Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/1264da-04d7-40ea-8ae1-e96c64d2451f/1/42THc_ePWKQYAxOiJl7eYmpO3o8.mft
File:                     42THc_ePWKQYAxOiJl7eYmpO3o8.mft (raw, json)
Hash identifier:          Hpnm8parqXpUl6wr4UqOPH6BK705eY7+4Lt3XpqZzLY=
Subject key identifier:   56:52:69:71:CB:FE:72:E3:E0:BD:E0:EB:81:9A:7F:47:53:10:60:F3
Authority key identifier: E3:64:C7:73:F7:8F:58:A4:18:03:13:A2:26:5E:DE:62:6A:4E:DE:8F
Certificate issuer:       /CN=e364c773f78f58a4180313a2265ede626a4ede8f
Certificate serial:       019E1C46C11F2EF5898651BDBABA1047F765
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/42THc_ePWKQYAxOiJl7eYmpO3o8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/1264da-04d7-40ea-8ae1-e96c64d2451f/1/42THc_ePWKQYAxOiJl7eYmpO3o8.mft
Manifest number:          0155
Signing time:             Tue 12 May 2026 13:00:59 +0000
Manifest this update:     Tue 12 May 2026 13:00:59 +0000
Manifest next update:     Wed 13 May 2026 13:00:59 +0000
Files and hashes:         1: 42THc_ePWKQYAxOiJl7eYmpO3o8.crl (hash: PMRWoCPBZot5d5Vpg4hfWGvQ744WmNHiv49et8XnCkc=)
                          2: JEiEOpBmU1uH_8AmrDoyELuwAj0.roa (hash: 8utU4M2KV5mtQMT6I9Tf1TNzyzqi7bmjgO8ePSDyuYs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/1264da-04d7-40ea-8ae1-e96c64d2451f/1/42THc_ePWKQYAxOiJl7eYmpO3o8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/1264da-04d7-40ea-8ae1-e96c64d2451f/1/42THc_ePWKQYAxOiJl7eYmpO3o8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/42THc_ePWKQYAxOiJl7eYmpO3o8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:46:c1:1f:2e:f5:89:86:51:bd:ba:ba:10:47:f7:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e364c773f78f58a4180313a2265ede626a4ede8f
        Validity
            Not Before: May 12 13:00:59 2026 GMT
            Not After : May 13 13:00:59 2026 GMT
        Subject: CN=56526971cbfe72e3e0bde0eb819a7f47531060f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cb:68:77:5e:8e:42:2a:37:4b:b6:6b:9f:e3:
                    64:da:e8:bb:06:32:b4:13:07:bc:ce:eb:ca:b8:dc:
                    cf:5d:f7:bd:be:55:7c:1a:ae:97:24:08:ee:3f:79:
                    4d:a8:4b:0a:92:72:ed:84:94:7e:08:b1:e4:0c:f9:
                    82:5e:62:ef:62:c3:b0:3f:f6:6f:91:9d:52:a9:34:
                    0e:96:74:be:dc:0e:f5:6f:f9:f6:7c:67:fb:ee:cd:
                    46:dd:48:e0:96:cc:70:53:19:86:3c:44:78:44:88:
                    26:fa:7a:18:0b:56:b0:6c:69:fa:66:7a:0d:b1:aa:
                    78:59:2b:ff:b1:1e:ed:63:20:f4:9c:99:62:d1:3b:
                    8b:db:a8:23:a6:64:1a:d0:46:88:2c:72:a5:3a:fb:
                    97:00:e8:11:79:67:ea:a2:84:ff:d1:43:fa:86:e1:
                    99:f4:ee:77:d0:d0:3b:5b:3e:b3:f9:27:f6:38:d9:
                    4c:63:c0:fb:9d:60:4f:d0:f2:8f:f1:23:b3:59:b1:
                    b3:a0:b6:67:bf:4e:48:aa:0d:ee:b4:d9:b5:e9:cd:
                    63:2b:dc:59:23:90:e2:d0:92:c0:82:3f:ff:5c:ea:
                    6c:5f:e4:a9:05:53:91:8c:3b:f3:b5:08:fa:ec:14:
                    ad:52:d0:75:82:b6:93:d8:fb:0e:bb:db:43:e8:00:
                    03:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:52:69:71:CB:FE:72:E3:E0:BD:E0:EB:81:9A:7F:47:53:10:60:F3
            X509v3 Authority Key Identifier:
                keyid:E3:64:C7:73:F7:8F:58:A4:18:03:13:A2:26:5E:DE:62:6A:4E:DE:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42THc_ePWKQYAxOiJl7eYmpO3o8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/1264da-04d7-40ea-8ae1-e96c64d2451f/1/42THc_ePWKQYAxOiJl7eYmpO3o8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/1264da-04d7-40ea-8ae1-e96c64d2451f/1/42THc_ePWKQYAxOiJl7eYmpO3o8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:43:55:c4:60:fc:ab:63:03:53:93:f1:a8:5d:83:b0:24:4f:
         81:e5:b3:e9:e5:2b:a2:22:8e:61:50:eb:13:e8:8e:d4:be:41:
         2a:93:8d:91:4b:82:d1:ee:ba:7e:dd:96:71:66:ae:ac:9c:47:
         22:bb:0e:5b:44:c9:27:4f:1e:03:4e:6c:78:08:02:ff:c6:78:
         ca:03:c0:46:fe:91:25:38:63:b3:9e:6c:28:57:a8:7c:c7:41:
         22:7f:a7:7c:af:32:4f:4c:f6:d1:c4:15:ec:f5:ee:cf:d3:44:
         b3:ac:fa:1e:ab:0b:48:a8:de:d8:6f:b2:bc:0c:7b:a1:6c:07:
         14:16:49:9f:d6:96:57:c4:7f:4c:c2:bb:a8:f8:34:72:d1:c7:
         0d:a6:83:2a:30:96:e4:72:93:a0:65:10:47:6c:71:63:3c:fb:
         4e:0e:c1:87:cf:29:d1:81:56:e2:75:c7:f5:b3:63:4b:68:d9:
         00:0a:00:86:ea:51:b6:c6:7a:fa:07:5b:f6:9c:77:e8:86:9c:
         1f:6a:b5:49:91:79:6f:d6:ee:6b:18:03:16:ac:16:c6:9e:cd:
         f9:b1:13:fe:21:07:2b:c1:58:d8:02:42:c1:a8:ab:14:5f:c7:
         a5:2b:18:d6:8d:ab:41:df:70:60:f0:dd:4d:36:42:d1:4e:4c:
         2e:37:c8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:08:26 2026 by rpki-client