Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
File:                     RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft (raw, json)
Hash identifier:          3l2lqYyFMWSkASNBo9AfGlZznibZte0Qc9BDZTqVSoQ=
Subject key identifier:   7A:CA:D4:66:8F:FA:92:1B:8B:E6:7F:86:A2:0B:A1:1B:23:AA:90:03
Authority key identifier: 47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
Certificate issuer:       /CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Certificate serial:       019E1EA324907DDA06BFC71D3ECF95B0E1E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
Manifest number:          1912
Signing time:             Wed 13 May 2026 00:01:08 +0000
Manifest this update:     Wed 13 May 2026 00:01:08 +0000
Manifest next update:     Thu 14 May 2026 00:01:08 +0000
Files and hashes:         1: 2iOxvtLJRmqeCCs6jsBCnhsmuMk.roa (hash: xSNUQ0HB9QKxYzPdIeyT3O6eENXbIaUd/nPbY1Wjb78=)
                          2: EfsvGGiWagU_0mzeylXRaksRn_8.roa (hash: KEPOuFM2LSKDwp8tR2Mp0dmeSc6fJlmHWiPoO6jvt04=)
                          3: RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl (hash: mZvA/ec3pj9cehlaLgGFDwgx0qp4sQmFCuhY2T/Xapk=)
                          4: zT3qRTo_Bh_Y4PRUIgbcM4_OPhI.roa (hash: DLHVLGVEeEcowvlPfROsXYSKn9EL35p8lKZcaisVJ0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:24:90:7d:da:06:bf:c7:1d:3e:cf:95:b0:e1:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
        Validity
            Not Before: May 13 00:01:08 2026 GMT
            Not After : May 14 00:01:08 2026 GMT
        Subject: CN=7acad4668ffa921b8be67f86a20ba11b23aa9003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:da:fa:49:c0:f6:a1:01:c2:f3:0b:b6:9b:8e:
                    57:37:37:e5:db:4a:db:7f:0c:9d:51:b3:ee:fe:a0:
                    ed:90:4c:dc:80:9c:4d:d8:84:4f:83:ed:7a:c0:58:
                    c2:f8:ec:e8:19:42:1e:0e:4f:56:0b:97:d3:b4:75:
                    f8:fa:22:6a:0a:ab:e2:59:a1:74:70:f3:26:3c:a9:
                    37:47:0b:24:87:7d:f6:bb:c0:45:c2:41:cb:82:9c:
                    6f:3f:cc:b2:a9:ca:6e:9c:7e:db:2d:e9:ed:8b:7e:
                    0a:f4:36:86:d6:bf:c1:7e:97:b0:15:ea:34:fc:55:
                    0e:55:2d:09:ca:88:db:db:57:05:21:e8:32:ee:ed:
                    f2:10:8e:ca:c1:f7:f2:fa:67:29:49:de:17:4e:3a:
                    4b:a1:e7:e9:75:fb:09:6e:37:a9:94:80:23:79:6a:
                    d9:5a:ba:39:11:5b:88:2f:57:79:de:e6:a4:bf:d3:
                    96:64:50:54:7b:94:72:1a:0f:52:6f:0b:d2:85:9b:
                    c6:d9:08:fa:ad:cb:31:94:c1:1b:fe:70:71:4b:00:
                    d2:3a:86:f1:97:de:30:5d:34:86:fa:3d:ed:e1:c2:
                    e0:0e:06:10:6e:9b:ee:7a:af:1d:9f:e3:85:78:2b:
                    6c:2c:09:fc:01:a9:0b:95:b8:a4:bf:3e:c5:ad:4d:
                    a1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:CA:D4:66:8F:FA:92:1B:8B:E6:7F:86:A2:0B:A1:1B:23:AA:90:03
            X509v3 Authority Key Identifier:
                keyid:47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ee:24:b0:c8:41:1e:c6:3c:86:34:07:00:d9:42:14:13:2c:78:
         31:86:3e:68:e0:d4:3f:17:4f:98:d0:70:b1:05:dc:b6:0a:29:
         7f:8e:fa:a7:91:e6:98:6d:7c:91:2c:be:d3:d3:88:bc:1e:17:
         28:4c:11:e3:9a:27:36:86:65:3d:48:67:d0:45:75:cb:fc:54:
         92:74:d5:2a:d3:73:9e:a5:f3:31:55:39:aa:b0:23:0b:7a:5a:
         b3:fa:6a:3c:e8:3f:92:6e:c9:da:d6:2e:61:05:bc:a0:ab:f4:
         e2:6e:c4:20:9a:84:60:3b:c4:d8:68:01:3c:da:67:fc:f0:ac:
         47:83:04:2f:4c:ee:cf:03:a4:88:47:99:02:52:21:74:3d:fc:
         05:bc:f8:24:1c:5f:fc:74:47:dd:69:0a:e5:2f:59:01:d1:74:
         01:41:ee:2d:22:5a:cb:34:5d:34:f1:1f:02:96:0d:5a:5c:eb:
         65:fd:37:d1:4e:96:5f:e0:54:48:bd:0f:1b:06:55:fc:3d:c5:
         92:63:d7:8f:d2:56:14:87:b1:66:b3:48:83:bf:a8:11:bd:92:
         6f:9d:1a:3b:34:a2:5a:ea:52:a5:8e:a6:a6:d0:65:96:9f:d2:
         0f:e0:74:8c:41:51:3a:0e:a0:8b:fd:de:74:1c:d7:f7:63:f7:
         0d:b5:fe:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:50:03 2026 by rpki-client