Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
File:                     SdhmPTuWngJTom1UJb7hxdRDs2E.mft (raw, json)
Hash identifier:          rxHelEX478PUT1ngK2r0Ys57NURgBiNSE0j8tyfWxsM=
Subject key identifier:   51:AE:A3:3F:DE:E5:93:17:DA:04:55:8F:81:A8:FD:A8:5F:3F:46:E7
Authority key identifier: 49:D8:66:3D:3B:96:9E:02:53:A2:6D:54:25:BE:E1:C5:D4:43:B3:61
Certificate issuer:       /CN=49d8663d3b969e0253a26d5425bee1c5d443b361
Certificate serial:       019E1EA32386C538D61A303D7FBF88811930
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
Manifest number:          0A65
Signing time:             Wed 13 May 2026 00:01:08 +0000
Manifest this update:     Wed 13 May 2026 00:01:08 +0000
Manifest next update:     Thu 14 May 2026 00:01:08 +0000
Files and hashes:         1: SdhmPTuWngJTom1UJb7hxdRDs2E.crl (hash: l6aO46DzVH92V7LI30sG7lbF8IJ7MarvIlqfhIdsu2w=)
                          2: ss_i7POqldkDP31KMdlVrzarBdE.roa (hash: WvsAUlRR+NRLn32GVVcoWQROpDNnn7tmpssNx6BwiVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:23:86:c5:38:d6:1a:30:3d:7f:bf:88:81:19:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d8663d3b969e0253a26d5425bee1c5d443b361
        Validity
            Not Before: May 13 00:01:08 2026 GMT
            Not After : May 14 00:01:08 2026 GMT
        Subject: CN=51aea33fdee59317da04558f81a8fda85f3f46e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:53:5c:ea:92:b4:5b:99:be:d5:da:13:3b:71:
                    fd:21:cf:d5:1c:1a:d8:84:b3:75:72:aa:b0:41:5b:
                    32:32:cf:66:77:2c:25:9a:cc:c3:46:86:24:eb:50:
                    6d:f3:02:af:5f:ac:c0:4a:a3:e4:a4:ad:39:3c:e3:
                    05:9f:79:e2:5d:5a:b1:b9:20:05:cf:fb:ce:79:eb:
                    08:b0:84:3b:01:74:97:67:f3:2a:e4:bd:2a:0a:f4:
                    0f:99:dc:14:ad:d5:44:21:e4:3b:d8:9e:7b:ce:9d:
                    d4:63:77:47:41:da:69:c1:f6:2b:6e:0c:7c:cb:03:
                    fd:34:95:6b:e8:5d:65:1b:23:a8:f9:75:53:60:07:
                    b8:36:fc:6b:0e:17:c4:a9:20:9c:16:5c:08:3e:15:
                    2f:3e:80:09:07:c5:28:aa:48:7b:4b:f3:89:59:14:
                    64:d4:6a:33:30:21:f6:77:c8:7d:a8:23:b5:5a:fa:
                    c5:d6:f9:d6:71:ae:12:06:08:54:48:e6:aa:82:5a:
                    94:60:a9:98:a1:cd:69:16:19:26:6a:2a:df:c4:57:
                    7f:c6:45:31:c9:5a:56:59:96:6a:81:fa:2e:e0:51:
                    7c:23:44:32:16:97:ba:a9:8f:f2:f5:3e:cd:5d:c1:
                    e2:d2:fb:ed:4d:a2:db:bf:3c:26:29:e6:93:70:2b:
                    99:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AE:A3:3F:DE:E5:93:17:DA:04:55:8F:81:A8:FD:A8:5F:3F:46:E7
            X509v3 Authority Key Identifier:
                keyid:49:D8:66:3D:3B:96:9E:02:53:A2:6D:54:25:BE:E1:C5:D4:43:B3:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ba:a5:e5:94:dc:2b:84:80:af:fd:a1:ff:50:b5:35:a5:63:
         d8:97:52:a7:3e:76:cd:a3:5b:a2:ff:2e:7d:38:ce:ca:b2:21:
         97:b9:b6:a0:b7:88:b9:25:e5:38:84:c7:5d:e8:63:9f:1a:e2:
         13:3f:c3:bd:ef:6b:e9:2f:81:0a:7a:f3:17:b8:63:18:f1:59:
         59:3a:eb:5e:d7:43:e8:31:26:81:79:1c:c6:0c:8b:61:df:c6:
         74:49:f5:15:e8:85:8e:2d:25:9a:41:c3:86:ce:ee:83:cd:2f:
         8d:b5:ac:13:81:16:33:b6:0f:31:65:4d:27:b9:cb:0c:da:2c:
         a4:ec:b2:5b:4d:9f:c0:9a:74:fd:f1:7a:8e:4f:bf:cb:3e:79:
         a5:2b:55:2b:61:f5:ce:89:89:9a:e6:d3:96:8a:81:d5:b8:3d:
         df:fc:b8:83:14:50:cb:0c:8b:66:f0:79:9e:f0:0c:98:dd:52:
         9d:34:9e:81:06:af:7f:f2:a9:87:cb:ea:3f:e0:7c:b7:6c:4f:
         5b:89:82:d1:6f:07:4b:0a:8d:8c:45:dc:37:7f:14:05:ff:f3:
         5a:be:de:23:10:11:03:e8:c1:ed:1a:c7:d8:27:a5:6c:e0:0b:
         07:f8:86:23:a3:31:55:d8:84:9b:e3:5c:65:3b:9c:1d:a4:72:
         20:35:49:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:49:49 2026 by rpki-client