Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft
File:                     r-us3hVZeiga4rspMG3E2m3Pt14.mft (raw, json)
Hash identifier:          oSVXVV1HdP9bqtM90hC+w7EReBoylaFgj3QCYBq6yUY=
Subject key identifier:   10:13:4C:4D:5E:57:70:F2:D7:9D:B2:6E:17:8A:53:ED:AA:E9:60:F0
Authority key identifier: AF:EB:AC:DE:15:59:7A:28:1A:E2:BB:29:30:6D:C4:DA:6D:CF:B7:5E
Certificate issuer:       /CN=afebacde15597a281ae2bb29306dc4da6dcfb75e
Certificate serial:       019E1D90903BCD570C4CF7BFD00C64796045
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-us3hVZeiga4rspMG3E2m3Pt14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft
Manifest number:          011B
Signing time:             Tue 12 May 2026 19:01:13 +0000
Manifest this update:     Tue 12 May 2026 19:01:13 +0000
Manifest next update:     Wed 13 May 2026 19:01:13 +0000
Files and hashes:         1: jdSx0T-sdrzr500OOr7Atdy3Z4E.asa (hash: nbjDNb/jtcCfwpceFtypmGiC8RlKHHL0LGrtqS6ZCo8=)
                          2: r-us3hVZeiga4rspMG3E2m3Pt14.crl (hash: P1Hu5I2MuGM3ZONpu/roFqJaGfTnHYAJ6dfLEZh32KM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r-us3hVZeiga4rspMG3E2m3Pt14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:90:3b:cd:57:0c:4c:f7:bf:d0:0c:64:79:60:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afebacde15597a281ae2bb29306dc4da6dcfb75e
        Validity
            Not Before: May 12 19:01:13 2026 GMT
            Not After : May 13 19:01:13 2026 GMT
        Subject: CN=10134c4d5e5770f2d79db26e178a53edaae960f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0c:6c:22:0e:ad:51:e8:eb:93:33:cf:08:de:
                    43:ba:54:b7:87:19:31:73:62:ff:5f:ad:27:4f:98:
                    fc:a4:3a:cd:8d:a4:7e:e5:e4:02:a2:c5:21:c7:54:
                    bc:c7:a9:0b:5b:87:24:e1:00:d3:be:51:2d:30:e3:
                    5b:f0:8c:fb:f4:d7:da:6c:bf:94:61:70:74:4f:26:
                    f6:fd:8a:61:72:4b:dd:77:de:f2:bb:33:af:0d:cd:
                    ee:8a:8e:0c:56:ac:5c:10:63:1e:49:f6:72:73:47:
                    1d:56:cd:79:46:a3:07:36:f1:ea:2c:e0:39:8c:c8:
                    8d:61:cd:26:54:0f:5e:27:97:31:1b:cb:93:69:81:
                    49:b3:e8:e8:54:62:99:7d:f3:3a:b0:45:13:c9:90:
                    e7:c1:8d:02:52:6e:db:60:7d:c7:75:e9:a0:cb:42:
                    e0:92:b8:ae:a0:da:00:f2:c3:5d:0d:46:82:86:8f:
                    7e:8b:be:a7:21:e8:f2:9e:00:22:e6:f4:de:00:cf:
                    ef:08:60:a6:3e:aa:04:e3:42:85:b4:b9:96:f7:2c:
                    d6:c4:8a:20:6d:fc:9b:06:88:1c:f6:3b:78:2c:1a:
                    d0:ec:31:67:b9:63:cc:fd:2b:fe:99:ac:b3:ce:ac:
                    3d:5a:e4:79:90:3c:fe:c6:5b:10:d2:6b:b2:02:39:
                    0c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:13:4C:4D:5E:57:70:F2:D7:9D:B2:6E:17:8A:53:ED:AA:E9:60:F0
            X509v3 Authority Key Identifier:
                keyid:AF:EB:AC:DE:15:59:7A:28:1A:E2:BB:29:30:6D:C4:DA:6D:CF:B7:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-us3hVZeiga4rspMG3E2m3Pt14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:52:3e:27:f1:c7:a4:e8:23:73:5c:79:c6:6c:a1:67:f0:b7:
         bb:17:f5:5e:a1:4b:f5:c0:2e:7f:e7:06:e7:e5:9b:0d:84:4f:
         ff:db:4e:67:d6:e7:b9:f8:87:52:94:b5:7d:61:1d:38:ac:d6:
         d8:24:60:d8:f3:2b:4d:ae:e5:ab:30:77:38:c6:39:09:3e:34:
         b1:53:cd:fc:da:f0:81:e3:28:92:3b:d9:ea:0f:38:5c:2f:68:
         d5:60:d8:d2:54:9e:3e:7f:c0:cb:f2:60:a5:39:f3:1c:4d:08:
         aa:51:d3:1b:20:30:dc:75:c5:1f:2d:91:c1:cf:5c:50:bb:29:
         94:ae:f8:9d:c7:f2:33:9e:0d:42:64:1e:4f:2d:6d:8e:3d:78:
         36:6d:6a:13:39:4e:ba:ad:fd:91:06:a4:c2:80:b7:f0:38:0c:
         a6:47:18:86:4e:17:db:d2:56:af:9d:7e:d1:9e:29:f4:9d:14:
         7b:7c:3f:69:3b:43:b5:75:2a:a6:b4:7d:8c:04:c6:62:e8:9f:
         09:15:01:f1:b2:db:cf:15:76:00:50:a1:1a:27:25:ff:56:98:
         e6:5c:7d:93:2c:42:32:7c:a9:3d:3f:ca:07:4d:67:f8:bc:97:
         d9:69:cb:fc:3e:c6:88:08:e3:ce:c7:0d:18:bd:08:03:69:01:
         9b:8c:6f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:07 2026 by rpki-client