Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
File:                     AEp1iisKfpOKnw3uZCzsXkECdrU.mft (raw, json)
Hash identifier:          xCFjsiBMT24XdaXyFnZcjqKwlUu1VmUuG/jYIy2JwM8=
Subject key identifier:   52:D6:AB:71:8C:6A:95:B9:52:9F:26:ED:3B:13:FB:D2:3B:2D:E3:C6
Authority key identifier: 00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5
Certificate issuer:       /CN=004a758a2b0a7e938a9f0dee642cec5e410276b5
Certificate serial:       019E1D911B9A939340A763406D99F144C4DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
Manifest number:          0E72
Signing time:             Tue 12 May 2026 19:01:49 +0000
Manifest this update:     Tue 12 May 2026 19:01:49 +0000
Manifest next update:     Wed 13 May 2026 19:01:49 +0000
Files and hashes:         1: AEp1iisKfpOKnw3uZCzsXkECdrU.crl (hash: alvN+r0DpuVfsrRSLT9AhsQZ2ief3lYvku6C1gw22oE=)
                          2: KQvSjqYh8xEH5jGSoTapmYBK1v8.roa (hash: oIhjbUQtq0h2T8RoAxHLxlxqfimGaBYyqjdqBzIaXjs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:91:1b:9a:93:93:40:a7:63:40:6d:99:f1:44:c4:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004a758a2b0a7e938a9f0dee642cec5e410276b5
        Validity
            Not Before: May 12 19:01:49 2026 GMT
            Not After : May 13 19:01:49 2026 GMT
        Subject: CN=52d6ab718c6a95b9529f26ed3b13fbd23b2de3c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1e:e9:c0:85:a0:31:23:ad:f8:e1:78:a3:11:
                    02:8c:fa:cb:0f:a1:fb:72:b3:7d:bc:20:2c:43:a7:
                    dd:8d:9f:56:65:25:ce:ca:91:b6:a6:a2:b6:de:d4:
                    c7:c5:a7:55:1e:2c:36:d1:b7:91:7e:8a:4c:65:f2:
                    88:48:e5:28:3e:0c:af:f9:dc:9e:96:57:2e:03:28:
                    f8:7f:3c:04:64:f7:dd:ef:e5:7b:2e:0c:b6:c8:cc:
                    e3:e2:b9:79:ec:b5:13:5a:02:19:d3:6e:d0:17:38:
                    0f:b4:59:aa:e4:52:9d:e4:93:63:96:cc:f6:74:ba:
                    51:81:bf:b0:bb:96:42:30:f8:96:e5:dc:8d:f7:04:
                    2d:6f:b5:51:07:7a:bb:c2:55:e9:f6:bf:9d:56:88:
                    49:4d:16:8c:1d:4b:74:1c:ee:a1:71:bb:aa:b4:dd:
                    dd:ae:41:ae:8d:b4:cd:c3:da:34:bd:c8:04:9f:25:
                    df:bc:03:43:2f:e2:3f:5f:be:5a:b3:75:95:a8:89:
                    87:3d:f3:96:09:4c:12:6d:d6:de:b9:d8:d0:e4:db:
                    08:84:64:e5:b7:05:9b:d4:b2:6b:4c:67:53:e1:5f:
                    bf:5a:6f:ec:e3:b9:d1:9f:cf:6f:6d:b6:30:67:e8:
                    5c:53:0c:8d:e3:d1:00:a3:2c:74:8f:89:8b:95:12:
                    2a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D6:AB:71:8C:6A:95:B9:52:9F:26:ED:3B:13:FB:D2:3B:2D:E3:C6
            X509v3 Authority Key Identifier:
                keyid:00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:7c:21:b9:b0:a2:39:ea:91:ed:20:7c:ee:90:2b:d2:f4:0a:
         b5:a5:91:0f:b3:04:6b:a2:36:97:a9:45:87:60:1a:72:fc:51:
         b5:58:32:b7:a1:47:42:ab:9e:dc:44:97:80:42:ff:9f:35:47:
         9c:44:06:85:d2:19:3e:a5:d1:2d:33:a1:d4:3f:c6:29:d2:ff:
         42:82:12:58:eb:0d:c0:8b:73:ea:43:0a:00:e7:74:ba:88:90:
         da:a9:92:5e:b6:64:32:18:8d:5c:ba:fc:e7:4a:16:4c:33:e2:
         de:0b:cb:93:2a:29:36:69:4f:3b:16:7a:ef:d9:43:4f:9e:c2:
         eb:be:aa:d3:88:0c:fc:ab:34:97:8f:c4:a7:6c:90:f6:b9:95:
         03:96:b7:f3:93:bf:81:0c:a5:33:48:e8:88:31:fd:a3:23:d5:
         10:52:47:85:af:57:af:f5:d2:20:97:06:1f:fc:8e:a5:86:aa:
         8c:73:dc:1b:3e:6b:41:d2:99:2c:61:a8:74:55:db:53:3d:bf:
         87:f5:fd:32:c4:f5:37:9b:a6:47:c8:a3:e0:71:04:86:a7:0f:
         97:45:e8:6b:e0:0e:e1:e0:78:7b:15:c7:0f:df:b3:c5:03:d9:
         4b:d6:36:c5:5f:df:40:e2:15:5b:96:79:ad:66:8a:bd:72:b4:
         76:d2:49:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:59:44 2026 by rpki-client