Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
File:                     cRdcCDUnGBi7041t7X-Vq7xVdE8.mft (raw, json)
Hash identifier:          Gf6/DCRDhOeZa9O6ROGdOOnRl5k95Z32VWf5OKIdSds=
Subject key identifier:   1C:51:74:52:6F:00:C3:09:C0:4D:34:F5:5D:98:5F:5E:1D:D3:D1:09
Authority key identifier: 71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
Certificate issuer:       /CN=71175c0835271818bbd38d6ded7f95abbc55744f
Certificate serial:       019E1CB4B4E0232F30F300B8645058EAAEB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
Manifest number:          08FA
Signing time:             Tue 12 May 2026 15:01:05 +0000
Manifest this update:     Tue 12 May 2026 15:01:05 +0000
Manifest next update:     Wed 13 May 2026 15:01:05 +0000
Files and hashes:         1: _zz2TE-rlOQsVBCJCSLaPozBLmc.asa (hash: z2iZ5+1Ub/NzAMRUDRpqA5UHRmLefFa08ji+87mhARs=)
                          2: bzrcQBxEeP7e5GO2MYeV49qfPAs.roa (hash: tGZRFOsNmFJrPLjmDFrmBqj0q5Dc7e6pTygfQeaYSyo=)
                          3: cRdcCDUnGBi7041t7X-Vq7xVdE8.crl (hash: AL0rQvRnjJ+7o86cOuA7JDJDOnP3wjCRzt68plhhNHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:b4:e0:23:2f:30:f3:00:b8:64:50:58:ea:ae:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71175c0835271818bbd38d6ded7f95abbc55744f
        Validity
            Not Before: May 12 15:01:05 2026 GMT
            Not After : May 13 15:01:05 2026 GMT
        Subject: CN=1c5174526f00c309c04d34f55d985f5e1dd3d109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a5:51:35:85:a6:73:37:23:ad:b0:1c:dc:65:
                    6f:61:66:df:39:d7:75:cf:d4:6f:f0:0e:48:a1:40:
                    6e:e5:a0:17:29:b3:a4:77:d4:32:cb:12:e0:0a:99:
                    16:32:31:a4:7c:01:51:fb:20:80:51:af:c5:13:c3:
                    0c:bb:db:f4:30:47:1d:67:90:26:18:7b:e9:d0:2b:
                    07:ec:6b:bf:4c:75:05:47:73:99:99:3d:7d:0f:9e:
                    6b:ed:bb:77:62:37:ff:b8:7f:dc:5a:00:a7:64:ee:
                    32:fc:bf:18:ea:65:bc:47:fc:5e:01:89:4d:5b:d6:
                    6a:f5:38:20:c2:a5:f3:1c:2d:b1:3d:f2:5c:4b:46:
                    77:71:e6:83:7a:57:2e:1a:5a:6b:95:4d:98:65:a0:
                    f0:c5:3e:9c:c2:5a:9e:55:ba:0f:a3:ed:ab:3a:40:
                    5e:53:3b:44:46:f4:ba:29:31:e3:41:11:ec:7b:ed:
                    46:3c:a1:40:3e:bf:58:c6:20:cc:ed:8e:9d:de:f0:
                    d5:cc:cd:82:a5:f4:63:70:44:ea:a0:83:13:d5:cb:
                    78:dd:bc:f8:bf:dd:27:a9:49:25:f5:72:e4:d2:31:
                    d1:cb:01:8a:9c:1d:79:66:69:cf:96:27:28:d1:c1:
                    9f:9b:00:49:eb:d6:e5:b6:d2:30:79:e8:e0:a1:bc:
                    41:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:51:74:52:6F:00:C3:09:C0:4D:34:F5:5D:98:5F:5E:1D:D3:D1:09
            X509v3 Authority Key Identifier:
                keyid:71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:7c:66:cf:e3:44:ae:fd:f8:bb:fc:ff:b1:db:7c:25:5d:2b:
         11:44:ef:7e:8c:98:09:2f:6a:85:39:f1:ad:32:a5:f1:7d:1b:
         85:2a:34:7d:85:c3:c8:e8:a6:2a:d7:43:23:41:24:1d:07:90:
         31:bd:57:54:79:3f:69:b2:fe:a3:e4:1d:16:0d:33:af:74:7b:
         aa:54:a1:f3:1a:4f:1b:9d:61:ef:05:d1:88:35:98:3d:2c:c6:
         b9:e5:eb:7c:12:02:f0:be:b0:fa:9a:36:16:2f:dd:58:c7:37:
         ee:62:b0:52:0e:c5:68:4f:17:c8:a7:46:34:57:3f:9e:95:19:
         04:ba:3a:9f:bc:75:d4:87:ba:1f:b7:36:eb:d8:7b:a4:44:bc:
         62:80:15:0f:e2:86:ec:9d:33:c6:ce:74:ad:1f:9e:9a:e2:89:
         db:8c:f2:2a:06:8f:25:55:37:d4:13:df:54:3f:fb:2b:ef:92:
         c0:cf:a8:03:4e:ea:79:68:bc:05:9f:5b:2f:08:e3:5c:83:58:
         0b:26:7b:44:3c:4b:0c:5d:c3:7b:9f:be:97:80:7d:0c:88:62:
         d1:7d:b9:9a:9e:4d:d6:d0:cb:ce:63:ee:ed:f4:72:47:a5:c1:
         a8:f6:ca:97:b8:ef:76:4b:fb:55:cb:ab:d4:51:6d:0b:49:34:
         b5:fa:30:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:55:17 2026 by rpki-client