Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a718c5-34a1-4baa-b18f-619d9da29826/1/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.mft
File:                     b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.mft (raw, json)
Hash identifier:          q5Fd6FjtrIVlkb8xf07NPpKCnpnLJ27OLxqDZKn6eOE=
Subject key identifier:   BB:02:65:D4:E9:C1:29:15:B7:52:07:F8:B7:8C:7B:6A:5E:9C:34:4E
Authority key identifier: 6F:8C:10:C3:83:72:9F:76:14:99:73:B5:65:5B:E9:BF:34:71:1B:24
Certificate issuer:       /CN=6f8c10c383729f76149973b5655be9bf34711b24
Certificate serial:       019E1E6C5D5D3A3420DBED515CA04D52450A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/a718c5-34a1-4baa-b18f-619d9da29826/1/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.mft
Manifest number:          CE
Signing time:             Tue 12 May 2026 23:01:18 +0000
Manifest this update:     Tue 12 May 2026 23:01:18 +0000
Manifest next update:     Wed 13 May 2026 23:01:18 +0000
Files and hashes:         1: b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.crl (hash: kddimO3PdBMbDRm4HjbPEQfBfx0CaebAPHJikDVNa+E=)
                          2: bf-C7XR5rvxVULROY95AnCsiqDE.roa (hash: Xcehpx+K84jAisImHgsCWZZzlMJjIRq9I5PCTggbexM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/a718c5-34a1-4baa-b18f-619d9da29826/1/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/a718c5-34a1-4baa-b18f-619d9da29826/1/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:5d:5d:3a:34:20:db:ed:51:5c:a0:4d:52:45:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8c10c383729f76149973b5655be9bf34711b24
        Validity
            Not Before: May 12 23:01:18 2026 GMT
            Not After : May 13 23:01:18 2026 GMT
        Subject: CN=bb0265d4e9c12915b75207f8b78c7b6a5e9c344e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:44:e4:ae:dd:d0:60:dd:82:4a:86:0c:d0:c2:
                    c0:b9:53:c1:7b:2a:0d:51:84:d9:1c:d3:2b:87:7b:
                    b8:aa:82:d9:25:1b:70:7a:b4:1f:32:74:ee:0a:6d:
                    79:df:d7:c7:4c:bd:52:2e:60:5a:d2:3b:8b:72:aa:
                    01:6a:82:bd:6b:b0:80:eb:50:cc:8c:df:6c:2b:44:
                    d6:ae:48:4b:73:c6:3f:61:a5:0e:11:7e:df:f0:c4:
                    25:97:73:84:f1:4a:33:37:e9:94:d9:89:38:69:62:
                    e0:65:12:e5:c6:99:ef:08:cc:c2:31:a2:41:a2:7d:
                    5f:c6:68:0e:76:c0:7a:a4:bf:15:40:b0:8a:a4:21:
                    86:9d:d5:72:8d:a1:12:68:81:02:a6:7c:62:f4:1a:
                    ce:4a:9b:7d:2d:6b:43:d0:a7:e6:79:49:45:0c:05:
                    e2:6f:37:31:7a:78:0d:ff:7d:d2:6b:3b:1e:bd:00:
                    5f:4c:8a:0a:97:ed:bf:ca:54:3d:41:eb:55:67:2e:
                    c3:60:4e:e4:97:a0:96:57:5a:f5:38:16:08:ba:d7:
                    70:3b:7b:bf:10:21:ca:c1:ad:89:3c:e5:b6:23:49:
                    49:11:31:67:17:2c:a0:8e:28:64:86:56:2f:ff:2c:
                    3b:43:29:d4:10:6e:24:58:fa:a8:87:15:60:f1:01:
                    d2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:02:65:D4:E9:C1:29:15:B7:52:07:F8:B7:8C:7B:6A:5E:9C:34:4E
            X509v3 Authority Key Identifier:
                keyid:6F:8C:10:C3:83:72:9F:76:14:99:73:B5:65:5B:E9:BF:34:71:1B:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a718c5-34a1-4baa-b18f-619d9da29826/1/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a718c5-34a1-4baa-b18f-619d9da29826/1/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:cb:11:00:e5:fb:67:f3:08:41:53:b4:af:ed:61:e2:d7:31:
         81:23:d1:ea:d2:f0:39:6f:07:86:94:c2:a1:ca:60:2c:ae:bd:
         40:d5:2d:65:ae:a2:e0:f3:a4:78:b2:e3:1d:2e:90:09:2c:31:
         6c:88:a9:dd:7c:d1:ab:db:03:43:ac:2e:52:1a:84:0c:2d:b4:
         64:93:58:9d:de:5c:2c:ef:b4:6e:fa:eb:60:2a:f9:38:43:e7:
         a5:fa:3a:50:85:a0:69:ab:d3:da:fc:e8:68:93:88:04:01:66:
         8e:56:29:e2:57:04:19:ca:f6:bb:c5:56:f6:31:0c:10:ac:98:
         bf:3f:7c:66:46:26:e4:50:50:ca:08:24:5a:07:39:9d:06:e9:
         7a:bf:fd:52:dd:3b:d4:90:79:26:a6:27:4c:27:c8:94:76:79:
         9e:ae:0a:15:85:79:1f:e7:be:d0:47:90:35:42:01:66:e9:4b:
         0c:b4:c8:a9:72:a8:b3:a4:9f:bd:cc:8b:b7:31:36:08:2d:d8:
         90:ee:4c:69:d7:45:1f:4c:b3:ce:ad:26:bd:78:0c:14:6d:b4:
         8f:91:33:3d:25:d2:89:c2:c7:50:c8:d3:8d:f4:36:18:91:9f:
         88:61:f7:ee:40:0c:1d:b8:eb:c9:71:84:6c:c8:d7:29:a7:01:
         37:c4:22:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:29:15 2026 by rpki-client