Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
File:                     cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft (raw, json)
Hash identifier:          pMpcNu1EVfVNA7KWlnrdIaf0q1Dl1XTc7t4eoxikoQw=
Subject key identifier:   4D:6E:C8:F0:2F:F8:85:85:D1:7B:A7:D4:E6:9A:D9:D1:C7:B3:29:B5
Authority key identifier: 73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46
Certificate issuer:       /CN=7316772efce2a133fb7f8720929d0560cef1db46
Certificate serial:       019E20FF9A4F5986DAC42061DC9CFF4A3085
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
Manifest number:          0712
Signing time:             Wed 13 May 2026 11:01:22 +0000
Manifest this update:     Wed 13 May 2026 11:01:22 +0000
Manifest next update:     Thu 14 May 2026 11:01:22 +0000
Files and hashes:         1: W00kh9cFoXYEts6Z_wNoICvROmI.roa (hash: 6F92izfRGMl8gegm30l362lw0oFK4K1whATYCIM0f9A=)
                          2: cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl (hash: iREeqPlkiimflSGzn0vX17B9KcgO8LZkPBYkqebc3PE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 11:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:ff:9a:4f:59:86:da:c4:20:61:dc:9c:ff:4a:30:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7316772efce2a133fb7f8720929d0560cef1db46
        Validity
            Not Before: May 13 11:01:22 2026 GMT
            Not After : May 14 11:01:22 2026 GMT
        Subject: CN=4d6ec8f02ff88585d17ba7d4e69ad9d1c7b329b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:26:0d:49:8a:85:38:8c:28:43:98:92:a8:00:
                    de:17:0f:ef:59:d0:d5:a4:5b:5b:4e:ae:aa:9b:f5:
                    da:d5:0e:4b:11:db:74:42:7b:0d:42:29:cc:e8:bd:
                    09:e0:ba:38:9d:39:bf:5f:88:1e:4c:7c:b3:37:89:
                    8a:72:31:e2:17:55:67:ce:3a:98:d6:5c:0e:bd:17:
                    3b:15:cd:d7:bf:d6:61:3e:48:ac:9e:7e:f4:07:d8:
                    1f:4a:91:db:a7:ba:8a:0e:45:95:cb:d7:99:a1:ed:
                    d2:f0:dc:4d:db:90:9d:6f:05:c5:a8:29:aa:6d:14:
                    2c:f2:c7:bd:df:21:98:c1:51:47:98:ae:79:ff:99:
                    26:49:27:94:1e:a4:c6:f8:93:49:db:7d:f3:a0:14:
                    6f:27:0c:34:70:68:01:13:e4:5a:ec:37:8b:ce:b0:
                    ae:b2:74:c8:44:6a:2e:c8:33:42:05:c7:7e:c6:35:
                    22:8f:b6:46:d5:42:de:89:59:7f:35:e7:20:f0:9c:
                    a8:86:9b:76:cd:45:ad:1e:18:3e:b1:cd:cc:2f:97:
                    a4:d7:ca:16:ef:ab:1f:c3:f2:df:29:51:ec:1e:81:
                    23:82:1a:6a:f4:75:3f:06:43:1b:3a:20:f7:3a:27:
                    38:62:98:86:71:b4:64:af:ce:e7:a1:e1:cd:f3:c1:
                    59:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:6E:C8:F0:2F:F8:85:85:D1:7B:A7:D4:E6:9A:D9:D1:C7:B3:29:B5
            X509v3 Authority Key Identifier:
                keyid:73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:8d:c3:9e:ef:fb:59:0d:a7:9a:01:f0:99:b2:22:1e:69:29:
         9f:bf:2e:5d:53:2d:6e:81:cc:ae:65:1c:4b:d0:7d:31:0b:88:
         31:b6:1b:cf:25:6b:f5:92:15:75:0b:53:47:47:7c:ca:1d:25:
         17:e8:a5:8f:08:5a:eb:23:89:ad:a7:81:7f:66:d3:64:ce:07:
         81:ab:1b:e9:a2:7d:5a:e2:13:87:be:d1:d4:a3:7c:35:1d:3f:
         17:eb:1f:00:bc:e5:fa:c1:5d:4e:60:7a:22:2e:5c:ef:3c:d5:
         03:74:a2:e3:43:89:ce:a2:e6:5b:dd:c5:b4:93:cb:ce:95:b8:
         73:d3:3a:e7:29:77:6d:36:5a:59:99:e9:7c:b2:b2:c2:e1:1f:
         85:86:24:b3:33:20:ae:06:9f:36:4e:b4:28:8e:69:20:77:4a:
         95:5c:89:6b:7c:c0:7a:e0:bc:1a:de:99:24:4d:e0:22:00:f3:
         dc:55:33:e1:97:d1:1b:8c:1a:39:39:a1:b2:5d:bb:2d:19:fb:
         fb:63:14:c1:3e:25:3c:fe:7a:18:ce:9c:35:98:ab:71:a6:54:
         57:3e:18:68:d1:62:79:0b:89:31:6f:74:d5:cf:39:b7:fb:a0:
         e5:7f:15:71:63:6e:81:1f:76:a3:4f:ba:e4:43:2a:fd:16:5a:
         58:7a:4c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:37:56 2026 by rpki-client