Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
File:                     TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft (raw, json)
Hash identifier:          e9U59SqrgtKlgbetz+8XWB5eny80AkAf4iaWjZBkieU=
Subject key identifier:   84:58:EB:EB:2E:5E:0B:0B:47:37:81:3C:8F:E8:F8:AA:DA:D8:5D:6B
Authority key identifier: 4C:DE:7B:38:BE:AF:3C:63:87:9F:F9:30:97:3D:16:3F:1E:88:E7:E6
Certificate issuer:       /CN=4cde7b38beaf3c63879ff930973d163f1e88e7e6
Certificate serial:       019E1C10076E193A862DEFB6879BE1AC09E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
Manifest number:          0309
Signing time:             Tue 12 May 2026 12:01:12 +0000
Manifest this update:     Tue 12 May 2026 12:01:12 +0000
Manifest next update:     Wed 13 May 2026 12:01:12 +0000
Files and hashes:         1: LnjNGcMyH3MeERFj_pC3gRzTFnU.asa (hash: qASxAPP9ucQL4oyglFA6dDLN1CVjgDXdRMKgSKCNRhg=)
                          2: TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl (hash: vBY5nEvCI08vJKTHbUrr0+wOKrxPosJosqHc7tpWxQU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:10:07:6e:19:3a:86:2d:ef:b6:87:9b:e1:ac:09:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cde7b38beaf3c63879ff930973d163f1e88e7e6
        Validity
            Not Before: May 12 12:01:12 2026 GMT
            Not After : May 13 12:01:12 2026 GMT
        Subject: CN=8458ebeb2e5e0b0b4737813c8fe8f8aadad85d6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9e:47:99:f7:31:d5:dc:c8:bc:5f:91:24:1f:
                    69:77:61:54:18:e2:67:4f:eb:bc:e1:9e:c6:c4:72:
                    b9:a1:b0:07:f7:3c:6a:24:f7:88:32:db:d5:e1:d3:
                    88:2b:aa:5a:b8:4e:23:a9:41:33:bd:1d:04:53:05:
                    ce:00:5e:75:7b:c2:d7:22:0e:4c:98:1c:96:2f:b5:
                    9f:59:ba:cc:f2:84:b9:9f:d9:dd:94:63:60:63:13:
                    a8:ea:80:0e:40:cb:2d:f7:3b:8d:a4:60:55:80:80:
                    97:64:9e:f0:f1:7d:bb:62:98:f5:52:7b:e4:3d:8c:
                    8e:04:99:86:c8:14:b3:c3:09:18:ce:2a:cc:d7:c7:
                    bf:26:cd:a8:d9:36:e3:9a:08:17:93:8a:02:f9:d2:
                    47:b5:ad:e8:55:52:43:2a:83:8e:db:c0:f4:21:b6:
                    4f:4d:8e:82:08:54:5c:78:5f:59:e7:f5:b1:2f:80:
                    97:8c:6c:00:77:95:c6:8a:48:fa:d0:12:76:4e:09:
                    ca:6e:45:78:93:ca:6c:39:61:d3:73:b0:25:55:b0:
                    ac:7b:57:e4:04:75:1c:93:19:a3:7a:a2:b6:07:2d:
                    8b:7e:8f:fd:c8:c8:cc:51:ae:e8:c0:46:74:99:fe:
                    a0:26:78:ba:cc:bc:f5:84:cd:4c:2d:84:24:8e:55:
                    4f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:58:EB:EB:2E:5E:0B:0B:47:37:81:3C:8F:E8:F8:AA:DA:D8:5D:6B
            X509v3 Authority Key Identifier:
                keyid:4C:DE:7B:38:BE:AF:3C:63:87:9F:F9:30:97:3D:16:3F:1E:88:E7:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:a9:84:d7:e8:25:f7:5e:86:0d:d9:f1:99:d3:23:d2:32:ef:
         a9:4e:f3:36:09:ff:d4:80:31:03:ba:c5:a1:df:42:3b:38:1f:
         53:88:0a:0b:88:2f:d8:75:d9:c3:bd:52:4f:37:7e:08:fd:2a:
         2c:a4:07:f2:fe:2a:e5:e4:d1:07:d7:81:b0:cd:fc:3c:6e:7a:
         c9:53:d6:d9:c4:fe:c0:03:72:74:24:c4:c3:66:fe:66:5f:ff:
         d6:9c:70:f6:53:55:25:7a:94:bf:44:50:0a:36:63:1f:e7:79:
         da:bf:07:a6:b0:b6:8b:0b:70:2c:75:be:8c:da:f5:1d:90:8d:
         aa:e3:db:7c:93:2c:74:c5:ad:2f:2e:b3:5f:43:ec:1c:88:40:
         c7:bb:4c:23:f0:14:0e:05:9b:51:0d:bd:21:d6:59:31:cb:a5:
         e5:53:12:74:2a:75:3b:09:98:60:c5:ea:1a:46:ed:1f:62:d5:
         cf:ba:f1:6a:d5:bc:00:37:97:8e:b7:2b:19:a3:e1:3a:36:88:
         dc:f5:cf:ee:81:de:b5:99:9e:ad:65:51:61:7c:41:0d:9c:98:
         83:aa:2b:27:cf:1e:d8:4b:5b:4d:d6:60:4b:46:70:ba:ea:bf:
         df:ca:a4:41:ec:c6:59:f9:18:4f:3d:25:06:13:cc:f8:90:02:
         7d:c5:90:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:23:04 2026 by rpki-client