Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
File:                     PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft (raw, json)
Hash identifier:          oaFEcERyWyBMhX86/m1SNvRgOJWdI6j4YKOZH0OR0tE=
Subject key identifier:   0A:E4:0A:39:33:73:A0:48:76:9B:86:CD:75:4D:BA:EA:FC:3D:00:9C
Authority key identifier: 3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
Certificate issuer:       /CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Certificate serial:       019E1F7E9EDF574181E7FA0AE394526D93FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
Manifest number:          0ABF
Signing time:             Wed 13 May 2026 04:00:52 +0000
Manifest this update:     Wed 13 May 2026 04:00:52 +0000
Manifest next update:     Thu 14 May 2026 04:00:52 +0000
Files and hashes:         1: PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl (hash: 8uqJzoaUH1izYMgz0gMp/LTM0RVh7NFqf7NRoPT23eM=)
                          2: o2oMp4w_9TGCM9aisNXx6hIf0dE.roa (hash: 5zj6ry4dUTAYdyPOXRmxJv5IwbCW/zphAyYpf0E3ouc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7e:9e:df:57:41:81:e7:fa:0a:e3:94:52:6d:93:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
        Validity
            Not Before: May 13 04:00:52 2026 GMT
            Not After : May 14 04:00:52 2026 GMT
        Subject: CN=0ae40a393373a048769b86cd754dbaeafc3d009c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ae:fb:b0:2b:7e:e3:43:ed:c1:f8:60:fb:49:
                    2d:48:80:23:a1:cd:26:f6:d2:5f:15:94:8e:37:21:
                    4d:99:2b:4c:be:00:6e:91:5b:70:4e:64:d1:6b:d5:
                    8f:80:7c:fb:3c:bd:2d:99:2c:01:18:f0:0b:61:bf:
                    e0:e5:d3:42:fd:08:cb:c9:7e:af:0c:51:27:c5:9a:
                    cf:4a:ea:32:34:61:eb:c7:50:be:68:ef:71:4c:f6:
                    c1:d0:ef:75:f9:9c:a6:68:77:26:3e:c0:cd:37:57:
                    e9:a0:0f:55:16:ea:e6:17:72:bb:77:12:02:02:48:
                    1a:e4:b9:de:22:e8:00:3f:1b:95:b1:5d:5c:f1:4d:
                    8e:8e:b9:31:d2:65:da:6b:24:1c:0f:38:c6:c9:f4:
                    87:7b:1d:60:c4:65:01:34:b5:e2:bd:d4:a5:69:93:
                    2c:87:6a:1a:7a:ab:56:db:da:9c:d6:52:e9:3d:e3:
                    fd:30:19:01:69:e7:b5:34:12:28:bf:00:16:ed:57:
                    ba:7e:ba:04:ff:a3:19:1a:7e:52:18:fc:a3:ca:dd:
                    bd:64:28:80:64:8e:a6:c1:da:15:cd:60:4d:85:13:
                    da:23:89:06:af:35:e5:3a:e5:f6:d1:2d:fa:c8:23:
                    33:23:7b:33:5d:58:59:ad:01:12:ab:5f:d4:72:f7:
                    c3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E4:0A:39:33:73:A0:48:76:9B:86:CD:75:4D:BA:EA:FC:3D:00:9C
            X509v3 Authority Key Identifier:
                keyid:3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:d2:7a:d6:c6:9d:55:e1:85:4d:dd:6f:0f:db:31:56:49:e9:
         be:83:88:5a:8f:11:bc:4f:69:5a:f8:4d:a1:72:32:ee:92:93:
         bc:55:b9:24:b3:b9:5a:29:fc:d2:5f:8e:3a:9d:7c:42:58:64:
         26:26:1a:2a:9e:ce:6c:b5:6e:0b:b8:63:b0:7c:a2:9c:7f:db:
         a2:ab:c6:b4:f6:d1:a9:ad:15:55:86:ac:58:11:b4:a7:5e:16:
         9d:6e:8d:5a:97:89:ad:72:d7:82:c1:56:ac:45:dc:e7:3c:95:
         c9:07:0b:55:e8:c4:34:72:68:f9:1d:55:85:fd:5c:f4:41:57:
         3c:bc:57:ed:92:4a:9b:b0:05:b5:96:24:ea:a3:7b:b8:1a:99:
         5d:43:a7:1b:58:21:b1:f2:10:b1:a9:ba:d6:77:45:c6:96:ff:
         17:b1:3a:7b:3e:62:0d:93:15:ba:cf:2e:67:1f:69:88:5c:fa:
         16:65:d3:b8:cb:08:da:09:0b:95:f0:cd:2a:f0:58:5f:c3:d9:
         34:68:b7:43:53:18:03:1d:ce:b4:a4:4e:cf:65:5c:97:68:37:
         37:1a:8d:7b:61:44:2b:21:55:d3:7f:8a:7c:d7:8a:9b:84:ab:
         2d:89:52:d3:e3:5f:65:83:5b:03:ba:cd:31:46:c5:95:b1:48:
         ce:be:17:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:06:52 2026 by rpki-client