Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
File:                     61E1nJmJuWPpWUwZKcggNn3jIt0.mft (raw, json)
Hash identifier:          280IxpcWQDJHVhXkSxC8z9d9qpWgL2XA8tVWaE0Y22c=
Subject key identifier:   1C:05:CF:2F:38:E1:B1:CD:C9:8E:9B:77:53:FC:40:34:0C:02:BF:6E
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Certificate issuer:       /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial:       019E1CEBAC3A2BA8906A1182CA997EF11062
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
Manifest number:          129F
Signing time:             Tue 12 May 2026 16:01:07 +0000
Manifest this update:     Tue 12 May 2026 16:01:07 +0000
Manifest next update:     Wed 13 May 2026 16:01:07 +0000
Files and hashes:         1: 5eboZEmHhXz6o0PStVWCZPbL7rc.roa (hash: MeF/gO1mMkaKIeIHm4Kk6Ux2q6cjHQDMqps6ZDdVRPA=)
                          2: 61E1nJmJuWPpWUwZKcggNn3jIt0.crl (hash: 811xFEcZVTtn5LP2a4zGDbbO7eSrW3gpfNFx21qA6p4=)
                          3: jXliN4EDhtnnWK1SYNXSm1Wu948.roa (hash: hXwtMGx2meYBUkMkCElFglYZYtQdBeMgy2KEUpreGXI=)
                          4: uJnEIKPWJw-326x5IBBMzolFrLM.roa (hash: moDOTpNm3tFCIAX5WqMAOpWVKX58N/OLMiWutEeF9mo=)
                          5: vy3qd6walzhl7tZubGmW08QmYpw.roa (hash: GjD8b7Cc0LKnz1abLpNBhT8sfyli2VNmhuoKhcV1ueM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:ac:3a:2b:a8:90:6a:11:82:ca:99:7e:f1:10:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
        Validity
            Not Before: May 12 16:01:07 2026 GMT
            Not After : May 13 16:01:07 2026 GMT
        Subject: CN=1c05cf2f38e1b1cdc98e9b7753fc40340c02bf6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:77:7d:2c:b9:77:a0:e1:ef:35:07:dd:97:f8:
                    c8:b5:c5:aa:16:3b:e7:52:dc:ff:14:42:02:0d:54:
                    12:4f:6b:f6:2b:1c:04:ef:1a:82:1f:b2:71:2f:fc:
                    4e:7c:5c:54:9e:58:d5:48:af:19:97:21:f5:b2:70:
                    8d:42:57:65:83:f7:ac:ad:5f:4a:04:18:52:6e:ba:
                    9d:40:c2:d1:57:37:50:c3:95:e1:4d:3f:7b:2a:54:
                    14:b4:5b:59:be:1e:3d:4d:17:37:e9:54:fd:70:82:
                    88:c6:26:98:19:2b:99:db:71:9a:d6:17:0c:2f:d3:
                    cc:2b:b0:5d:1a:9a:8b:4d:33:c2:e4:01:3a:f5:26:
                    56:6f:ed:35:c1:17:c1:1c:38:e5:66:92:03:1b:a1:
                    03:78:70:3e:ee:16:87:fa:7a:a9:33:84:7e:9e:5b:
                    97:a9:10:61:69:1b:e6:42:98:10:5a:12:0e:d7:a4:
                    52:7f:b8:4f:04:ed:17:52:c6:98:a5:06:2a:a8:25:
                    fe:9b:e5:85:01:9a:bf:c2:4d:d5:3f:ac:f5:c0:94:
                    32:ba:8c:36:b0:23:93:06:16:c8:b8:28:52:3d:e7:
                    e6:89:f5:c0:e7:ff:4c:85:58:45:32:1c:a6:0d:73:
                    73:fb:f8:b1:82:2a:49:95:fc:f6:a3:4f:21:25:fa:
                    30:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:05:CF:2F:38:E1:B1:CD:C9:8E:9B:77:53:FC:40:34:0C:02:BF:6E
            X509v3 Authority Key Identifier:
                keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:99:3c:d5:07:53:8e:c8:77:a3:85:95:c5:8a:54:f1:e5:d4:
         3f:c7:15:94:99:2d:eb:38:30:65:9c:8c:67:b3:e4:14:0f:22:
         6e:00:a9:e4:35:a7:b2:af:27:cd:e4:a3:c8:4a:b9:f9:ae:13:
         b0:da:24:ca:85:93:75:e2:35:2e:88:65:fa:fe:91:c3:0e:15:
         a0:10:f0:01:cc:a2:5f:09:3b:76:05:3e:7a:9c:ff:ee:ca:c1:
         52:c5:f5:76:65:75:d6:f4:a8:13:0c:37:0d:82:f1:b2:b4:3d:
         46:59:66:65:13:ef:dc:ca:6b:70:02:98:7a:7a:ff:62:89:45:
         ed:f9:61:d2:7a:4d:bf:30:64:94:ad:87:38:76:7d:e1:76:9d:
         18:b4:a6:da:e2:ae:59:cf:2d:6d:da:ee:e7:bb:9d:f0:b9:b0:
         9f:10:9c:73:86:6c:23:b2:47:03:d2:49:b1:9e:63:24:b1:d3:
         7a:d8:3a:9a:32:cc:a5:80:c6:cf:50:23:9e:69:e2:58:2e:e7:
         95:8a:45:44:17:10:bd:12:f3:85:f6:4b:1b:c0:02:71:fe:8c:
         3a:dd:81:38:cf:73:03:53:86:2e:56:db:30:04:84:89:ca:77:
         fc:1b:a4:78:5c:77:30:9e:e7:47:f1:6e:c0:72:66:82:96:df:
         bf:2c:fc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:14:52 2026 by rpki-client