Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
File:                     1F35i-yCdrgrqC2TdgRHukTRoZs.mft (raw, json)
Hash identifier:          MnwjmeZSy6G5wX0rdEE2QD0yUs4oHdyrnHaB490SFqQ=
Subject key identifier:   C5:27:29:75:EF:0B:66:FE:B1:76:CC:37:90:2E:85:55:53:43:7D:05
Authority key identifier: D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B
Certificate issuer:       /CN=d45df98bec8276b82ba82d93760447ba44d1a19b
Certificate serial:       019E1D912C671CAC01489A5CE461E1043C99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
Manifest number:          1183
Signing time:             Tue 12 May 2026 19:01:53 +0000
Manifest this update:     Tue 12 May 2026 19:01:53 +0000
Manifest next update:     Wed 13 May 2026 19:01:53 +0000
Files and hashes:         1: 1F35i-yCdrgrqC2TdgRHukTRoZs.crl (hash: zZ6ezgA8WLecKF+G4mybpA1+uXVy0rPQdjFcNSjZiQA=)
                          2: 7GklmTS1kgrLqQctn4DT3kFkjl4.roa (hash: Y/cbJ7RaqUksuZym4KBRYc+33KcvMmQg7H/jPnBEz7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:91:2c:67:1c:ac:01:48:9a:5c:e4:61:e1:04:3c:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45df98bec8276b82ba82d93760447ba44d1a19b
        Validity
            Not Before: May 12 19:01:53 2026 GMT
            Not After : May 13 19:01:53 2026 GMT
        Subject: CN=c5272975ef0b66feb176cc37902e855553437d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:42:0d:b2:69:cd:be:e3:00:66:07:3d:d2:27:
                    c9:a2:25:40:cd:2f:5d:0f:26:18:c8:4f:3f:ff:36:
                    74:4d:89:26:b8:55:3e:56:e8:2e:cb:ab:05:e3:dd:
                    25:ae:57:74:c4:41:cf:05:31:31:39:85:3c:5f:7c:
                    f5:e8:6c:fb:26:13:ca:85:1a:12:52:a6:70:c4:4e:
                    49:07:3b:ab:1e:5b:f8:47:15:56:e9:7f:35:56:6f:
                    db:4b:df:96:bd:14:e8:48:d2:ec:9a:b4:9d:f1:5d:
                    c1:c6:59:7b:7e:f0:30:fc:0c:82:75:fc:54:5b:c1:
                    89:69:29:e8:08:30:b6:f8:e5:95:c4:53:5c:4e:70:
                    41:6b:12:1f:81:69:0a:5c:7c:73:0e:ea:91:87:6e:
                    ec:16:cd:84:50:c6:bd:c1:06:4e:9a:d5:38:ff:d8:
                    6b:7d:00:4e:64:52:3b:ee:35:58:20:49:2b:0a:96:
                    22:7a:17:0c:98:86:c2:b8:71:9b:2a:10:e9:32:3c:
                    4b:dd:3f:ff:68:7a:ed:b0:43:eb:b8:f5:ed:97:78:
                    b8:5b:ef:0a:78:91:4e:b6:f1:21:c8:1d:ec:90:02:
                    44:7a:70:29:ef:19:cf:cf:f1:c8:73:62:d8:f4:bf:
                    7b:be:36:ff:1b:de:42:86:ae:fa:85:0b:ab:1e:be:
                    fe:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:27:29:75:EF:0B:66:FE:B1:76:CC:37:90:2E:85:55:53:43:7D:05
            X509v3 Authority Key Identifier:
                keyid:D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:da:ac:80:18:bf:bb:dc:9b:54:a4:82:6d:61:93:71:22:03:
         7a:57:22:77:49:a8:b2:08:68:2e:41:e6:6e:c9:a6:95:86:11:
         19:cf:8a:b0:0f:51:14:f9:b2:5b:4d:ef:d6:e9:46:f0:79:2b:
         05:f7:d8:74:30:a6:75:fa:0a:eb:f2:61:e6:fa:db:b7:d0:9b:
         b4:35:83:9c:82:50:f2:82:fb:cf:ca:e6:b3:e6:13:b2:eb:5b:
         c1:fc:de:4b:f7:ab:02:34:1e:d9:a2:9f:2a:55:f5:f9:58:34:
         76:59:ad:e1:f5:07:9b:72:5b:8d:54:03:35:73:ed:8b:5c:da:
         60:5b:e6:1b:2f:ae:41:7f:4e:c9:be:e8:c7:57:32:58:7f:e0:
         be:f2:78:21:ea:d2:d4:fd:e3:b4:40:71:84:26:f0:49:f9:c4:
         0a:c1:96:4f:14:ed:5b:bf:fa:a5:4f:45:56:da:7b:39:2a:f9:
         27:5b:e4:b7:98:1b:3a:e3:ed:28:fa:21:01:f1:cb:b6:35:0c:
         90:f4:fc:67:8f:97:2a:42:95:c4:83:b4:4f:64:5d:e8:d2:44:
         ac:ba:01:4e:c4:8e:0f:00:d8:41:59:39:02:8a:9f:dd:12:e8:
         ef:67:9e:58:99:64:7f:d9:75:bd:be:15:e9:05:14:60:c9:0a:
         7e:4a:b8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:25:58 2026 by rpki-client