Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft
File:                     4tc__D83xP7EvTWtHFlc0Fa67P0.mft (raw, json)
Hash identifier:          AmCNvmQ/NnS5MK6NyxRiUdSkzAyS/So4s7w2ywRRtME=
Subject key identifier:   59:34:83:6C:74:AF:E6:5D:FA:31:7A:00:2C:7E:49:70:13:2E:90:39
Authority key identifier: E2:D7:3F:FC:3F:37:C4:FE:C4:BD:35:AD:1C:59:5C:D0:56:BA:EC:FD
Certificate issuer:       /CN=e2d73ffc3f37c4fec4bd35ad1c595cd056baecfd
Certificate serial:       019E1E35E5DEDC06201A0FCE3E848ACBE39D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft
Manifest number:          0A60
Signing time:             Tue 12 May 2026 22:01:49 +0000
Manifest this update:     Tue 12 May 2026 22:01:49 +0000
Manifest next update:     Wed 13 May 2026 22:01:49 +0000
Files and hashes:         1: 4hsqhU_idyK9ZtsBbVsnOSDR9S8.roa (hash: 02YQZHaQKClpvxiJTvB0M8bPIBR6ADS6J6pTTSvGVSY=)
                          2: 4tc__D83xP7EvTWtHFlc0Fa67P0.crl (hash: Mljp5f4xOkYJj+wVrlqRQz0PsPr8lQzf9QLwOWaKTlI=)
                          3: FgPm5ePIdB7iyy-qswL10gBrcZU.roa (hash: fBas5dQFDC57PItx0/bJVSQqggK4/99S8Oo+iirl10c=)
                          4: Stc8aIR2oBQoHtcw_xrfLAmAUGk.roa (hash: 8ZpNKKbRIaY+CLBS4atbnWfFsbmXLX5CBoQCPoi8WBk=)
                          5: k_KLQiozPwj61c05UHKa7kfze-0.roa (hash: vY77Fi6ERBrpxxjT73ei2pAcgwKcQZh57UKcaPMLUbY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:e5:de:dc:06:20:1a:0f:ce:3e:84:8a:cb:e3:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d73ffc3f37c4fec4bd35ad1c595cd056baecfd
        Validity
            Not Before: May 12 22:01:49 2026 GMT
            Not After : May 13 22:01:49 2026 GMT
        Subject: CN=5934836c74afe65dfa317a002c7e4970132e9039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:86:0f:38:44:dc:a4:c7:9d:d4:32:c4:af:08:
                    76:ad:06:3c:c8:08:9f:da:2d:d9:4c:19:14:f1:cb:
                    87:d7:9d:02:07:75:70:c7:36:38:e1:03:13:88:98:
                    11:ac:17:2f:a2:a8:69:74:d1:f3:10:3d:80:4d:96:
                    5d:cf:b1:a7:64:10:17:ff:82:8f:67:76:15:0c:59:
                    fd:85:1f:0f:b2:a1:8a:8d:44:0c:4b:bd:d3:91:e6:
                    3c:c6:3b:d5:cc:ea:9a:4d:c0:b7:8b:7a:83:88:a0:
                    be:d3:91:ef:b1:f1:63:0b:b2:08:8d:ee:c7:aa:f8:
                    05:37:9f:24:3f:17:ff:7a:7b:bb:b4:10:4c:02:0e:
                    8e:92:55:62:f8:73:6c:1d:89:03:24:d9:c8:95:6b:
                    94:23:fe:77:9e:55:dc:9a:bc:c2:0b:4c:1a:c1:3a:
                    20:1e:4f:73:44:13:8c:fc:e1:ff:57:29:f6:cf:df:
                    7c:06:77:13:07:6f:7c:ae:40:dc:b5:59:c1:40:72:
                    5b:65:60:1e:07:f1:4b:ca:c1:84:c6:db:e0:a6:58:
                    57:1d:6d:89:bc:ce:33:90:b7:b5:10:5d:84:44:1d:
                    cc:a2:73:a5:ee:a6:16:cd:eb:10:45:d3:92:8b:a7:
                    5f:a4:86:91:bb:72:ed:d6:37:7b:f4:c4:6c:ea:95:
                    b2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:34:83:6C:74:AF:E6:5D:FA:31:7A:00:2C:7E:49:70:13:2E:90:39
            X509v3 Authority Key Identifier:
                keyid:E2:D7:3F:FC:3F:37:C4:FE:C4:BD:35:AD:1C:59:5C:D0:56:BA:EC:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:94:57:5e:61:b0:4d:af:30:28:f5:98:a6:64:70:58:bc:10:
         a9:5d:e9:f7:97:fb:38:16:83:2f:a5:42:1e:b6:33:89:ae:96:
         9f:eb:2c:f7:60:13:b2:90:20:62:38:6a:b3:51:06:c5:1f:a2:
         c1:bf:49:5d:93:b1:1a:60:81:c9:98:e3:cf:8b:dd:89:e7:2b:
         2c:65:9d:a7:21:93:a9:89:81:21:8a:b8:10:c5:77:4b:71:1b:
         cd:22:29:cc:9d:d5:fd:23:ab:15:25:fc:be:0b:b4:92:45:44:
         da:ce:c8:b3:ee:4e:c9:81:19:f4:13:3f:30:f5:6a:0d:01:37:
         3c:8f:e5:cf:0d:c3:eb:e9:8c:e6:75:8e:72:7f:6c:c6:a6:27:
         37:78:2d:1a:5c:72:d2:63:a3:01:59:0f:8a:fa:33:4f:93:93:
         f4:b0:37:fc:b6:f1:f8:59:2d:f8:b0:e4:67:bc:1c:f5:7c:26:
         dc:c2:02:a5:ab:cd:4a:39:e2:9b:2c:99:72:fd:8b:d7:94:4d:
         ba:50:43:77:65:2c:99:fd:1b:d9:15:ad:88:ad:63:b3:e3:06:
         44:ab:f2:ad:3a:7f:17:db:79:9c:c7:ad:43:b8:89:84:1d:9d:
         be:d8:be:b4:e2:89:98:88:ab:9b:af:04:62:81:c8:24:0f:17:
         a8:3e:34:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:56:52 2026 by rpki-client