Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
File:                     t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft (raw, json)
Hash identifier:          +s03VZbAWMcNw2Qwi5qvhkmGeJhOwydecaA1zAtknHg=
Subject key identifier:   CC:1A:52:B3:2E:80:F6:2B:E1:7E:F2:0E:D0:31:83:3A:C8:8E:56:A0
Authority key identifier: B7:9D:E9:45:8D:19:0E:63:43:29:F9:DF:15:03:B5:22:2C:16:24:EE
Certificate issuer:       /CN=b79de9458d190e634329f9df1503b5222c1624ee
Certificate serial:       019E20C83A06935880186412D29FAD6A62B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
Manifest number:          0B1A
Signing time:             Wed 13 May 2026 10:00:53 +0000
Manifest this update:     Wed 13 May 2026 10:00:53 +0000
Manifest next update:     Thu 14 May 2026 10:00:53 +0000
Files and hashes:         1: clFIubjbLQqxbnoigbE4pHEFWAU.roa (hash: 1t4DJkKFGPggpFIGiXnW0fwPm80oShJdtzZrjtLGtZQ=)
                          2: t53pRY0ZDmNDKfnfFQO1IiwWJO4.crl (hash: L/HnmAASoouYHJuxWiuOpzLpzQ0+VI/rCkhgQvdU4Jg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:c8:3a:06:93:58:80:18:64:12:d2:9f:ad:6a:62:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b79de9458d190e634329f9df1503b5222c1624ee
        Validity
            Not Before: May 13 10:00:53 2026 GMT
            Not After : May 14 10:00:53 2026 GMT
        Subject: CN=cc1a52b32e80f62be17ef20ed031833ac88e56a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:83:3a:7e:0c:8a:df:99:b8:f8:68:21:84:2f:
                    a2:16:e4:89:34:5f:7d:9f:d3:e0:a5:32:03:6c:77:
                    fd:da:d6:13:d4:03:a7:5e:87:70:38:db:2d:50:40:
                    64:87:32:fd:f8:59:00:fe:90:20:fb:62:13:41:db:
                    73:33:b3:5a:bd:37:df:f5:21:23:4f:de:9e:7b:4f:
                    61:f7:c1:69:73:fd:0d:6d:15:cf:a0:84:6f:ee:98:
                    ab:b6:94:35:c7:b7:e4:ce:1b:6a:48:73:ac:b4:6e:
                    d3:7c:b3:cc:de:24:9e:cd:31:41:42:55:00:09:bf:
                    9c:5d:81:37:04:16:95:0e:30:0f:a7:b6:0f:0a:2a:
                    d2:8e:c8:55:9e:ca:a6:78:f3:7f:6e:28:60:08:b8:
                    16:42:f0:14:ce:8b:89:6d:ca:1f:dd:87:65:08:03:
                    b0:e6:3a:53:c5:85:a6:99:20:d1:4c:25:dc:4a:e9:
                    44:61:e2:24:b4:60:ca:a2:5e:33:52:88:99:94:41:
                    7c:d1:a9:db:4a:67:c0:ce:01:b6:39:35:d4:06:b1:
                    3c:3c:66:e2:27:2c:fd:f3:fb:08:27:9b:e3:e2:72:
                    aa:1c:e8:f0:c7:dd:6e:c4:6b:55:ef:95:65:cf:ec:
                    87:61:0f:9f:2a:6e:b5:88:49:9d:14:7e:6a:aa:bf:
                    f6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1A:52:B3:2E:80:F6:2B:E1:7E:F2:0E:D0:31:83:3A:C8:8E:56:A0
            X509v3 Authority Key Identifier:
                keyid:B7:9D:E9:45:8D:19:0E:63:43:29:F9:DF:15:03:B5:22:2C:16:24:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:b7:44:d7:ac:7f:76:ce:54:a7:1e:24:a6:78:42:8c:77:7c:
         0b:e2:45:3e:36:1d:ce:0d:69:ce:bb:49:a8:86:64:53:a7:ea:
         7e:5e:de:28:75:4a:82:8c:9b:62:27:94:d2:21:63:b8:79:e8:
         1d:8f:e6:f9:a4:e2:31:26:03:7b:50:4e:ef:32:d2:a8:79:08:
         ff:8c:7b:0f:ac:17:e7:ef:64:9a:ea:d2:6e:36:0e:39:8d:ff:
         58:e4:5a:94:c4:d0:b4:be:fe:51:32:99:40:43:a9:37:86:84:
         5e:33:bd:26:b9:77:a2:e8:a6:b4:e1:72:c6:5a:c5:8c:e1:0d:
         3d:53:35:b2:e0:74:2e:a4:e0:87:2a:e7:07:cc:10:8c:35:59:
         7f:8e:86:1d:14:21:33:7d:89:1a:f5:05:0a:83:a4:ab:0a:f7:
         03:43:b0:7d:5a:f8:41:f7:14:c2:c7:82:82:c1:89:cd:8f:d9:
         6f:57:2e:58:a8:03:2d:63:32:31:47:df:67:31:2a:71:b0:fc:
         c8:c4:19:ca:26:d3:47:1d:2f:74:62:fa:c7:6d:d8:11:95:9b:
         fc:45:db:15:9f:e9:b5:92:85:90:75:46:38:28:1f:a7:9e:98:
         73:0d:fd:4b:f1:f4:03:91:88:86:ed:ca:63:d0:75:ab:ce:16:
         e4:10:e4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:15:27 2026 by rpki-client