Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
File:                     CAGEeJFIcaqw4cADbTYm661uIMw.mft (raw, json)
Hash identifier:          urEvENUdbUI0ltag4jPxaHf77K+tieHDoidu1ovwPxE=
Subject key identifier:   5B:0D:EE:AA:0E:C2:CC:2F:66:07:EB:2A:77:C8:45:41:74:DD:3B:63
Authority key identifier: 08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
Certificate issuer:       /CN=08018478914871aab0e1c0036d3626ebad6e20cc
Certificate serial:       019E1BD8B5FF5F1F2CA446F9CBC0F978183B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
Manifest number:          1540
Signing time:             Tue 12 May 2026 11:00:47 +0000
Manifest this update:     Tue 12 May 2026 11:00:47 +0000
Manifest next update:     Wed 13 May 2026 11:00:47 +0000
Files and hashes:         1: CAGEeJFIcaqw4cADbTYm661uIMw.crl (hash: 2zAcurjQXL77BlHSXzy7TujcM0T8PyUbksBQVZrbHLU=)
                          2: Zd7N4oi7jgCKvlVl_PSF0xPERYA.roa (hash: EyGQp9Tr3UHMVF5vszwF0WIX2jRn29S+5KpDje4nblg=)
                          3: _5XI55CGPr_29rfxJRh8PWW9xI0.roa (hash: +AqJmUu9717kFBpcrIYfXtKgNzPHUS4Q+/khsyHEsCw=)
                          4: gebfehKBm0ZMvC6QIM8PvsoEboo.roa (hash: IX5MGc/yeIa0cd1NLArqnrmm5WQdn3pQJr9AOfiIcCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 11:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1b:d8:b5:ff:5f:1f:2c:a4:46:f9:cb:c0:f9:78:18:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08018478914871aab0e1c0036d3626ebad6e20cc
        Validity
            Not Before: May 12 11:00:47 2026 GMT
            Not After : May 13 11:00:47 2026 GMT
        Subject: CN=5b0deeaa0ec2cc2f6607eb2a77c8454174dd3b63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6a:5c:ad:6e:0a:07:4e:e1:9e:0c:e8:a4:93:
                    3d:9a:e3:4f:f3:09:9a:9a:9a:0e:a9:eb:87:ee:e1:
                    7f:5e:df:70:44:12:98:0a:51:9e:4e:e2:74:8d:57:
                    6b:f7:2e:64:cf:68:8d:d4:02:00:f7:37:01:9a:c3:
                    5b:fe:51:ed:47:cf:81:06:2d:3d:df:9c:99:b1:c5:
                    69:22:e6:a7:91:75:2f:25:41:43:60:22:32:81:79:
                    cf:89:4d:39:0f:92:1d:dc:25:77:09:7c:d4:e2:e7:
                    e4:35:bf:f4:85:95:6a:2f:66:2e:2b:51:61:00:5c:
                    46:ae:c6:eb:55:ac:83:7c:f2:e0:f5:d7:cb:88:1b:
                    f3:71:16:cb:22:f6:68:23:80:9a:94:a6:d9:19:ed:
                    dc:ff:3d:b9:50:1b:57:23:05:2b:e5:21:55:e2:e0:
                    43:3e:b6:5c:92:3a:e3:b9:47:94:ad:36:5d:24:2f:
                    cf:16:04:ec:b4:78:6b:2c:54:53:99:1a:f2:7a:38:
                    97:77:50:77:dd:f3:ff:15:c4:04:3b:0b:75:b0:8d:
                    18:10:d6:9c:9c:74:83:17:cf:02:3e:1b:dc:49:8a:
                    cc:70:d2:22:23:64:8a:53:61:04:4a:63:f6:87:ee:
                    0e:37:db:e6:a0:7d:7f:ac:6e:e0:ac:89:06:2b:b6:
                    a0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0D:EE:AA:0E:C2:CC:2F:66:07:EB:2A:77:C8:45:41:74:DD:3B:63
            X509v3 Authority Key Identifier:
                keyid:08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:7b:8b:26:db:ab:ce:b1:29:d4:18:8a:bf:dd:12:28:86:2a:
         fd:cd:91:46:02:c2:a7:c6:42:7f:5d:7e:02:75:f4:5d:22:7e:
         17:d3:a9:e3:cd:75:d7:27:99:68:7b:99:4c:e5:57:76:8d:0b:
         f2:f1:c5:0a:fe:60:00:d2:82:e9:95:3b:6c:12:4b:9a:6d:c2:
         e5:2b:71:9a:26:47:d1:ef:fc:68:9d:77:a8:e0:8f:60:19:6a:
         31:9d:ea:12:3b:20:7e:b5:ff:a4:1b:05:bf:30:b1:a4:a1:27:
         99:56:d1:7a:14:2e:28:55:7c:80:6c:cf:02:2d:6c:de:29:d1:
         65:fc:13:ab:4e:ca:2f:43:f5:79:5b:5f:8c:5a:c9:18:d9:2b:
         96:23:cd:91:5b:dd:70:9f:05:a7:c5:a9:05:1f:f0:2e:b9:33:
         4e:df:4b:9e:4e:35:60:84:28:bb:63:ec:dd:21:d5:16:5e:13:
         ec:7e:79:88:8c:3e:82:d0:54:38:c8:dc:f9:a1:eb:f9:ad:d5:
         7f:df:54:68:d2:0d:c4:de:32:10:1b:2a:c3:f3:b2:8d:0d:e1:
         c7:64:92:62:20:b7:2d:fa:04:ed:1f:f1:f7:64:10:5a:5f:74:
         fc:26:fd:bf:41:47:56:23:d7:72:ab:ce:d7:26:9f:8d:fb:e9:
         09:b5:97:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:42:46 2026 by rpki-client