Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
File:                     _fVLGHmhRTl_rA01jvq9L1_QrKE.mft (raw, json)
Hash identifier:          BqTLmttjQ3fJDcBumMO1EAUob2kyoNKMs5KFziOmUHk=
Subject key identifier:   9E:B4:CE:83:B8:9D:A1:9D:2E:BC:27:B0:F3:4C:F4:F2:53:F5:67:8A
Authority key identifier: FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1
Certificate issuer:       /CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1
Certificate serial:       019E1EA2F2E22CFA98DD3C2E782A15046F79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
Manifest number:          03CA
Signing time:             Wed 13 May 2026 00:00:55 +0000
Manifest this update:     Wed 13 May 2026 00:00:55 +0000
Manifest next update:     Thu 14 May 2026 00:00:55 +0000
Files and hashes:         1: 2QUxpcZo42MO8NPw3ViO527hXWk.roa (hash: jXv9njLEXA5SkLC2GOthlPZiLCWl9vdzZCcofBzcG18=)
                          2: JNor73gXz2ec5FVJvGqRzBpyxSI.roa (hash: k/2ZGjtnrbIQP29sZmOjF46Dom6I0jn9nqS/95MSEu4=)
                          3: _fVLGHmhRTl_rA01jvq9L1_QrKE.crl (hash: SjthsrsG+WDM855yqll1k2HKRD9mD/Ldlhqo2MQxrFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:f2:e2:2c:fa:98:dd:3c:2e:78:2a:15:04:6f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1
        Validity
            Not Before: May 13 00:00:55 2026 GMT
            Not After : May 14 00:00:55 2026 GMT
        Subject: CN=9eb4ce83b89da19d2ebc27b0f34cf4f253f5678a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:db:cb:e8:de:8a:a8:62:a9:bf:7c:54:c3:40:
                    01:9e:c1:7e:81:d3:5c:a0:5f:61:2d:06:ed:8a:38:
                    ea:e9:a5:63:e9:bc:3a:65:f8:c1:54:df:93:e8:87:
                    25:32:16:5b:fb:03:3a:8c:02:82:87:ba:34:58:85:
                    ad:13:e6:e9:0e:3e:57:dc:c9:25:03:25:80:d0:8c:
                    d2:5d:fc:f2:a1:d3:e1:9f:3b:a8:4e:23:61:dd:c8:
                    9b:03:2f:49:8a:af:70:52:0b:23:0d:d4:53:8f:03:
                    32:59:45:8b:38:dc:77:f2:dd:dc:fd:f1:06:83:23:
                    ca:0e:22:af:bf:43:e4:e7:00:92:56:ce:f0:b0:d6:
                    82:d1:44:08:71:8d:74:ec:3a:30:a3:65:02:08:8f:
                    23:2d:86:66:3f:58:f7:fb:6e:81:94:58:5c:32:f4:
                    dd:61:36:9c:0c:6d:19:ec:51:32:3e:f8:4e:2e:25:
                    65:b0:46:1b:80:6b:8c:1f:ff:ea:5a:1c:11:ae:b3:
                    10:ac:79:70:9d:b0:6a:16:52:ad:02:ca:b5:a2:c2:
                    7e:bb:f1:14:70:55:01:4c:42:7e:e9:72:69:f2:f1:
                    27:40:ee:0b:d0:cf:2e:cb:ba:c4:b4:42:dd:52:aa:
                    fd:5c:c6:03:4e:f8:a1:04:73:20:82:7a:91:96:8a:
                    8d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B4:CE:83:B8:9D:A1:9D:2E:BC:27:B0:F3:4C:F4:F2:53:F5:67:8A
            X509v3 Authority Key Identifier:
                keyid:FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:23:a3:94:37:c5:2b:cf:13:69:82:7c:bc:07:63:34:b5:62:
         b1:84:5d:53:16:f2:d8:09:f1:7c:12:73:12:69:c1:2b:65:5b:
         1b:8a:45:f9:99:30:50:75:5c:9d:18:b8:b7:b3:1f:51:c7:a5:
         b0:67:fb:e2:66:8f:fd:4f:23:d7:c8:5c:c5:7b:52:89:5d:20:
         bc:9a:c6:cf:48:24:28:43:0e:19:a1:8d:82:a5:de:2b:7a:89:
         6e:0c:14:8a:7a:df:c5:22:53:1d:66:60:db:09:d1:21:04:77:
         0d:14:4e:b0:ee:20:f7:8e:3a:f9:86:8a:e8:9f:e8:2e:e4:b3:
         3d:c7:a1:41:55:cf:24:97:d0:9c:86:67:18:38:8e:2b:22:ef:
         f7:66:91:c9:8a:36:a2:49:f2:13:26:b9:d5:42:65:94:fd:6b:
         e0:fe:b3:03:12:69:3a:77:3c:1e:e1:0b:6c:ee:b7:a8:ab:6e:
         81:b7:48:64:49:6f:77:fd:0d:75:b5:dd:dc:d2:bb:4c:8b:84:
         41:3e:ce:90:be:7d:5b:b9:e9:3f:3f:ab:45:80:c7:ac:b6:2a:
         af:7e:7b:19:e7:76:49:2d:ee:d8:bc:e2:7d:84:53:73:ef:36:
         57:a2:f1:05:9a:f8:9f:43:b0:af:74:3d:fc:a7:9d:4b:d8:35:
         31:aa:03:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:19:30 2026 by rpki-client