Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft
File:                     fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft (raw, json)
Hash identifier:          /8441p3fY2Cf8XxHrWnBe/hwdTVs1LLH8wVEIMK6GRM=
Subject key identifier:   48:7B:C3:8F:EF:A3:16:DB:5A:D0:E6:C7:77:62:63:3F:56:1D:1A:89
Authority key identifier: 7D:34:6A:CE:4E:65:28:70:F1:68:74:50:D5:C3:4E:14:CB:00:94:B5
Certificate issuer:       /CN=7d346ace4e652870f1687450d5c34e14cb0094b5
Certificate serial:       019E1F111B24E4E205BBB6D6A8D8F6B9D58E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft
Manifest number:          026D
Signing time:             Wed 13 May 2026 02:01:15 +0000
Manifest this update:     Wed 13 May 2026 02:01:15 +0000
Manifest next update:     Thu 14 May 2026 02:01:15 +0000
Files and hashes:         1: 5pQj7qkmBcSMfaLVfZDv-7kT9DI.roa (hash: Rd6vx0quono9MPD1F0vpd55eYapHMtF51xcO/Hw6eew=)
                          2: fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl (hash: ose/XsUwZ5u7A+pok09aaSooygF/aTHNd23OG2bgKZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:1b:24:e4:e2:05:bb:b6:d6:a8:d8:f6:b9:d5:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d346ace4e652870f1687450d5c34e14cb0094b5
        Validity
            Not Before: May 13 02:01:15 2026 GMT
            Not After : May 14 02:01:15 2026 GMT
        Subject: CN=487bc38fefa316db5ad0e6c77762633f561d1a89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:35:62:dc:19:82:ac:97:bf:16:91:c0:55:fd:
                    ba:5e:fe:73:e8:95:90:63:9f:5b:ad:8e:8d:c1:b5:
                    24:1c:cf:14:12:78:8d:79:8b:5a:dd:4b:03:8e:57:
                    a3:bd:8e:10:c5:eb:41:83:c5:23:cf:66:a6:62:fe:
                    f4:96:a9:71:72:5b:e6:af:2c:0b:fa:c4:e8:ef:44:
                    29:41:d0:0b:7f:7d:62:bd:69:73:0f:64:dc:7f:db:
                    74:80:7b:bf:15:62:60:3d:b9:24:d9:45:8a:98:4d:
                    b7:86:f2:5f:72:b3:83:ac:36:6b:47:05:37:56:b4:
                    1f:53:36:6c:a3:3d:2d:69:30:2c:6f:9c:de:2d:4e:
                    6c:d6:39:8e:13:d7:71:a7:26:46:b7:80:a6:1b:2b:
                    77:75:07:a3:e9:b1:bd:91:a1:0c:87:9b:5c:85:67:
                    59:f0:42:d9:67:cb:d8:f7:ec:10:9c:5b:e4:f9:a3:
                    d5:e1:9d:5d:6e:fa:21:19:9c:b1:06:80:ea:9f:a9:
                    91:ff:f5:dd:ed:1a:43:96:df:a6:e1:20:fe:5d:7b:
                    e4:54:77:29:69:c5:f1:78:2d:3d:0e:d9:24:f6:83:
                    9a:e8:9c:73:eb:ef:cb:30:74:ea:52:e9:f6:3a:d1:
                    9c:89:18:04:89:81:69:8d:48:38:4a:07:0e:2f:27:
                    cb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:7B:C3:8F:EF:A3:16:DB:5A:D0:E6:C7:77:62:63:3F:56:1D:1A:89
            X509v3 Authority Key Identifier:
                keyid:7D:34:6A:CE:4E:65:28:70:F1:68:74:50:D5:C3:4E:14:CB:00:94:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:6f:f5:0a:63:b9:c3:89:99:bc:44:2f:89:c2:03:ee:36:cc:
         de:23:67:69:43:32:80:7e:71:ba:3f:1b:7b:c1:ea:32:3b:1b:
         50:14:de:ca:2d:5b:97:2e:4a:e7:8f:0d:11:02:8d:c6:76:0d:
         2f:43:a3:51:a1:7b:30:b8:d1:24:ec:0b:32:0c:66:75:c1:c9:
         3d:34:9f:9b:10:8b:97:b3:a2:20:1d:d7:4a:b4:b1:c8:c8:9d:
         aa:96:34:a3:10:49:19:4b:03:b8:2c:f8:70:5c:1a:8e:76:98:
         8c:10:2d:c7:e9:9d:83:6b:c4:c8:16:ee:d1:0b:53:6f:99:68:
         7c:0f:28:78:79:86:d5:8e:7b:64:b3:c1:d3:62:76:77:a8:12:
         aa:d3:a8:98:6b:e9:13:28:58:9f:da:d4:a4:e2:7b:2c:f6:f3:
         fe:03:8c:4e:86:11:38:3e:0a:bf:2f:27:02:68:56:37:de:ae:
         57:2b:60:a7:be:2e:06:aa:49:89:c1:74:f8:93:c8:2a:27:12:
         64:da:25:23:87:e3:6f:4d:ff:2f:46:14:17:53:b7:53:2f:4f:
         c7:aa:59:0c:56:e2:cd:38:55:5f:d3:de:8e:e2:13:1d:29:70:
         fb:5a:c0:36:ad:97:87:03:77:09:b6:72:39:db:a3:b9:99:64:
         86:67:af:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:16:14 2026 by rpki-client