Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
File:                     rrwz1bpYUjTMzvilethsoer8SqI.mft (raw, json)
Hash identifier:          02wGX0+VB9lGsrAf+XNkAMH7wLS8BlcPI03CvEzEdc4=
Subject key identifier:   51:A7:1B:A2:00:AE:9D:0F:75:6A:34:FD:F7:8E:5A:AE:4D:6A:36:BA
Authority key identifier: AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
Certificate issuer:       /CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Certificate serial:       019E20232ED01ED3072D70C22EFBAA018A5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
Manifest number:          08B3
Signing time:             Wed 13 May 2026 07:00:37 +0000
Manifest this update:     Wed 13 May 2026 07:00:37 +0000
Manifest next update:     Thu 14 May 2026 07:00:37 +0000
Files and hashes:         1: E907k5QYJtLiwC_jK3iFvXI9RdI.roa (hash: snQqBx0r+DlkIlsrsM46ddsGDow3XlKtABIHB2rzqdc=)
                          2: rrwz1bpYUjTMzvilethsoer8SqI.crl (hash: fe7RGnxLGn+VFEV+S5VQRMZK5GvjO12Vz/JbeB5qgKg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:23:2e:d0:1e:d3:07:2d:70:c2:2e:fb:aa:01:8a:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
        Validity
            Not Before: May 13 07:00:37 2026 GMT
            Not After : May 14 07:00:37 2026 GMT
        Subject: CN=51a71ba200ae9d0f756a34fdf78e5aae4d6a36ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:70:98:c7:4b:c9:88:63:56:b0:ca:6e:1e:81:
                    1d:a8:12:d1:c5:ff:65:e9:bf:fb:6f:67:8a:60:9f:
                    48:07:56:72:7e:b7:0e:f8:9f:0a:f9:a2:ac:60:02:
                    86:21:ca:3a:a6:d1:d7:bc:a1:c9:f2:20:18:aa:83:
                    6d:4b:5e:d1:fe:bd:c2:83:81:af:8d:a4:88:5a:fc:
                    4e:6d:52:c8:8e:e1:0c:3c:56:db:f9:d1:8c:6d:e8:
                    fb:1c:45:2d:da:6a:12:ca:bb:ad:1b:0e:f9:02:0d:
                    be:66:a7:07:9d:64:60:d0:b7:96:04:75:9c:a1:f0:
                    06:f5:73:26:01:58:4c:2b:d2:e9:3e:9e:8d:c3:52:
                    25:fb:b7:43:6a:40:2a:d0:fe:43:c3:9a:28:44:18:
                    fa:8f:e7:7b:ee:0f:af:3a:1a:f6:30:0f:3a:f2:5c:
                    2a:a8:78:82:66:ed:74:11:3f:b1:e5:a3:1a:c2:56:
                    65:02:e2:25:9a:15:80:e8:01:bf:c5:a5:52:ea:26:
                    84:af:36:25:e9:d5:cf:0d:d2:e3:20:80:a4:a7:13:
                    5d:da:0b:93:46:e5:58:20:f5:ac:3c:71:aa:a9:5f:
                    cd:9e:cf:d2:1e:e7:2c:0e:91:bf:eb:bc:6e:f5:bc:
                    44:f7:1c:00:8e:0e:70:55:35:c2:27:07:2c:0c:af:
                    7f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A7:1B:A2:00:AE:9D:0F:75:6A:34:FD:F7:8E:5A:AE:4D:6A:36:BA
            X509v3 Authority Key Identifier:
                keyid:AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:e1:7b:c6:c3:3d:b1:d5:26:28:11:5d:2b:32:4e:0d:62:34:
         9f:d8:30:0d:52:39:97:9d:26:8a:62:99:22:de:e2:70:6d:a9:
         d2:5d:30:a0:ee:10:9b:a6:d4:9d:49:87:d5:21:4a:f2:b8:96:
         70:47:c9:34:4d:e5:3c:17:06:0b:71:3e:50:7b:65:80:b0:04:
         18:4b:58:38:bb:35:d4:7f:3d:54:b2:4d:f8:27:bd:3b:50:6c:
         72:cd:f2:73:c8:d7:48:70:81:55:16:83:ec:1e:a1:bf:50:f9:
         a5:be:f1:88:fa:fd:11:c9:1a:db:d7:53:37:88:4a:85:29:da:
         f9:78:39:79:89:20:bf:00:3e:bd:ad:ba:89:6b:44:e7:65:bd:
         59:96:84:5d:b2:75:14:8f:c9:fb:12:05:dd:e5:95:9b:e4:50:
         3a:c5:13:7c:73:29:90:32:f7:f6:31:17:94:fb:91:4b:bf:6f:
         fd:81:61:fb:d6:78:fe:ff:4d:36:ab:76:25:75:88:99:b6:7d:
         01:09:34:e6:4a:85:02:eb:0b:4a:fc:01:67:3c:a7:5f:1e:24:
         97:87:68:a0:e7:4f:28:a6:85:9c:40:7a:2f:1b:45:10:1e:a8:
         bc:7f:66:3b:87:1b:ab:83:f1:22:ac:fc:4e:ff:ae:ba:72:fe:
         cb:3a:c9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:14 2026 by rpki-client