:c8:6a:55:
                    2b:09:90:f4:99:78:03:8a:fa:ba:93:c3:29:2e:1b:
                    2c:32:f7:77:02:08:c3:b2:3e:87:ff:a7:e2:d6:d4:
                    e3:f3:66:72:57:60:10:16:7a:a0:a6:b0:62:ee:99:
                    7f:1c:1f:93:de:d9:11:da:6c:74:e5:ca:2f:37:f9:
                    9e:ae:08:56:26:91:1e:b9:b2:08:7e:49:d1:56:75:
                    05:1a:28:65:33:8a:a4:06:65:7c:31:6f:fb:82:31:
                    1f:f4:3a:14:40:20:8e:88:af:8c:ec:1c:4c:1d:2b:
                    c5:d4:bf:de:fe:76:49:cc:39:1a:72:3a:aa:dd:62:
                    9c:05:96:16:8f:93:b8:61:17:05:99:17:5e:b6:a5:
                    98:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:87:D2:5D:C6:7C:47:3E:C6:F6:D9:8F:83:1A:C5:78:6C:A2:88:CE
            X509v3 Authority Key Identifier:
                keyid:7B:69:EF:E6:01:6F:72:D4:59:2F:1B:0B:AB:91:86:47:6F:F3:A2:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2nv5gFvctRZLxsLq5GGR2_zop0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:94:4d:81:59:40:b0:57:a4:d0:8d:89:b5:56:38:32:c5:85:
         cd:80:f9:17:f9:32:34:0f:7a:7e:13:e8:42:dd:c4:58:2a:8f:
         cc:5a:d9:88:09:29:43:d4:c0:f6:99:eb:4c:72:a3:20:2c:9b:
         4f:a6:dc:1e:e7:ec:bd:f5:6d:d6:d8:98:c1:a8:27:d8:23:08:
         3c:36:2c:e0:6b:6c:0f:6b:4e:73:e5:63:4f:aa:0d:75:82:a9:
         fe:8d:3f:b3:9d:df:de:26:11:d1:c2:f1:be:3a:a2:e2:e0:c9:
         d9:71:6f:ce:27:c9:df:cb:f4:d5:46:6f:32:c8:f2:3c:f0:cb:
         0b:1f:89:a2:7d:ad:3b:88:65:ed:60:e6:b7:cb:93:d7:96:cf:
         d3:d0:61:4d:df:ad:fb:e8:7a:00:a6:ce:37:95:18:c3:8e:cd:
         38:1a:e4:f6:19:f9:60:a5:a4:8f:f5:d6:b6:5f:d1:fa:5e:89:
         6a:49:61:14:85:e7:fc:f2:4a:3e:ce:f7:d4:1a:0f:cf:b1:85:
         1e:da:bd:8f:04:41:d1:fc:a6:2c:26:9b:c9:56:95:01:f2:3b:
         08:41:5b:9e:83:51:68:48:72:24:75:c9:99:77:52:87:dd:84:
         7f:ff:05:e7:1e:89:95:d4:d3:94:b7:9c:71:f7:0d:df:6d:f6:
         e5:b4:bc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:33:19 2026 by rpki-client