Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft
File:                     K0ro4PiNDIw530T_pB4ywmJ8OhU.mft (raw, json)
Hash identifier:          LGfrZD53NNEKhMu5P9rrnDFG3H3A6kKGHbHoZTO6Bwo=
Subject key identifier:   03:CB:A8:C0:07:EE:1E:E8:94:E5:C7:3E:96:1E:68:3E:FF:B6:11:53
Authority key identifier: 2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15
Certificate issuer:       /CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15
Certificate serial:       019E1ED9F1F9B4EFCA565FDD6728D07926A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft
Manifest number:          0620
Signing time:             Wed 13 May 2026 01:01:00 +0000
Manifest this update:     Wed 13 May 2026 01:01:00 +0000
Manifest next update:     Thu 14 May 2026 01:01:00 +0000
Files and hashes:         1: K0ro4PiNDIw530T_pB4ywmJ8OhU.crl (hash: 7d3zQGZr0irVRDXMrM3k8zMxaj8TSXTyzu4iRVLRXok=)
                          2: z5dBX6odp12M_OB_gttLAeXRzfY.roa (hash: H0+1g03VSFVNjWI/Z7WGHpAKWuQ/lvaaEnN2kUyKA+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:f1:f9:b4:ef:ca:56:5f:dd:67:28:d0:79:26:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15
        Validity
            Not Before: May 13 01:01:00 2026 GMT
            Not After : May 14 01:01:00 2026 GMT
        Subject: CN=03cba8c007ee1ee894e5c73e961e683effb61153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5a:a9:c4:fa:e3:a3:3e:8f:03:7a:b1:83:0e:
                    96:89:78:f8:82:73:31:9a:d8:cb:4c:25:84:b2:5e:
                    f8:e4:7d:d3:93:4d:b1:58:72:44:0f:bb:7b:9d:28:
                    3d:88:12:7a:17:2d:47:34:33:57:ce:26:54:8f:9b:
                    dc:0d:1e:2f:08:fd:63:94:d9:9c:22:d0:d6:8c:e9:
                    3a:c9:bb:f2:ad:41:6b:4f:ff:05:1f:92:3b:d6:81:
                    01:da:04:0b:1e:ac:ff:db:4c:b4:9e:c2:95:21:5c:
                    41:f1:ef:67:06:5d:77:5b:dc:5f:b7:1d:84:18:6d:
                    31:2d:87:4e:bd:87:d8:3d:7d:9c:0f:e4:ff:3b:99:
                    4d:62:76:59:05:98:e2:9e:20:59:51:f1:ee:53:fb:
                    42:4f:0c:e1:2a:ef:b4:e4:fa:cc:f7:e4:5a:3c:63:
                    c4:13:84:df:85:51:ac:c1:0f:00:55:ca:c1:15:9a:
                    c7:f9:5c:00:33:41:f2:47:d0:b8:6b:e3:4f:3c:f3:
                    8e:e8:12:03:96:4c:bd:82:04:b2:6c:17:8d:57:6a:
                    6e:d6:71:7a:35:d7:84:ed:a5:90:4c:7d:3d:4c:61:
                    2b:f9:4b:36:f4:3f:12:e2:6a:95:a2:9a:5e:70:4c:
                    44:50:c2:4b:de:6c:f2:d2:e1:02:c9:ec:65:88:d0:
                    44:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:CB:A8:C0:07:EE:1E:E8:94:E5:C7:3E:96:1E:68:3E:FF:B6:11:53
            X509v3 Authority Key Identifier:
                keyid:2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:4b:03:b1:18:87:d9:7f:f8:d4:2c:de:dd:50:5e:90:15:82:
         31:aa:a3:8c:7c:09:b6:62:27:8b:21:31:d9:d0:7a:97:65:1d:
         3f:a9:d9:ff:e8:41:77:eb:f2:c5:7f:2a:0d:c1:65:03:40:18:
         58:2d:29:8a:79:92:7d:b7:04:61:f4:04:37:49:fb:df:4f:79:
         1c:da:14:35:53:f7:3b:5e:c5:f6:01:87:17:3c:e7:c2:6b:83:
         7b:3c:4a:de:cd:09:6b:22:c3:8a:88:5c:d3:e8:1a:c0:f0:73:
         33:37:5b:e4:8a:3c:ab:74:58:63:65:b0:9d:b7:94:3e:70:40:
         87:27:a8:40:a3:c6:3c:a7:26:ed:8b:3e:76:75:0c:b2:24:30:
         1d:de:44:4c:be:a6:53:83:dc:0d:36:c9:36:8f:d0:33:a5:a3:
         d9:a1:45:85:ca:1b:70:24:20:2a:1a:39:43:90:18:3e:f1:79:
         f7:06:88:a3:e6:b3:a3:69:6b:c8:e0:f8:f7:84:34:62:4b:f6:
         d8:4c:f8:57:63:59:24:32:1c:a9:f1:f3:9c:0d:b0:72:f8:e7:
         19:89:c7:47:4a:d5:ea:cf:ff:fe:af:7f:e0:d5:81:81:9e:72:
         1f:79:84:97:9a:bc:df:0f:7a:3e:4b:6e:12:2a:14:e9:8b:19:
         4c:35:2c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:17:41 2026 by rpki-client