Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
File:                     B5yXOPx7HkBkxcY2u6aotUk5HKg.mft (raw, json)
Hash identifier:          UoXuQsg+ZUnCKWB2ByEG5aNUXzNWAN9EDnsacpZsNpI=
Subject key identifier:   AD:F9:22:9A:08:26:9E:51:D7:1B:A1:26:A8:66:9A:ED:F6:69:C8:D5
Authority key identifier: 07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
Certificate issuer:       /CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Certificate serial:       019E1D22B2DCF7000149A9D5BFFAAA7344BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
Manifest number:          1055
Signing time:             Tue 12 May 2026 17:01:13 +0000
Manifest this update:     Tue 12 May 2026 17:01:13 +0000
Manifest next update:     Wed 13 May 2026 17:01:13 +0000
Files and hashes:         1: B5yXOPx7HkBkxcY2u6aotUk5HKg.crl (hash: 0o3GPSVZfigMhqLGolpR+d+WYuiNPpzV/1ZqTDncaBI=)
                          2: ea9c47nLhB7nrDPtMPdzkgxr_NQ.roa (hash: vCEAR5IAAEJK2ZW1HR6IXW5uYjAwQMBi35YeD/PEe4Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:b2:dc:f7:00:01:49:a9:d5:bf:fa:aa:73:44:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
        Validity
            Not Before: May 12 17:01:13 2026 GMT
            Not After : May 13 17:01:13 2026 GMT
        Subject: CN=adf9229a08269e51d71ba126a8669aedf669c8d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f7:59:bb:ee:af:7f:06:a6:7b:ee:45:8f:39:
                    55:9c:60:12:a0:8d:fb:08:40:f8:47:02:a2:fb:b6:
                    26:7d:f4:b6:9b:99:5f:08:b6:c3:d9:d0:5e:c4:f5:
                    6d:a3:d7:52:77:77:bd:99:32:9f:53:76:72:f8:e3:
                    ec:32:e5:93:cd:6b:5a:a9:f9:42:2e:1c:fa:69:8b:
                    ea:77:c6:44:3d:80:3a:de:4f:54:a8:63:ec:9a:41:
                    50:ae:5d:7b:f5:1d:c8:bf:46:ea:69:c5:34:40:90:
                    fb:9b:b3:b8:a3:35:1e:1f:99:5c:40:fd:0a:67:1e:
                    a2:88:54:61:16:90:e2:83:6d:10:00:aa:c1:d5:c7:
                    6d:53:36:e9:d9:e4:c3:9c:0f:d4:76:13:3b:e7:f2:
                    97:bb:55:f8:fb:08:ae:f6:24:a7:d2:b2:af:db:c3:
                    5d:54:a4:0a:93:45:ad:9f:56:e7:b4:26:da:ad:fc:
                    86:33:49:ab:3c:5d:e9:f0:34:de:50:a5:83:b1:fd:
                    68:8c:5b:83:c4:7e:e8:f3:92:0c:16:cf:d9:0b:0c:
                    f1:45:61:a8:78:61:b5:bf:6d:51:74:e3:1b:d8:d2:
                    80:57:e5:84:60:2d:cc:f2:f5:b9:b4:02:28:52:99:
                    0f:04:78:ee:29:dd:14:af:3a:49:fc:9b:81:6f:be:
                    5b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F9:22:9A:08:26:9E:51:D7:1B:A1:26:A8:66:9A:ED:F6:69:C8:D5
            X509v3 Authority Key Identifier:
                keyid:07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:67:b3:af:8b:ec:85:45:96:7e:e3:6a:b7:be:7c:a3:d9:e0:
         eb:80:60:81:e7:de:06:ba:a2:be:4d:ed:20:2b:c0:3e:0f:0c:
         bd:cc:44:52:d8:0d:92:92:ba:c1:0b:5c:4a:5a:f9:4f:69:7c:
         46:46:d7:61:85:a7:7b:17:93:d6:5f:b3:dc:4d:5b:53:0e:49:
         3f:b1:45:7f:f1:64:7d:8b:a8:5c:43:e4:ad:4c:4e:70:c0:f9:
         a9:32:68:86:01:52:27:83:7d:7a:85:73:4d:7b:ab:cf:98:86:
         56:45:28:7c:f7:c1:0d:0f:df:3d:2b:1b:c8:6d:f6:cd:9a:39:
         ae:dc:92:a0:49:12:af:2b:48:ab:f5:90:d4:da:e4:db:73:e2:
         d6:40:53:91:f1:62:db:3c:23:fb:e0:c2:45:ee:d9:18:11:35:
         c5:b6:dd:72:91:5a:01:4f:34:07:8c:65:81:eb:41:a1:ee:2f:
         ac:c3:a8:10:ae:dc:3d:65:05:f9:ae:bd:98:2a:a4:9f:4f:c2:
         be:84:4d:c9:59:2d:de:08:de:92:21:d2:25:13:e3:23:49:34:
         a7:c5:41:01:3d:fe:c7:29:f9:83:67:99:08:33:05:9f:24:ad:
         c7:72:cf:80:41:aa:7d:f4:b7:df:d4:1e:f4:eb:9b:48:cd:41:
         0b:af:66:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:04 2026 by rpki-client