Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
File:                     1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft (raw, json)
Hash identifier:          +lBCI+8f3uA9TYF6MxG5VFHmjw3HqKsqwPKNzjrMaeM=
Subject key identifier:   93:E5:C7:E5:70:11:BF:00:14:AA:C1:26:57:2A:34:1A:9B:14:D5:CC
Authority key identifier: D5:A8:90:94:E1:2E:54:DD:90:1E:32:D3:3C:E5:13:1E:04:6E:E7:0C
Certificate issuer:       /CN=d5a89094e12e54dd901e32d33ce5131e046ee70c
Certificate serial:       019ED42AEAF81EA237667412B5F2079973DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1aiQlOEuVN2QHjLTPOUTHgRu5ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
Manifest number:          05FA
Signing time:             Wed 17 Jun 2026 06:00:42 +0000
Manifest this update:     Wed 17 Jun 2026 06:00:42 +0000
Manifest next update:     Thu 18 Jun 2026 06:00:42 +0000
Files and hashes:         1: 1aiQlOEuVN2QHjLTPOUTHgRu5ww.crl (hash: jBKtRpNVGdBFmiZM5JXsWgnuui2rUnTpFwekWU6wRg8=)
                          2: lFXW11JmtXkBjm-uNTCzHeFzM7o.roa (hash: ehAd9mUsbggx1/mGegpTmvG9odTX8xtW0ahGr9D7dD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1aiQlOEuVN2QHjLTPOUTHgRu5ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:2a:ea:f8:1e:a2:37:66:74:12:b5:f2:07:99:73:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5a89094e12e54dd901e32d33ce5131e046ee70c
        Validity
            Not Before: Jun 17 06:00:42 2026 GMT
            Not After : Jun 18 06:00:42 2026 GMT
        Subject: CN=93e5c7e57011bf0014aac126572a341a9b14d5cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e8:21:f1:b2:5e:bc:ec:f7:4a:bd:9d:29:ad:
                    53:6a:16:c1:de:7e:9b:d8:b3:10:64:e1:f3:44:1a:
                    15:bf:3a:d0:77:d3:c2:02:a4:3d:f6:80:68:2e:6b:
                    28:7a:51:f6:e0:3a:7a:87:39:67:53:99:77:10:d2:
                    bf:fe:32:8b:9e:99:27:44:82:7a:bd:1b:e9:f5:b7:
                    e1:47:a4:06:43:ea:7b:17:61:f4:ee:e6:e7:20:d5:
                    e6:a0:66:a7:56:56:44:6f:f4:50:5f:83:01:e0:2b:
                    15:57:70:34:24:a3:1e:01:32:b3:53:ef:d9:6b:d0:
                    53:82:71:3f:45:58:a9:6e:ee:fa:2c:ee:f9:91:f6:
                    75:db:4c:5f:a8:fa:72:b8:91:09:ef:10:9b:7d:dc:
                    1e:8c:b2:94:40:90:3d:b5:7f:fd:81:bd:37:18:b5:
                    c9:48:19:5a:47:80:92:38:e5:fa:6d:2a:4f:2c:26:
                    23:5c:d7:2d:b0:4b:3c:79:0e:e2:26:3f:51:f0:1c:
                    39:03:9a:a8:03:60:42:b0:c0:0a:5b:e8:ca:ab:0a:
                    1c:55:ed:c1:8d:18:d3:8f:89:e2:46:48:5c:d4:8f:
                    06:62:6e:76:11:25:e0:28:a4:c1:29:15:bc:2d:3c:
                    ee:cd:c6:32:ca:81:45:41:ae:62:45:ce:c2:6f:37:
                    7c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E5:C7:E5:70:11:BF:00:14:AA:C1:26:57:2A:34:1A:9B:14:D5:CC
            X509v3 Authority Key Identifier:
                keyid:D5:A8:90:94:E1:2E:54:DD:90:1E:32:D3:3C:E5:13:1E:04:6E:E7:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aiQlOEuVN2QHjLTPOUTHgRu5ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:b2:15:6b:9c:fe:0f:46:67:dd:f9:f3:54:c6:0b:5d:be:c1:
         04:63:7e:6f:4a:2f:c2:0d:e4:e8:65:28:28:50:69:e7:bf:1e:
         57:47:a5:9b:32:d8:fc:0b:89:a6:f3:99:a0:55:44:82:32:64:
         ea:24:d7:39:82:5e:6d:be:a6:e7:02:fc:93:2f:b3:64:e0:e4:
         26:f0:e9:14:10:71:7a:67:01:c8:69:43:1c:aa:40:68:55:b1:
         df:47:77:b0:1e:f2:60:1c:00:3d:3a:79:83:e8:30:91:f5:ff:
         a6:bb:24:75:50:61:c7:9e:a7:2e:00:1a:5b:fa:7f:c4:dd:f6:
         8d:14:7b:d6:94:47:cc:9f:30:9d:72:65:6a:05:53:6e:e5:30:
         55:99:48:4b:d6:ca:b4:6b:3d:7a:ac:dd:e2:5f:7b:9a:64:96:
         ea:a9:dd:55:84:47:e4:7d:e8:45:67:b7:d1:d7:e6:78:cc:c3:
         39:01:8d:7c:92:eb:81:e3:5f:6b:9f:46:8a:f3:c2:48:5c:f8:
         74:a5:bf:89:38:23:94:83:dc:54:7e:db:ea:70:e2:8f:6d:aa:
         2b:ee:38:6d:c1:3f:71:8c:f9:21:39:ae:32:a7:6b:ad:da:e8:
         a9:67:e4:d8:a6:39:c6:f9:20:c4:43:fd:a4:b6:f3:8f:d5:e1:
         15:43:d6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:18:45 2026 by rpki-client