Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
File:                     4rRpKpKR8sZ7VswV2k0xASAjAXc.mft (raw, json)
Hash identifier:          SE6hZCVioAqXRszMOLNh03jaTNQCOUaxcEpjBgxDDpM=
Subject key identifier:   85:93:66:FC:7F:50:EE:73:20:97:C4:3B:47:15:F4:C6:72:8B:B8:14
Authority key identifier: E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77
Certificate issuer:       /CN=e2b4692a9291f2c67b56cc15da4d310120230177
Certificate serial:       019E1E35412ED1093B3177A117FBA3D97156
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
Manifest number:          056A
Signing time:             Tue 12 May 2026 22:01:06 +0000
Manifest this update:     Tue 12 May 2026 22:01:06 +0000
Manifest next update:     Wed 13 May 2026 22:01:06 +0000
Files and hashes:         1: 4rRpKpKR8sZ7VswV2k0xASAjAXc.crl (hash: zFOWfidXlKwSYZxFQYWqS6vbCtNXdPmK9NyBHCm2WL8=)
                          2: lmDwmz-GtyiaNLLugK40qWh_h8s.roa (hash: v9wEGxooeJNf+ZcLBoaKH/aJqtCxaC4olgQz9drbKc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:41:2e:d1:09:3b:31:77:a1:17:fb:a3:d9:71:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2b4692a9291f2c67b56cc15da4d310120230177
        Validity
            Not Before: May 12 22:01:06 2026 GMT
            Not After : May 13 22:01:06 2026 GMT
        Subject: CN=859366fc7f50ee732097c43b4715f4c6728bb814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c7:20:6f:f8:c0:86:77:54:f6:fc:39:f5:4d:
                    b7:20:80:33:46:20:13:bd:8d:80:e2:5c:3a:8f:41:
                    7a:0a:ff:91:06:d5:e9:1c:d4:7e:98:3b:ab:5c:95:
                    11:e9:d6:f0:c7:2b:02:a6:52:b7:d5:84:6d:a9:98:
                    5f:e8:4b:95:90:04:b1:6d:9a:20:6d:5e:c9:ef:94:
                    c2:cf:b1:93:c3:7a:03:ac:d5:e4:14:2e:2e:eb:23:
                    54:25:65:3c:00:26:d1:aa:32:67:aa:f4:e6:99:30:
                    82:ff:9c:e9:2e:ed:5d:7a:76:42:bd:dd:5f:fd:a6:
                    15:55:22:87:a5:97:b5:5d:58:f1:6e:85:e3:4f:50:
                    ac:26:28:96:25:a7:59:7d:c1:1f:a3:59:cd:3e:b1:
                    27:70:01:66:3b:05:af:28:42:7b:6c:9f:f6:a5:fc:
                    8d:98:6b:54:6e:63:53:d4:de:d0:8b:0a:d1:51:8d:
                    0f:7b:a6:db:84:2a:51:e7:28:87:05:b9:00:ca:cd:
                    78:81:ea:0e:54:26:1d:40:ca:de:61:e8:9d:96:68:
                    98:2c:94:96:79:55:7e:2b:8f:29:28:62:59:23:6b:
                    ee:71:93:d9:a8:06:8b:e4:fc:03:03:9b:85:2b:7d:
                    25:cb:83:3b:96:7c:8c:3d:81:cc:cf:8c:ed:68:c1:
                    d0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:93:66:FC:7F:50:EE:73:20:97:C4:3B:47:15:F4:C6:72:8B:B8:14
            X509v3 Authority Key Identifier:
                keyid:E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:eb:5c:4e:51:a4:07:99:76:68:0b:00:51:67:e9:fe:7f:ec:
         36:a3:16:c5:4f:e5:05:11:92:44:d6:fb:d5:98:da:7c:2f:65:
         70:56:15:b8:94:8e:32:dd:1e:59:ec:f6:0b:0d:90:7e:09:02:
         3d:5c:cd:b3:77:8b:f3:9f:2c:a0:e7:89:6f:ab:d1:98:f7:af:
         d8:86:92:ef:3b:04:12:7f:cd:b8:0c:f4:46:37:97:1d:e4:78:
         93:59:f9:e8:3f:9f:b8:31:a0:bf:84:73:97:d7:14:c8:01:70:
         27:88:67:47:30:fd:8f:40:96:d6:a4:f7:5d:fd:76:8e:32:0c:
         7e:22:87:c8:7e:1b:f4:61:31:d6:07:52:11:0e:61:ce:17:85:
         b6:95:82:fb:69:f2:d8:48:7b:dd:65:c4:c0:cc:f9:b4:b8:a6:
         24:6e:13:7a:6f:d9:f5:79:c4:f8:b1:1e:77:88:3b:67:a8:54:
         dd:94:23:ca:63:a0:fd:c4:92:2d:37:d9:5e:65:7f:e3:e9:24:
         91:02:03:e4:72:18:05:98:59:69:5c:09:4c:54:74:3a:83:ea:
         1c:27:3b:df:19:6f:66:f5:71:3c:98:65:54:bd:78:a2:13:cc:
         75:84:14:c0:73:2b:e7:66:3e:e4:9c:c4:d0:f6:01:63:34:d1:
         72:42:0b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:22:24 2026 by rpki-client