Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
File:                     sVXa3bhxudalPNa0f3diUIN_d3Q.mft (raw, json)
Hash identifier:          CvfijrQA5R3zCX0o/4R6lMYebSsr86ecRYTCs1UHT7k=
Subject key identifier:   83:23:ED:E4:D4:B9:83:91:EB:E2:54:78:C1:80:84:77:49:D0:09:A2
Authority key identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
Certificate issuer:       /CN=b155daddb871b9d6a53cd6b47f776250837f7774
Certificate serial:       019E1D905261CADCD2E6A194ABBB066A6192
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
Manifest number:          1393
Signing time:             Tue 12 May 2026 19:00:57 +0000
Manifest this update:     Tue 12 May 2026 19:00:57 +0000
Manifest next update:     Wed 13 May 2026 19:00:57 +0000
Files and hashes:         1: 41LKwPw-LLlX1iRyv05q0eGVxQA.roa (hash: /hldaDmFUq5ScLzS5Do9OQvpCy6tJ6Mldta+rPoVSBs=)
                          2: QdmtMonnxjCquFhjrcUo8qpZ9bk.roa (hash: wbBSWKojB7pH/vu01mc7MlC/g/OxHu6eJE6dc+J3abI=)
                          3: _IvJfFzGHlNib8r-PrbygGaf9ME.roa (hash: ujiDP9ug2z8JoHMVWVWd8NY4OblKHkwk6gW1+3Pknes=)
                          4: hwb1wfdjBP0ICPiTwRCIVMoWbas.roa (hash: T7sc8nDqr0XEZ0UNMsL5qIQPmcfivrMuFXOo3aEkX1I=)
                          5: sVXa3bhxudalPNa0f3diUIN_d3Q.crl (hash: /PRne5qojRhR3Rb2wNGjXZ+Crs7uxFf4vvl405SCqog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:52:61:ca:dc:d2:e6:a1:94:ab:bb:06:6a:61:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b155daddb871b9d6a53cd6b47f776250837f7774
        Validity
            Not Before: May 12 19:00:57 2026 GMT
            Not After : May 13 19:00:57 2026 GMT
        Subject: CN=8323ede4d4b98391ebe25478c180847749d009a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:95:af:30:47:ee:6c:3f:a8:0b:1a:a7:b1:4c:
                    d9:2d:f0:df:bc:e9:2c:ec:70:e3:45:ea:9d:7b:1a:
                    7c:be:12:89:f9:66:60:ad:35:49:ea:c0:2e:86:ce:
                    aa:af:37:5a:97:a2:fd:77:cd:70:d4:e3:f2:06:e9:
                    25:b0:7c:cd:64:19:b3:b2:1f:02:cd:c3:28:88:af:
                    ae:50:09:8f:c8:fa:9a:f7:bd:8e:64:ea:19:a9:46:
                    87:84:6d:23:d7:f2:58:2c:cb:fb:95:56:f1:8a:28:
                    94:3f:4c:8d:ea:1b:a4:6c:fc:8f:58:fb:c3:c7:58:
                    36:b9:93:64:2b:b3:c7:d4:3e:fc:8c:d4:33:4d:42:
                    38:05:75:ce:b8:d4:ba:a8:c7:a7:a6:6e:36:09:b8:
                    a0:95:ca:76:e1:b5:a2:47:71:f1:37:44:ce:ac:9b:
                    52:3e:fa:82:87:55:62:8b:59:97:0c:e5:6e:91:8c:
                    e5:40:88:75:d1:69:d9:9a:74:2d:ad:87:d4:33:52:
                    ce:12:a3:ce:42:9a:b6:df:83:13:e9:0d:a4:5e:73:
                    b3:48:1e:18:b3:a6:38:32:4f:0a:f7:e4:70:14:53:
                    4a:3f:17:19:62:50:8a:6a:84:0d:0e:6c:e5:74:4a:
                    74:5b:ec:72:7b:80:9a:da:a6:d2:56:e5:10:8a:bd:
                    68:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:23:ED:E4:D4:B9:83:91:EB:E2:54:78:C1:80:84:77:49:D0:09:A2
            X509v3 Authority Key Identifier:
                keyid:B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:41:0b:e6:6d:3e:b9:a1:aa:04:e7:d4:2b:4a:f5:47:ca:4f:
         4d:d0:6b:ef:24:70:36:83:a2:19:92:f1:34:35:1f:c3:99:7a:
         04:b9:97:fc:54:94:1a:98:09:12:5b:0b:94:35:7d:a5:1f:28:
         c7:7b:49:d0:22:ca:e5:6e:3c:9f:8e:a1:c8:0c:45:3d:27:73:
         02:a3:3e:64:e9:1f:4b:ac:81:08:49:33:5e:76:25:84:57:cf:
         c4:95:4b:27:f7:25:90:36:c4:5d:76:b7:d7:57:32:f5:99:57:
         15:e4:5c:a3:03:62:8b:15:c6:2e:35:41:a1:b3:11:e0:6a:95:
         f7:55:4c:70:68:f8:a7:f9:92:d2:dd:00:fd:a6:6c:e9:b6:b3:
         f7:b2:fa:3d:20:c0:61:b9:fd:fe:61:b7:8a:ab:54:26:38:68:
         9d:43:b7:61:94:54:57:ea:2e:2e:78:e0:a4:e0:d0:c8:8c:f0:
         32:a5:c8:96:57:e6:9d:ce:6a:2f:83:22:a6:48:1f:9d:84:01:
         84:99:11:c7:14:16:53:d8:8e:5a:3e:95:53:2c:2e:93:75:4d:
         5c:4f:49:10:b6:38:2b:dd:73:37:21:6d:70:6a:66:44:03:72:
         74:19:31:87:97:34:8a:ab:54:ad:03:ad:cc:d1:19:78:fc:56:
         5a:ff:3c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:29:42 2026 by rpki-client