Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
File:                     ksWu7-nRJuw2Et_ywIITVLFbu6g.mft (raw, json)
Hash identifier:          tt8dqweDwxN8bBEtnbAPsFH2DtKwNv0ilgSud+O8Qok=
Subject key identifier:   20:35:D7:75:8D:F3:26:AE:F8:37:C0:6D:F2:47:E6:19:85:7D:16:45
Authority key identifier: 92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8
Certificate issuer:       /CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
Certificate serial:       019E1F7F9515221B4FF648D692BBEBBEB2AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
Manifest number:          05DB
Signing time:             Wed 13 May 2026 04:01:55 +0000
Manifest this update:     Wed 13 May 2026 04:01:55 +0000
Manifest next update:     Thu 14 May 2026 04:01:55 +0000
Files and hashes:         1: 3mjwWXgkTmZynhO0MwwYYfeUgYQ.roa (hash: LoggYH1kpzYGA8Tu1WeRvVr5FGcv4gtJiNCI/Z5f+Ho=)
                          2: ksWu7-nRJuw2Et_ywIITVLFbu6g.crl (hash: 86IiaMOpkcVw3Ubo0uEWQAbxcgtkQXs319y2u591IhQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7f:95:15:22:1b:4f:f6:48:d6:92:bb:eb:be:b2:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
        Validity
            Not Before: May 13 04:01:55 2026 GMT
            Not After : May 14 04:01:55 2026 GMT
        Subject: CN=2035d7758df326aef837c06df247e619857d1645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:55:5b:8c:90:02:cb:e5:79:55:92:c4:50:f3:
                    f5:f3:e8:97:f3:f3:98:5a:1a:08:f4:03:85:21:00:
                    d3:70:f1:99:c2:40:89:f4:2f:28:e5:72:59:2f:21:
                    a2:4e:52:23:34:a5:7b:a6:f1:53:71:46:4e:3a:47:
                    01:ea:69:d4:a6:9c:54:76:dc:2e:b6:81:2f:70:6b:
                    e1:e9:ae:bf:3d:a8:ad:9a:ea:f1:70:c9:e9:50:e6:
                    bd:5f:db:5a:12:d2:8c:e9:16:1b:38:85:27:9a:56:
                    7d:4b:3b:e4:f5:e6:4f:bf:45:eb:d0:68:64:6e:af:
                    80:f6:fc:05:e2:ca:8d:f3:3a:21:5f:4b:96:cf:79:
                    e2:d8:3f:88:de:06:b7:83:d3:e6:6d:25:12:dc:27:
                    b8:ef:b8:eb:d2:00:a0:4b:2c:bb:6a:e4:f3:fd:ae:
                    a8:47:92:4c:96:01:8f:37:32:53:a4:48:fe:06:a7:
                    fa:e9:1b:e6:d2:37:fc:ba:1e:58:5f:55:9d:fa:ae:
                    67:39:ec:0b:19:be:70:c1:91:ad:be:7b:1f:fd:21:
                    f5:99:10:c5:84:13:dc:66:c5:48:eb:31:b2:93:6e:
                    81:01:61:64:4f:85:3d:bb:81:c3:1f:61:4a:72:fc:
                    05:7d:fa:d4:2b:50:f1:b1:70:40:02:c7:82:eb:db:
                    4e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:35:D7:75:8D:F3:26:AE:F8:37:C0:6D:F2:47:E6:19:85:7D:16:45
            X509v3 Authority Key Identifier:
                keyid:92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:a9:3d:2f:40:93:1b:b8:25:9d:ff:90:7a:9e:a7:93:91:2d:
         ec:15:fb:d5:52:36:7e:da:a1:f6:2b:25:5b:42:e9:ae:29:da:
         81:89:ce:44:52:62:9d:64:86:3d:f6:df:2a:f9:52:65:30:5e:
         82:65:67:d4:bf:d2:d6:71:fb:c8:30:2d:fd:4f:56:d9:7c:d6:
         f4:f5:18:ca:25:c7:e8:fa:ca:94:be:1b:c0:88:37:f8:a4:2e:
         ce:0b:97:a7:ab:6f:83:9e:83:9c:f3:c6:10:90:84:34:fb:44:
         f1:c2:b8:fa:4b:aa:8c:ee:a7:a9:e7:c1:88:c1:75:36:e5:d4:
         da:47:e2:fc:98:71:73:f9:70:40:e2:f3:84:69:87:78:fd:4a:
         13:6d:d5:3b:82:3b:80:e3:f6:7f:0f:e3:77:36:9b:51:70:a2:
         00:61:9a:59:7a:73:e8:79:ed:17:65:b7:05:69:37:c8:a9:da:
         47:94:69:f5:83:30:83:f3:bc:23:aa:26:86:05:36:fd:88:69:
         f2:99:aa:54:ce:1d:96:ae:f8:92:35:11:0b:00:23:3a:77:67:
         94:a4:59:82:d8:3d:1c:da:d1:34:00:c0:58:8d:1c:9e:3c:dc:
         43:b5:13:0a:1e:b4:90:3e:7b:a7:86:2c:21:b1:46:c5:58:c0:
         dc:f1:66:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:57:39 2026 by rpki-client