Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
File:                     M29qyC9vKOPT5bZkdVlNgxjnWrM.mft (raw, json)
Hash identifier:          yDchgCry5Z+dKE3dt2j+T3aXNcm5B2509ePgsWMmzfA=
Subject key identifier:   5B:B0:24:B8:11:CC:23:8C:DA:6D:BD:1A:E1:F7:A8:67:A8:7A:FE:50
Authority key identifier: 33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
Certificate issuer:       /CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Certificate serial:       019E21A3BB99434C2B78B1B44C653FDC70DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
Manifest number:          10C4
Signing time:             Wed 13 May 2026 14:00:38 +0000
Manifest this update:     Wed 13 May 2026 14:00:38 +0000
Manifest next update:     Thu 14 May 2026 14:00:38 +0000
Files and hashes:         1: M29qyC9vKOPT5bZkdVlNgxjnWrM.crl (hash: dAdEUeLDEWdBTEssSrSWcgpCxj7l2E7L4bqn6lv3rUo=)
                          2: dspttiokyRWTJ0EiYPb4T9i6tOw.roa (hash: QWCGmY5jOfRv55kAj8L2RUox3IsinGCno3NGv/5yToo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 14:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:21:a3:bb:99:43:4c:2b:78:b1:b4:4c:65:3f:dc:70:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
        Validity
            Not Before: May 13 14:00:38 2026 GMT
            Not After : May 14 14:00:38 2026 GMT
        Subject: CN=5bb024b811cc238cda6dbd1ae1f7a867a87afe50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b8:cd:27:63:53:ab:9f:2b:cd:f6:23:b3:6b:
                    97:c4:eb:c0:8c:31:15:08:c1:b4:82:b2:68:6f:9b:
                    3b:db:52:36:c8:2f:68:4b:e8:78:cf:38:13:44:29:
                    f6:9b:56:fd:c1:a9:c8:42:3e:16:1a:f4:f5:58:f6:
                    6c:87:9d:63:65:0d:dc:49:60:f5:c6:16:e6:a8:a6:
                    93:6e:55:df:a7:0d:c3:f8:c0:e3:24:12:3f:95:69:
                    4d:7d:e2:bf:e4:27:04:d1:5a:79:4a:83:8a:26:44:
                    84:20:e1:32:47:8a:8d:1c:b8:ae:d2:97:2d:13:54:
                    5b:fb:5f:e4:40:da:15:29:00:85:c4:11:16:2d:30:
                    41:4c:10:cd:b8:da:20:2a:0f:76:93:ec:77:87:6f:
                    14:0c:f0:8b:88:96:04:fd:8f:b1:80:d2:cc:cb:87:
                    ea:c3:c0:d9:98:3a:20:ed:33:58:1f:57:ab:1c:02:
                    5f:44:49:e5:16:57:65:81:70:0e:20:3d:2a:18:b4:
                    a0:b1:4e:12:d7:77:87:88:6e:8a:ff:0b:e5:b5:0c:
                    17:d0:52:52:f9:0e:45:35:26:01:45:c2:f8:fd:e0:
                    13:ac:ff:5e:51:c3:d9:08:7d:63:9f:5c:75:88:fa:
                    f4:a7:c1:da:24:37:71:a5:ba:47:12:f7:ab:0d:d6:
                    13:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B0:24:B8:11:CC:23:8C:DA:6D:BD:1A:E1:F7:A8:67:A8:7A:FE:50
            X509v3 Authority Key Identifier:
                keyid:33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:93:8b:99:8b:27:ec:e1:87:eb:b1:b9:76:1c:de:dd:3e:83:
         11:bf:20:25:e5:b4:7e:71:eb:68:d8:86:0c:02:2f:7f:99:4a:
         2d:9f:3f:48:a6:d2:e7:1b:cd:00:13:18:c2:ee:d6:d0:a3:79:
         ce:41:bf:df:78:df:28:78:8c:a0:dc:df:cd:6a:31:c1:15:49:
         27:69:f5:aa:ae:e4:e1:8a:3c:73:42:79:da:6b:9e:38:92:92:
         aa:c3:f9:5e:48:98:5a:4b:1e:63:4b:ff:13:bc:38:1b:d0:9f:
         e1:3f:cf:11:dd:9d:f9:01:d2:a1:68:94:33:0b:c2:ce:cd:b0:
         86:16:e4:92:14:24:b2:d8:54:57:88:5e:17:d2:d6:61:6f:16:
         ca:b4:a1:61:2b:66:23:e0:e4:34:e9:39:37:cb:fa:23:ad:bd:
         19:b1:6d:8f:e3:2f:e9:b4:47:50:9d:c5:65:6a:a0:1b:dc:59:
         c3:19:c7:a4:ff:5e:b2:ef:25:52:96:b9:43:55:47:95:2e:7f:
         f1:8f:51:2c:60:34:62:0e:50:02:e8:9d:56:74:70:bf:15:22:
         5b:5c:8c:55:b6:e4:e7:8d:3c:a2:6c:66:75:9d:cd:43:a0:7e:
         b2:38:53:1d:f1:ae:80:d7:52:c6:ff:46:cb:bd:83:af:61:aa:
         66:91:fd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:12:52 2026 by rpki-client