Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft
File:                     FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft (raw, json)
Hash identifier:          igd2V8UlJ5ZHhMemh3CRkCfwlzj9m3ti09lqM2li4tk=
Subject key identifier:   80:46:F7:82:3B:AC:02:29:F7:3A:E6:D2:42:01:AF:D3:D8:32:63:7E
Authority key identifier: 15:8D:2A:5F:52:CD:FF:15:AE:96:AC:5F:4C:97:61:0E:44:4B:62:B4
Certificate issuer:       /CN=158d2a5f52cdff15ae96ac5f4c97610e444b62b4
Certificate serial:       019E1E35C0DD441FBECAD39773939D19F259
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FY0qX1LN_xWulqxfTJdhDkRLYrQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft
Manifest number:          01DC
Signing time:             Tue 12 May 2026 22:01:39 +0000
Manifest this update:     Tue 12 May 2026 22:01:39 +0000
Manifest next update:     Wed 13 May 2026 22:01:39 +0000
Files and hashes:         1: 6Qw2qfKOtpd_LKkKsTDZ3ejOc18.roa (hash: bj0QwSywJCHEKu3qq7k1s6hD+djiOxQDSPNiFdM0bYw=)
                          2: FY0qX1LN_xWulqxfTJdhDkRLYrQ.crl (hash: 1wlwbC6FzmSecUqNPnmknWzoPEb4rKrywSq3blsD2Ek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FY0qX1LN_xWulqxfTJdhDkRLYrQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:c0:dd:44:1f:be:ca:d3:97:73:93:9d:19:f2:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=158d2a5f52cdff15ae96ac5f4c97610e444b62b4
        Validity
            Not Before: May 12 22:01:39 2026 GMT
            Not After : May 13 22:01:39 2026 GMT
        Subject: CN=8046f7823bac0229f73ae6d24201afd3d832637e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d0:2c:b1:4b:6b:e4:15:50:40:3e:60:29:a2:
                    e9:39:a8:3f:93:c6:5d:66:d2:d2:7b:15:37:2d:d8:
                    10:72:7e:85:06:ed:1a:55:17:19:ae:dd:fa:cb:76:
                    16:23:4c:da:44:d9:18:b3:b4:62:3d:fa:a5:1b:a0:
                    54:3e:a4:e0:62:e4:3e:02:01:5d:55:e2:4a:7c:b8:
                    a6:12:37:6c:4a:f8:b8:3b:b2:7b:80:57:75:c0:41:
                    b4:52:0e:d7:0d:c1:cb:a4:dd:bb:bb:02:6e:f8:15:
                    4e:47:0f:54:71:d7:95:4c:fb:c6:35:b3:26:43:61:
                    21:9b:32:fc:cd:fc:07:3c:a0:23:eb:02:97:1a:66:
                    e8:e5:ad:1e:50:8f:5f:40:41:ac:d4:f9:69:02:20:
                    b8:0e:66:86:22:d5:4b:04:3b:85:76:6c:13:16:08:
                    9e:69:d1:3b:4e:71:70:c2:88:ae:9c:bb:c8:5a:6e:
                    91:42:4c:10:59:76:82:e8:be:d5:ba:9e:e9:07:16:
                    73:22:35:85:f1:6e:e7:44:61:89:09:03:aa:67:cf:
                    a3:70:da:d8:9f:de:ee:f1:2d:5c:3e:4a:12:a3:c8:
                    f9:5e:77:bc:fd:ae:15:8b:87:c0:8f:99:57:dd:4b:
                    be:d6:f1:b6:e5:46:5b:ed:c3:5f:a6:37:99:81:4a:
                    de:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:46:F7:82:3B:AC:02:29:F7:3A:E6:D2:42:01:AF:D3:D8:32:63:7E
            X509v3 Authority Key Identifier:
                keyid:15:8D:2A:5F:52:CD:FF:15:AE:96:AC:5F:4C:97:61:0E:44:4B:62:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FY0qX1LN_xWulqxfTJdhDkRLYrQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:1f:05:6c:3e:22:6a:13:5d:48:6b:ec:50:3c:b0:69:58:d3:
         74:0f:3e:5e:8e:e0:ff:37:84:43:9c:76:85:8f:ab:ac:a0:ab:
         11:08:26:0b:7d:05:2b:77:a5:fe:aa:e5:fe:96:91:d2:d5:c8:
         f0:86:25:53:10:58:64:f1:0f:be:f8:4b:44:2f:d6:5f:20:b7:
         8d:e4:a2:40:13:a7:8a:5c:f9:a3:02:b5:54:c6:cb:47:46:25:
         1a:d5:3e:a5:d5:bf:b9:83:09:43:ed:20:ad:3f:93:c4:2f:c3:
         c4:58:3f:53:1d:92:1f:59:1b:fd:8e:23:27:13:38:02:e4:c6:
         ab:31:e0:b7:af:91:bd:20:4e:ea:ed:80:c6:62:ee:c8:98:11:
         5b:40:3e:fe:a6:37:28:f4:55:36:50:46:45:92:e6:96:2d:76:
         2f:7c:8c:33:f5:5d:5f:ba:21:ef:bf:c9:48:cc:97:c6:66:70:
         c7:a3:57:4a:80:70:03:ee:66:ab:b0:03:14:2f:36:f8:ee:e4:
         be:e7:20:93:d7:84:e5:0c:c4:ea:66:ca:e8:4d:17:a2:dd:64:
         71:06:33:b2:3d:69:15:23:34:07:08:ab:e4:cc:da:ad:02:3f:
         3d:b4:f6:4a:51:cb:1a:97:59:5c:83:30:c7:17:d0:16:85:e3:
         a3:7d:07:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:05:58 2026 by rpki-client