Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
File:                     9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft (raw, json)
Hash identifier:          bJqrVgk/oNUC/2o8/96M1ECT8l+D5Vqn8Vj2OeSMIwM=
Subject key identifier:   69:41:40:9B:98:30:4B:C7:F7:C6:19:CE:7A:9B:0C:8F:36:57:56:E2
Authority key identifier: F5:87:71:25:85:94:7D:C5:51:9A:A8:6E:0B:D1:F4:35:DF:52:B5:EE
Certificate issuer:       /CN=f587712585947dc5519aa86e0bd1f435df52b5ee
Certificate serial:       019E1D90120F1AF7B7BBF2F6E78B458DC4E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
Manifest number:          053A
Signing time:             Tue 12 May 2026 19:00:41 +0000
Manifest this update:     Tue 12 May 2026 19:00:41 +0000
Manifest next update:     Wed 13 May 2026 19:00:41 +0000
Files and hashes:         1: 9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl (hash: L5BF7IoAj9RvF9YGKhwEsAhSVdWL+YFFSHrAnenLW8k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:12:0f:1a:f7:b7:bb:f2:f6:e7:8b:45:8d:c4:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f587712585947dc5519aa86e0bd1f435df52b5ee
        Validity
            Not Before: May 12 19:00:41 2026 GMT
            Not After : May 13 19:00:41 2026 GMT
        Subject: CN=6941409b98304bc7f7c619ce7a9b0c8f365756e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f0:8d:a0:5b:55:a8:cf:20:54:3b:2d:a0:47:
                    f5:42:86:86:fc:9b:cb:2f:ba:53:5d:e8:8f:c0:1d:
                    1c:8f:38:4f:35:54:3d:02:a7:4b:34:4f:c3:cb:c1:
                    84:33:c1:84:8a:7b:55:99:7c:0d:5c:27:50:19:6c:
                    48:b5:26:e8:44:3e:cc:c0:78:a6:bd:ea:de:33:26:
                    15:ef:e3:fd:e6:6e:25:5e:04:ab:db:4b:6c:a4:ab:
                    70:5a:81:9a:54:3d:28:4e:98:2a:01:0d:ba:40:ed:
                    46:ef:6a:d6:bf:8f:8f:ea:5b:a3:d7:60:90:dc:1f:
                    ff:7e:43:50:f3:9c:af:50:70:9c:60:e6:5a:56:b2:
                    18:12:c7:b0:1c:9f:2a:d2:53:77:9c:be:bb:e3:c2:
                    d6:a7:96:49:25:63:a5:6f:ba:89:33:94:2e:c5:cc:
                    ec:c3:d1:51:47:ed:af:78:46:4a:65:f7:33:78:a7:
                    c2:16:35:dd:41:56:b3:72:66:73:e9:77:4d:85:8a:
                    69:9e:2b:a2:e8:c1:c5:70:e8:2b:65:7b:9b:72:81:
                    e5:90:58:29:bb:01:cd:5e:2c:56:3c:53:4c:56:ea:
                    65:8e:05:fa:a7:01:ac:83:c4:b6:17:ac:ef:65:0f:
                    61:23:64:52:23:d2:5c:ba:58:33:97:01:e3:37:57:
                    f8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:41:40:9B:98:30:4B:C7:F7:C6:19:CE:7A:9B:0C:8F:36:57:56:E2
            X509v3 Authority Key Identifier:
                keyid:F5:87:71:25:85:94:7D:C5:51:9A:A8:6E:0B:D1:F4:35:DF:52:B5:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:9b:56:87:d6:37:e7:e4:69:29:64:45:c0:5b:6b:66:38:a5:
         ec:8a:12:78:4e:bc:e1:90:87:a5:ed:d1:5a:77:96:95:99:76:
         67:e5:e7:43:af:6d:b2:ca:8d:87:8d:97:2c:ee:ee:5c:ae:ff:
         cc:9a:22:6b:b9:75:39:9c:fc:38:b4:63:f1:44:e2:99:4e:98:
         6c:68:1f:3f:ca:19:f1:0a:22:7f:93:43:71:bb:72:71:b8:9c:
         99:73:c2:4f:72:3a:8a:d9:84:60:93:b2:14:7f:61:3a:27:73:
         75:b6:e3:41:60:30:fe:00:6b:c8:10:69:79:ff:0c:39:08:9d:
         28:92:c8:7b:30:84:a6:a9:9e:71:cd:cc:1e:2a:e3:5c:7d:5f:
         34:ea:cf:0a:4a:b6:e4:8e:43:51:6b:84:17:15:90:36:50:31:
         9b:b0:58:8a:40:01:64:b0:45:a7:b3:45:84:d1:a5:3a:69:be:
         87:6e:50:16:20:6c:d1:a5:a6:fd:0d:bd:1c:87:84:00:88:34:
         35:38:9e:5d:f0:e9:9e:3f:a8:22:6a:9d:55:24:a5:69:3b:ee:
         76:e5:b2:ca:21:29:d1:fe:ab:a5:fa:f6:a1:e6:69:4d:51:7a:
         28:e1:63:95:7f:8e:da:30:8e:57:d0:e2:9c:ee:c2:2a:7f:04:
         3b:9c:e7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:33:31 2026 by rpki-client