Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
File:                     0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft (raw, json)
Hash identifier:          rPclt/1tfJP3zkAInBub24tGjaqKtj24cQ/ZnmfbXpQ=
Subject key identifier:   45:C1:63:1A:96:2D:75:96:4F:A2:FA:11:2D:5C:07:4B:A0:5A:20:06
Authority key identifier: D0:5E:D7:A5:81:47:AA:51:4C:8E:6D:AF:BC:C5:D8:75:7C:7D:32:72
Certificate issuer:       /CN=d05ed7a58147aa514c8e6dafbcc5d8757c7d3272
Certificate serial:       019E1CB4B6EE7E4FF35E1530215C76DDC15F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
Manifest number:          03F5
Signing time:             Tue 12 May 2026 15:01:05 +0000
Manifest this update:     Tue 12 May 2026 15:01:05 +0000
Manifest next update:     Wed 13 May 2026 15:01:05 +0000
Files and hashes:         1: 0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl (hash: mmJWL5k+d1nqPjfgi/r1ORZoXargqWh+1syPjE8ZsNk=)
                          2: RRSohk2nwrUzuw9Rw-D24vHj4iw.roa (hash: cMUbM2/hxrn9h126Zdm7DYzjZuRiajCmosfkit3vk8Y=)
                          3: c0Owme8MxYD620tsBpkMHThjdrE.roa (hash: Gh6CiZ1DobVHlOo0S4vuXYLdOtBEQiYqATFSpfC1Cik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:b6:ee:7e:4f:f3:5e:15:30:21:5c:76:dd:c1:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d05ed7a58147aa514c8e6dafbcc5d8757c7d3272
        Validity
            Not Before: May 12 15:01:05 2026 GMT
            Not After : May 13 15:01:05 2026 GMT
        Subject: CN=45c1631a962d75964fa2fa112d5c074ba05a2006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d4:64:8f:54:d8:5f:b0:ef:e6:4c:25:e2:8f:
                    66:9f:77:f5:c0:1e:6c:d5:cf:28:5a:19:59:da:34:
                    81:b7:12:d4:42:9b:4a:a8:f8:bb:b5:7e:99:4e:be:
                    a3:56:00:a1:ac:b3:8e:74:71:d1:21:95:2b:3e:32:
                    73:2f:7e:8d:8c:db:03:ab:ac:66:d0:e8:4a:b5:bf:
                    06:7a:53:fe:f5:48:d2:b7:e4:db:cc:e0:fd:d8:5d:
                    32:4e:46:1d:b8:9b:77:14:4d:27:e0:3e:be:2c:2f:
                    0e:78:51:b2:65:b9:e7:ca:ad:c8:4b:ee:a6:c4:fb:
                    4d:ca:86:fe:46:e9:4d:5c:2e:0a:44:fe:40:b6:41:
                    9f:fe:87:6f:36:70:be:15:63:a9:42:e3:40:22:82:
                    dc:8d:9a:3f:40:bd:30:c5:b6:4b:22:2e:d8:fd:41:
                    95:7a:10:82:d0:71:38:ec:dd:0e:8a:02:a4:c9:22:
                    d3:2c:17:85:d1:9a:b4:81:ae:40:69:85:84:f8:d2:
                    07:aa:53:50:b8:4e:22:15:ef:9e:ff:8f:d8:31:d5:
                    aa:b0:81:82:c9:09:5d:76:bd:95:9e:e5:78:6e:da:
                    ee:2b:cf:01:b0:64:5a:44:4a:ef:ad:24:24:a7:7f:
                    2e:3d:03:d7:c1:50:2a:55:93:86:39:58:47:e7:2f:
                    47:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C1:63:1A:96:2D:75:96:4F:A2:FA:11:2D:5C:07:4B:A0:5A:20:06
            X509v3 Authority Key Identifier:
                keyid:D0:5E:D7:A5:81:47:AA:51:4C:8E:6D:AF:BC:C5:D8:75:7C:7D:32:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:e2:5c:a8:22:6b:c4:f2:4e:80:10:4d:44:01:60:2a:83:f8:
         52:58:bd:c9:f5:2c:f4:19:45:70:e2:89:8f:03:a4:da:1c:a8:
         34:0c:9a:38:23:ee:3e:05:33:24:50:d9:a8:71:84:47:d1:6d:
         d7:fd:49:ec:e4:ab:e8:09:8f:cd:17:ee:08:33:3b:35:ac:5d:
         09:9f:40:89:f2:1c:dc:43:db:9e:02:89:b5:e8:5b:11:67:d1:
         09:2c:f4:b7:9b:ee:94:db:f5:a1:3b:39:08:bf:46:9f:b2:2c:
         c0:2e:88:9d:52:36:c1:97:fe:b7:38:99:75:9b:48:01:40:9b:
         1a:d4:1d:e9:38:04:fd:2a:ca:df:7b:4d:51:df:10:e5:02:74:
         fe:bc:49:f5:6b:d6:95:45:1a:4c:a6:4c:be:1d:e7:68:0f:d9:
         92:80:57:c0:12:3a:cb:c5:ad:df:03:60:22:8d:df:a1:c2:4d:
         63:a2:82:7d:92:48:16:b3:47:00:21:cf:e3:59:99:d4:05:d7:
         49:8f:02:65:c9:a8:5a:8c:9e:49:fd:bf:cd:74:6c:a2:e3:ba:
         d9:13:2f:0f:37:93:4a:39:cd:15:ac:dd:46:51:f3:70:2a:25:
         74:00:18:25:ff:66:9d:2d:a6:db:ad:95:fb:2c:95:87:2f:9b:
         33:5e:36:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:30:13 2026 by rpki-client