Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
File:                     tJvYTaF5l8uyhq-QIqsuBboItEI.mft (raw, json)
Hash identifier:          dBTwgnogHmePpUgRTeUxmxdn3M+g3zh9mmGwavYbQcU=
Subject key identifier:   A7:92:DE:E0:A3:80:6A:06:FC:13:B4:4A:CF:AF:46:0C:59:81:29:D9
Authority key identifier: B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
Certificate issuer:       /CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Certificate serial:       019E2023746936C545E3ED20E645C40F7429
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
Manifest number:          1468
Signing time:             Wed 13 May 2026 07:00:54 +0000
Manifest this update:     Wed 13 May 2026 07:00:54 +0000
Manifest next update:     Thu 14 May 2026 07:00:54 +0000
Files and hashes:         1: PTqqtT4_tP0RAOhqpaeaV7qFsoM.roa (hash: gS+7X+RhiaD/Wpkqye3btlKeUsU6cdg4vX6kC9nPKmY=)
                          2: Zx8NV8g2SZTn17r6ny-ihGOw0zg.roa (hash: oDKvuRyprpCre1JRHHQFdko0hYMR6EjsyiF9Shy7Ous=)
                          3: o_4znoNuO2BlgKbgpDwRbvS5e9M.roa (hash: UG/yd3TL4Rh6gQUIGrMAEttNV+zSF20Hc2Z6UKPMWAc=)
                          4: tJvYTaF5l8uyhq-QIqsuBboItEI.crl (hash: eKgHDTa0jN0iWY5qgUIQsjOcw96oEpyRQMGpjKA/Gkc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:23:74:69:36:c5:45:e3:ed:20:e6:45:c4:0f:74:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b49bd84da17997cbb286af9022ab2e05ba08b442
        Validity
            Not Before: May 13 07:00:54 2026 GMT
            Not After : May 14 07:00:54 2026 GMT
        Subject: CN=a792dee0a3806a06fc13b44acfaf460c598129d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fd:f3:ae:fc:4f:28:b8:84:56:ee:95:d0:36:
                    e5:1e:75:eb:ae:08:ca:db:85:04:43:68:10:58:e0:
                    ac:0e:77:99:4b:59:36:80:c4:6f:9d:89:6c:72:2e:
                    c7:12:66:4e:84:0b:7b:88:fb:7d:73:8e:cf:0e:7e:
                    74:f2:a5:01:5f:f2:bb:22:6b:65:73:eb:df:b6:f3:
                    10:4f:5c:44:7a:62:4c:41:85:07:75:14:a3:e8:c9:
                    03:5e:ee:c8:cd:08:b6:14:d1:df:ec:36:f3:20:78:
                    df:c9:bb:a3:92:3d:61:91:e6:a9:f7:ef:05:aa:fd:
                    5f:31:40:29:cd:6e:32:a9:3a:4c:a4:20:ca:dc:46:
                    c4:fa:05:e1:f4:92:01:80:c1:68:01:89:ed:e7:8b:
                    fa:4f:b2:68:d0:35:31:82:38:e0:f2:0e:98:75:ea:
                    07:67:42:c2:3e:26:1a:57:7a:8f:7a:c5:54:f9:aa:
                    42:fc:04:4a:1a:81:ff:ba:cb:fc:13:fb:e1:8f:70:
                    00:fb:13:81:76:78:c9:be:e1:4e:49:4a:e3:25:aa:
                    16:02:a7:ef:ab:9a:b2:76:35:ce:8d:72:74:29:cd:
                    81:df:fa:6a:f0:bc:4d:77:14:34:6a:07:29:f1:ea:
                    77:22:ae:b6:35:aa:c2:2d:db:01:19:a7:de:10:a1:
                    a1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:92:DE:E0:A3:80:6A:06:FC:13:B4:4A:CF:AF:46:0C:59:81:29:D9
            X509v3 Authority Key Identifier:
                keyid:B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:d1:6c:f3:5b:48:34:16:e8:03:7a:03:a5:1b:67:00:f0:7c:
         2b:b6:7b:77:d4:e2:9f:35:75:d7:b8:1c:49:4d:d8:bc:5a:0f:
         ce:20:cd:98:8d:cd:dd:67:4a:97:ce:bd:1f:f2:6d:d0:b7:59:
         71:79:95:ea:98:7d:0b:2b:56:17:5a:b7:a5:04:17:b1:48:1c:
         85:55:6f:25:ef:5a:48:79:e7:c4:2b:30:d0:30:f2:52:a5:0b:
         99:d7:af:bd:49:1f:50:84:9c:d1:c5:f2:41:d0:64:44:f7:f1:
         cb:50:5c:8f:dd:8d:de:97:af:a0:aa:eb:4c:f4:06:61:24:ed:
         eb:49:70:45:f5:24:78:04:8c:9a:d2:ae:00:09:9c:fa:13:54:
         53:de:82:6d:18:b2:5a:90:3b:37:59:51:11:65:ae:8e:21:32:
         a7:ba:5d:dd:58:48:aa:b7:8f:25:9d:d1:02:80:f7:7b:fb:8f:
         c1:80:a3:94:d8:e7:5e:90:8f:45:13:c0:ff:d2:30:55:03:e1:
         83:54:00:a4:b5:3f:64:21:cb:59:a6:46:b0:cd:35:ee:6b:19:
         88:37:b8:54:9c:55:57:1f:fc:e8:5d:20:2e:9e:ce:0a:72:fc:
         9b:ab:1b:e4:67:a2:73:57:91:94:00:0e:3d:fe:f2:68:fa:79:
         c6:cc:1c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:27:48 2026 by rpki-client