Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
File:                     V3zTsjkfRybBqonV7T0ECCMlI1U.mft (raw, json)
Hash identifier:          h07rTgA994Vn9xct+5F09S4Oz99C/zu7miINCvRHqnQ=
Subject key identifier:   B1:C4:FB:E0:02:6D:7C:2C:9F:6A:7A:E6:DF:E1:20:B9:5B:77:12:12
Authority key identifier: 57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55
Certificate issuer:       /CN=577cd3b2391f4726c1aa89d5ed3d040823252355
Certificate serial:       019E1EA37E3AE3A05ED0F3C008E13D8BCDBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
Manifest number:          0477
Signing time:             Wed 13 May 2026 00:01:31 +0000
Manifest this update:     Wed 13 May 2026 00:01:31 +0000
Manifest next update:     Thu 14 May 2026 00:01:31 +0000
Files and hashes:         1: V3zTsjkfRybBqonV7T0ECCMlI1U.crl (hash: Yn1wxfSK62kdp4Pm0ugV6HU20kyKS7uw7tz5q4gxzDM=)
                          2: X4f6FdUM7-oxmTPyJDPnSjOJQjc.roa (hash: G+8NGrdkwPv6Os9FA75QeRzjamvnyvobATUloFoNoiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:7e:3a:e3:a0:5e:d0:f3:c0:08:e1:3d:8b:cd:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577cd3b2391f4726c1aa89d5ed3d040823252355
        Validity
            Not Before: May 13 00:01:31 2026 GMT
            Not After : May 14 00:01:31 2026 GMT
        Subject: CN=b1c4fbe0026d7c2c9f6a7ae6dfe120b95b771212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:32:1e:34:0a:62:cb:92:ae:07:9d:e5:c5:c0:
                    10:59:97:43:34:70:fe:55:4e:01:87:5c:ef:fb:e4:
                    ed:38:3d:70:54:62:8e:25:bb:de:d1:97:d3:67:a3:
                    3d:4f:34:d5:6f:8d:f4:e5:62:a2:bf:f4:80:88:55:
                    3a:b3:63:ed:3a:b3:c8:68:00:70:e9:34:a9:a6:43:
                    84:ea:f3:cb:97:50:fa:89:45:15:de:25:75:4b:2c:
                    50:86:bd:50:65:13:1e:dd:69:c6:b5:d8:30:5d:df:
                    54:21:b9:95:ab:2d:a7:b9:44:08:a3:6e:b7:d5:7d:
                    d3:24:ab:5a:d4:94:b7:26:d8:5d:04:2a:f3:b3:5d:
                    b4:6e:25:e3:ba:4c:02:a8:fd:a0:e4:07:f5:d4:38:
                    3c:97:11:a3:5f:78:6f:f1:63:8c:b8:09:a0:15:34:
                    9d:63:a5:36:f8:08:4d:06:fe:7d:53:5b:b1:dd:0f:
                    43:c1:14:be:29:8a:80:41:94:40:57:40:87:75:16:
                    af:86:fd:10:37:4a:16:1e:24:e8:b9:db:a8:fa:b4:
                    c4:14:0c:e6:1d:05:75:5c:9d:59:80:70:1e:7e:87:
                    bf:94:fd:70:bb:27:88:d5:cf:63:7f:b0:d2:4e:39:
                    e9:e6:b9:32:dd:80:cd:8a:50:5a:44:52:4c:5a:f9:
                    59:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C4:FB:E0:02:6D:7C:2C:9F:6A:7A:E6:DF:E1:20:B9:5B:77:12:12
            X509v3 Authority Key Identifier:
                keyid:57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:3d:e8:ac:f2:9c:86:c2:a3:1c:b9:d5:18:b3:96:de:c5:14:
         91:c7:36:be:77:1f:d8:f9:5f:f5:5f:c9:31:38:a8:81:a3:f5:
         b6:3d:8a:e1:6e:f5:ce:57:8c:26:4a:d4:84:1b:83:40:32:b9:
         18:21:ee:5c:be:ea:12:f8:ab:17:38:54:08:1e:6c:c5:e6:a5:
         17:c3:e9:e6:d8:d5:01:a3:06:4c:0a:d4:e6:a1:01:2e:48:25:
         62:4c:e4:c6:e6:f4:a4:f5:3c:24:d3:e1:5c:62:40:8b:69:74:
         e2:ac:2d:e0:90:5a:f4:ab:17:e4:b7:20:a1:df:b9:2e:52:2b:
         ec:e7:ec:90:77:3c:90:10:a0:ce:7b:ef:a6:5c:58:c9:cd:6d:
         0a:97:27:37:58:34:3b:dd:04:b9:2e:0b:88:1d:4a:57:f9:58:
         8a:0b:e9:33:ca:4f:2d:fe:ec:90:ac:e3:10:d4:97:45:c5:bd:
         3c:16:7c:a0:74:3c:b8:90:6b:40:2b:2f:e7:c4:60:ad:0c:e5:
         eb:bc:54:88:c0:e8:78:e4:ec:7f:43:d4:ac:cb:b7:ee:a9:c6:
         72:7c:37:e6:76:8d:91:58:ba:c5:26:f9:c0:27:9a:44:d7:59:
         3a:bd:b7:5b:e6:e6:d2:c8:a4:45:f1:f3:30:2c:67:c8:d7:3d:
         77:57:99:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:18:03 2026 by rpki-client