Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
File:                     rMUN9rAd_29U64A5skl6p_TvEs0.mft (raw, json)
Hash identifier:          BRwT2l2sQFHajiXJ9H0XwcZ85N6K1aTpKkObyDQGqkc=
Subject key identifier:   C0:A3:73:AB:A4:CF:ED:D7:05:E5:F4:23:85:27:E6:EF:DD:1B:29:F8
Authority key identifier: AC:C5:0D:F6:B0:1D:FF:6F:54:EB:80:39:B2:49:7A:A7:F4:EF:12:CD
Certificate issuer:       /CN=acc50df6b01dff6f54eb8039b2497aa7f4ef12cd
Certificate serial:       019E1FB6014C9C3BFE83A385C502B1370193
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
Manifest number:          0752
Signing time:             Wed 13 May 2026 05:01:21 +0000
Manifest this update:     Wed 13 May 2026 05:01:21 +0000
Manifest next update:     Thu 14 May 2026 05:01:21 +0000
Files and hashes:         1: rMUN9rAd_29U64A5skl6p_TvEs0.crl (hash: LZ3731mKrvWgt5jkAvtb5UId9IQj+QO696eZO4FQG14=)
                          2: vomEUArk8PuYIYbTC4XbIk0d7Gw.roa (hash: zYSw8Jy0jy+EoxtEcsz4ao8v/Mpz2r8TG2Vb6dYscW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 05:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b6:01:4c:9c:3b:fe:83:a3:85:c5:02:b1:37:01:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acc50df6b01dff6f54eb8039b2497aa7f4ef12cd
        Validity
            Not Before: May 13 05:01:21 2026 GMT
            Not After : May 14 05:01:21 2026 GMT
        Subject: CN=c0a373aba4cfedd705e5f4238527e6efdd1b29f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e4:5f:69:cc:2d:d2:72:9f:10:ed:87:2d:f4:
                    00:d9:5a:a5:01:18:97:7d:30:d7:8c:e7:55:9c:d3:
                    2c:26:52:5e:2a:d8:bd:e0:41:7d:8f:f4:24:42:3f:
                    cc:e0:8a:ce:17:d9:9c:29:fb:52:c2:fe:56:73:47:
                    88:e3:ae:60:da:0f:88:79:31:52:85:b7:95:d8:15:
                    be:f6:e1:f6:e8:23:ba:92:9f:b5:0f:fe:1c:6f:fc:
                    ff:f4:b2:30:00:c8:12:c2:1a:c7:c6:ec:1e:67:8f:
                    9e:a3:25:b8:06:ea:12:85:4d:03:16:6b:de:ac:2f:
                    69:d5:3d:8b:30:3b:b4:96:c1:57:80:b1:9f:7d:40:
                    a6:09:d4:a5:b8:17:a4:a1:e2:d9:cc:c6:64:44:71:
                    83:96:fc:a2:a7:49:78:4a:27:f3:f3:f8:85:05:28:
                    2e:c6:ac:09:e5:94:f1:0a:f7:c1:4a:e4:97:64:03:
                    06:fd:d4:d1:52:19:b4:88:0a:c7:27:b4:f2:bf:bb:
                    61:87:b6:6c:8a:84:82:d8:82:2f:fe:df:11:0b:83:
                    5b:a5:60:d6:08:e3:5f:21:a6:ca:3b:59:1b:44:7f:
                    91:b5:bf:aa:e0:07:e0:b4:5f:b0:29:5d:05:1d:40:
                    05:ac:ce:5a:bc:b6:e2:c9:34:cb:ec:8c:4e:39:27:
                    69:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A3:73:AB:A4:CF:ED:D7:05:E5:F4:23:85:27:E6:EF:DD:1B:29:F8
            X509v3 Authority Key Identifier:
                keyid:AC:C5:0D:F6:B0:1D:FF:6F:54:EB:80:39:B2:49:7A:A7:F4:EF:12:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:97:34:9b:2e:d0:15:ab:3d:68:b4:74:f9:c1:f9:45:40:e5:
         3b:8d:91:a7:10:96:1c:0d:14:d9:80:05:57:08:ec:1a:5e:8f:
         0e:af:82:e7:d2:32:88:93:1f:d0:e8:a6:53:80:0e:d0:fa:62:
         ae:ef:ab:b1:38:6b:eb:59:7a:28:e3:2e:f2:fa:a1:b1:a8:94:
         77:64:ab:92:72:51:9b:e3:29:48:07:43:ea:cd:b2:a3:80:5c:
         fc:2a:5e:44:34:83:2e:e6:b3:2f:90:33:f1:e6:d3:4c:c6:ee:
         dc:02:f9:32:d7:c3:60:2b:10:9a:78:c5:dc:1a:ef:62:cc:d3:
         fc:fd:5c:37:6c:d9:1e:21:2b:41:aa:a5:b4:3f:db:ff:bb:93:
         47:c2:fa:3e:48:0c:de:0f:68:64:09:8e:e1:4a:22:72:38:ad:
         43:3c:82:e0:0d:47:85:29:be:41:28:5a:6b:4f:6d:e6:4d:5d:
         27:f6:e3:9d:45:f6:9b:8e:d1:76:90:38:0f:b4:d5:9e:5b:18:
         7c:59:74:77:e7:6e:c6:ba:b5:95:26:8e:6f:7d:d0:c0:d1:74:
         07:1a:af:3a:35:49:03:ea:ca:a9:15:c5:34:b6:f0:65:e3:62:
         84:d4:4e:c4:79:d0:5a:38:fd:74:d9:0d:b2:a8:d9:b8:b3:34:
         06:f1:4f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:27:35 2026 by rpki-client