Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
File:                     un1KwTROw43OmXaNeKEU6_fxfYU.mft (raw, json)
Hash identifier:          v7IbBUKFauLJseleyBXFxLpqv7UBc4bJFV9QLPW3bqY=
Subject key identifier:   8B:D7:48:A2:AD:E3:D6:72:DB:C4:45:D1:6C:AA:A0:AA:27:B5:BD:5D
Authority key identifier: BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
Certificate issuer:       /CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Certificate serial:       019E1F7F4F3A3EDD1A67BDCE192C901976D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
Manifest number:          0FC0
Signing time:             Wed 13 May 2026 04:01:37 +0000
Manifest this update:     Wed 13 May 2026 04:01:37 +0000
Manifest next update:     Thu 14 May 2026 04:01:37 +0000
Files and hashes:         1: o1To2AOAuoLP-nWNuTs68gOKGAE.roa (hash: IQkZrzowlCF0UtrbBWeIReby2n7O6GCUFgToo++Y5B0=)
                          2: un1KwTROw43OmXaNeKEU6_fxfYU.crl (hash: znh2e0WItc675EXhMw9nXh9VRPsjRWwcX3LjrxoTgME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7f:4f:3a:3e:dd:1a:67:bd:ce:19:2c:90:19:76:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
        Validity
            Not Before: May 13 04:01:37 2026 GMT
            Not After : May 14 04:01:37 2026 GMT
        Subject: CN=8bd748a2ade3d672dbc445d16caaa0aa27b5bd5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:dd:93:5e:fa:d3:2d:48:2c:97:c3:c9:9a:e3:
                    33:ba:17:58:13:d4:02:45:32:37:e4:aa:38:59:1e:
                    6d:6d:c1:1e:75:33:02:79:39:ba:84:16:0c:66:03:
                    08:16:1b:c6:8f:78:00:5d:f3:42:07:9c:ba:34:49:
                    53:f7:c7:a4:b2:18:52:e6:b6:65:e1:01:fe:ea:4c:
                    f7:81:2f:5c:4a:89:3b:ce:12:d6:8a:a4:95:ae:65:
                    c3:3b:86:55:06:74:f1:eb:19:70:59:fc:f6:69:c2:
                    88:44:a5:70:f2:b3:35:2c:ce:ce:64:af:3c:f3:f3:
                    a0:00:d4:5b:21:90:f8:ad:43:46:9f:e6:d2:4b:a8:
                    98:68:79:c6:86:48:f8:da:80:f9:7b:0f:f0:ea:a5:
                    7c:f9:80:ca:03:36:4b:88:bf:ff:12:90:29:4c:17:
                    64:ad:2f:fc:56:2f:22:7d:0d:08:89:7d:28:87:7d:
                    56:4e:e2:39:37:54:ee:91:6e:4b:68:44:27:0b:d7:
                    02:29:3b:f0:db:d7:16:9c:16:9a:6f:d0:e0:4e:ae:
                    5a:42:41:27:fb:75:c8:4b:43:96:58:7b:a0:02:b0:
                    f4:ff:aa:62:55:21:44:2b:b8:0e:a4:1c:40:b6:01:
                    ab:a0:c1:bf:f6:16:f1:3e:e5:cd:06:99:e2:82:c5:
                    95:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D7:48:A2:AD:E3:D6:72:DB:C4:45:D1:6C:AA:A0:AA:27:B5:BD:5D
            X509v3 Authority Key Identifier:
                keyid:BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:b1:f3:4c:f0:59:2f:e7:f9:ae:94:89:68:1b:9f:4c:cb:30:
         48:1f:c6:a4:a7:e2:19:da:a3:42:d3:ac:7d:05:9e:8c:0e:b4:
         76:68:02:6f:33:18:89:eb:96:21:2a:e3:58:2f:fd:7c:53:48:
         7f:96:22:da:e6:86:6a:ee:b0:3d:47:17:fe:2b:10:7c:59:2e:
         fa:f3:87:3d:24:54:2f:60:da:e8:2b:d1:14:76:ec:b6:78:cb:
         a3:6e:12:71:d2:33:85:c4:70:41:57:3d:5e:8e:54:88:9b:27:
         9c:26:00:a0:88:fb:3b:db:f2:95:54:59:02:3c:9a:c0:3f:2a:
         2b:1c:b5:ce:49:ab:99:7c:0c:37:8e:2d:76:d0:0d:df:46:96:
         13:11:3f:e3:17:fe:00:b7:7b:ef:86:38:71:9a:a7:d1:13:5f:
         71:eb:e3:31:a2:0d:25:f2:df:11:32:5f:e4:da:39:01:e1:c0:
         1c:d7:31:24:96:1a:1f:51:e4:ee:f1:64:2a:4f:15:09:1f:cd:
         b1:22:09:a9:d1:7b:2a:44:ee:a9:26:02:8d:ac:b5:c7:e0:17:
         0f:e8:c3:c0:58:2b:3d:83:ca:bb:74:0b:2b:de:4e:57:b4:87:
         3d:b4:46:70:35:ef:68:db:7d:48:3a:3f:5d:cd:86:f7:e9:01:
         1b:e0:91:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:07:10 2026 by rpki-client