Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
File:                     mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft (raw, json)
Hash identifier:          vSI98e4nIzxXjz+M92guakU9tcS6/DpYUnynWzeP7w4=
Subject key identifier:   41:B4:25:C5:F6:6F:B6:EE:AC:D6:A5:FF:9F:32:2C:A6:2C:03:C7:59
Authority key identifier: 98:2A:54:1D:5A:C8:FF:7B:B0:40:8C:74:34:AC:10:12:EF:F7:3C:B5
Certificate issuer:       /CN=982a541d5ac8ff7bb0408c7434ac1012eff73cb5
Certificate serial:       019E1C46B99FF7FF23BD494764AC94C5F367
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
Manifest number:          189A
Signing time:             Tue 12 May 2026 13:00:57 +0000
Manifest this update:     Tue 12 May 2026 13:00:57 +0000
Manifest next update:     Wed 13 May 2026 13:00:57 +0000
Files and hashes:         1: ii2y3_3OasAT5vVqpy7EkID9V2Q.roa (hash: eHIEjyO4o7PMmo5LxlNBD9RVF/znC0lnkJD1jokxFWo=)
                          2: mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl (hash: qP6Kuj7KSkeEaRNcy870dCqyiRZ+lS3ksQaBXgq20QI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:46:b9:9f:f7:ff:23:bd:49:47:64:ac:94:c5:f3:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=982a541d5ac8ff7bb0408c7434ac1012eff73cb5
        Validity
            Not Before: May 12 13:00:57 2026 GMT
            Not After : May 13 13:00:57 2026 GMT
        Subject: CN=41b425c5f66fb6eeacd6a5ff9f322ca62c03c759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:62:c6:a9:11:e5:51:5d:35:9f:40:7a:14:28:
                    90:96:11:28:ae:ef:67:20:39:a9:c0:d9:cd:0b:6b:
                    fd:f8:53:91:83:97:be:ae:96:64:d0:3e:8e:f0:78:
                    15:af:1a:88:c1:87:83:ca:a5:a4:e2:b7:83:bc:b1:
                    bf:c2:0f:89:2b:02:9f:d4:4c:4a:19:1c:6a:82:69:
                    7c:3e:9d:14:f4:e0:a8:fa:0e:e0:22:65:0e:14:01:
                    87:7b:b7:ba:f6:b0:b8:ac:4e:6b:e9:55:28:dc:8e:
                    98:20:b8:5f:f6:0e:44:96:b9:a1:8b:83:2a:16:78:
                    34:a1:b6:ff:81:73:06:d2:4e:c7:ff:77:bd:24:f2:
                    2f:e4:65:4d:f3:1b:07:38:da:52:ed:7d:cb:49:7c:
                    56:34:fb:c6:66:ac:03:bb:9a:95:59:ba:dd:e7:5b:
                    a2:64:6d:ba:12:ff:9e:f2:05:64:63:84:55:57:af:
                    56:34:dd:9d:dd:44:c5:d8:1f:72:98:78:ed:9f:5b:
                    36:44:4b:23:70:b6:11:87:8d:ee:1d:b2:43:1a:8f:
                    5a:86:c6:51:f3:26:54:e2:39:30:9e:e4:a9:13:ec:
                    78:df:8d:53:72:d6:e1:4b:12:f5:56:24:fa:29:31:
                    e0:f8:7c:2a:cf:41:f0:82:17:c0:ad:b4:79:41:33:
                    77:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B4:25:C5:F6:6F:B6:EE:AC:D6:A5:FF:9F:32:2C:A6:2C:03:C7:59
            X509v3 Authority Key Identifier:
                keyid:98:2A:54:1D:5A:C8:FF:7B:B0:40:8C:74:34:AC:10:12:EF:F7:3C:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:89:3a:db:74:d3:82:5a:8b:49:1d:10:f6:50:f4:7a:93:36:
         71:69:ae:2c:87:8d:b8:9c:10:1d:76:c4:11:c5:18:04:20:3d:
         c7:a7:0a:2a:f3:aa:ed:ec:3e:b9:7d:7c:76:b4:55:27:08:6f:
         7f:c2:32:b7:bc:42:35:fb:32:fa:f5:a1:19:74:61:a0:e7:2a:
         fd:8a:5a:aa:5c:04:75:18:c4:4b:ae:e9:1f:28:51:b6:5b:67:
         ab:d7:eb:f3:9d:ce:09:41:d0:c1:db:fb:70:43:4c:e9:a2:9e:
         33:91:bb:9a:d4:73:cb:31:64:fd:9e:51:f3:8b:25:82:08:fe:
         ff:cb:36:60:65:88:73:bb:76:3a:e6:c4:6f:ad:5c:ce:b8:31:
         28:59:65:52:f2:9e:a7:46:84:5c:ce:26:a2:81:53:a9:c1:44:
         cf:a4:23:e7:2e:ee:4d:d4:90:87:72:98:76:d5:06:f6:fb:47:
         c2:c5:aa:b8:00:17:09:79:7e:19:dd:d6:a8:f5:42:a4:9b:60:
         9b:55:25:c0:4e:40:aa:12:8d:3f:d9:ee:00:a4:15:97:95:12:
         47:12:8c:e6:55:b5:d1:af:fd:31:eb:92:49:fc:f9:10:c8:04:
         87:7f:6c:8f:5b:24:d8:64:bc:c9:6c:80:46:4b:6e:c1:b8:9c:
         03:85:85:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:34:40 2026 by rpki-client