Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft
File:                     SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft (raw, json)
Hash identifier:          IeqQInocaV8Gi9Wlj87YtpVfUo2fg1XPKyt9ko8fVrI=
Subject key identifier:   18:6D:60:B5:1D:C9:23:EF:4A:BB:F2:D1:33:27:53:48:FE:8A:68:BA
Authority key identifier: 4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6
Certificate issuer:       /CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6
Certificate serial:       019E2091F3E3CDC15E2219E92561173B1840
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft
Manifest number:          13D2
Signing time:             Wed 13 May 2026 09:01:36 +0000
Manifest this update:     Wed 13 May 2026 09:01:36 +0000
Manifest next update:     Thu 14 May 2026 09:01:36 +0000
Files and hashes:         1: 7Z28ccV7b3JOrHBg1UIO3OEvwT0.roa (hash: 1nSmk3+PfoqP0CPu2acD9nLC2qFRu+YJXluMww4fQsw=)
                          2: E3n9esmOrOiobKpJnsNX1UEdPcY.roa (hash: dbM92eMK8IhOySdV1MJ9MEgIxZl7Dktml8lfCphXSgw=)
                          3: SWLNmYYm6Zq0D2jQ9d5JvtPt1cA.roa (hash: jzLKP/SbyyXvM8oP+/GO3/4crN42V8JTzUOZ8ggXFRk=)
                          4: SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl (hash: AA5sIIX1dHX9wjZfP3wL+gTU/o+ZKEdZjzF7gvXcA8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:91:f3:e3:cd:c1:5e:22:19:e9:25:61:17:3b:18:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6
        Validity
            Not Before: May 13 09:01:36 2026 GMT
            Not After : May 14 09:01:36 2026 GMT
        Subject: CN=186d60b51dc923ef4abbf2d133275348fe8a68ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:44:6b:2a:c6:cd:fe:c7:c4:a7:fb:a2:ea:e1:
                    91:5f:16:d6:34:5f:be:25:e9:d2:83:2e:14:db:79:
                    7b:dd:d2:c9:66:49:8d:fa:62:c3:f2:a8:ac:d0:e1:
                    c4:f9:5a:3c:6a:63:9d:2f:f0:06:9f:45:6d:d2:10:
                    66:11:1f:02:0e:4b:75:ea:dd:b4:35:69:d6:e2:2a:
                    30:cf:3e:ec:6b:a5:41:94:68:4a:96:96:8f:5c:05:
                    46:56:47:17:0a:e1:e8:f8:03:af:e1:0a:31:4a:d9:
                    e0:eb:9f:1c:db:d4:b1:d8:db:46:ea:96:c7:cb:dc:
                    2d:89:5a:e5:0e:7d:d4:28:58:5a:d0:cb:a0:35:3d:
                    83:eb:d8:d4:42:4f:8a:7d:43:15:f9:58:03:63:42:
                    f2:be:7f:67:c2:a5:cb:5f:7b:b8:b6:fa:33:b0:d6:
                    e4:59:5c:b8:8c:08:52:4d:fe:40:2b:f3:95:60:3b:
                    8a:67:60:3d:f0:aa:10:a7:cf:a0:3e:4d:90:1a:32:
                    40:65:80:75:fb:87:33:e9:fc:ea:fa:ab:5b:45:f2:
                    9e:16:be:13:2c:5a:8a:69:d6:37:25:90:e7:de:94:
                    fc:29:be:d0:1f:89:da:6c:31:fb:88:a4:ca:3e:b2:
                    91:8d:8b:f3:30:70:c1:99:82:f7:22:9d:8f:a2:c3:
                    24:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6D:60:B5:1D:C9:23:EF:4A:BB:F2:D1:33:27:53:48:FE:8A:68:BA
            X509v3 Authority Key Identifier:
                keyid:4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:cd:40:19:75:82:53:8b:8e:5c:1e:8d:9d:47:c3:e5:36:c7:
         78:20:aa:d4:ed:9f:4c:62:58:a0:79:3c:f4:5c:1d:ec:4e:d1:
         32:f9:2d:91:79:2f:ad:aa:68:a5:44:19:2d:9a:6c:92:25:c1:
         f1:d4:fe:d8:a8:f4:38:1f:bd:a7:d9:04:96:c5:dd:13:a0:15:
         3d:06:72:66:99:fd:12:66:d9:88:e3:e7:17:2c:aa:2a:c5:0d:
         89:58:e4:52:5c:49:8e:c1:00:66:11:aa:21:4e:a5:61:f6:b0:
         1f:ba:03:07:40:1b:5c:7b:6d:f6:4d:e1:e0:0a:d7:be:1c:af:
         45:73:92:22:c4:46:c0:5f:e2:e0:93:17:b1:81:a6:f5:b7:10:
         2d:a4:a5:86:e4:1b:29:07:6a:11:c4:47:bc:33:5e:e6:d5:29:
         d9:62:fd:be:0d:ac:c0:42:54:93:6b:7d:ab:0a:d4:cb:a3:d4:
         e7:64:a0:bc:17:b7:a4:79:01:80:a9:fe:b4:45:21:35:14:1d:
         b3:f3:73:01:5a:e5:70:36:21:7d:c6:40:1e:97:ce:85:f2:c8:
         9b:12:01:c8:40:e8:1a:8d:c3:6a:53:29:ee:7e:ce:6d:ee:1d:
         e0:d8:74:38:ef:e2:ce:e6:4f:94:f1:c0:91:fd:24:c7:80:6f:
         11:eb:72:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:05:30 2026 by rpki-client