Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
File:                     valtAqgi9GJTwq7mgEQdWsJ8PfU.mft (raw, json)
Hash identifier:          p3gCpn+tVtYBo4vQSIyaPrb0yYACQrZJHxLsVDJVO20=
Subject key identifier:   ED:D7:16:EA:FC:2B:79:B2:95:97:80:5A:EC:3F:D4:1C:20:4F:93:DA
Authority key identifier: BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5
Certificate issuer:       /CN=bda96d02a822f46253c2aee680441d5ac27c3df5
Certificate serial:       019E1EDA1A4220CDF27189E822EAD4E64F54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
Manifest number:          190F
Signing time:             Wed 13 May 2026 01:01:10 +0000
Manifest this update:     Wed 13 May 2026 01:01:10 +0000
Manifest next update:     Thu 14 May 2026 01:01:10 +0000
Files and hashes:         1: EhydGNTB-hB89eN92UxIng6UVZM.roa (hash: gWjLjnj1fBxsYuib5uZNn6bhDyaTmXoH7T7zFvCCLkU=)
                          2: PEaB6XQK_JSckDUEH_ZUUvy4XJs.roa (hash: pHNbC9gTB8A25YDnRH1/ZymWlhpa8gI2FiyHFl3N24c=)
                          3: kNnArX8rxSQizIzXcuK9nc5VM20.roa (hash: vhtZwmPY49vps0U0PvF9ig8qAqogrTdDowNB1/EB0pk=)
                          4: luTG1wEQoJ2CdlwrK7SvZ_P5LnE.roa (hash: mWrhQXIzFzzy6PXlxTLPkj0tx5iEbtFjzb8/vkv2Ot4=)
                          5: valtAqgi9GJTwq7mgEQdWsJ8PfU.crl (hash: w6RYeqxRKSUySTJ8PlRCGlxdguFnApoOsaoynE9zoVw=)
                          6: vyQaTgnZmO6A2QP5fltvyAiHn2w.roa (hash: CuO+A8UIrEVOD42Zu4NLM0xT7n43WzFhoUCyh9EEw7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:1a:42:20:cd:f2:71:89:e8:22:ea:d4:e6:4f:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bda96d02a822f46253c2aee680441d5ac27c3df5
        Validity
            Not Before: May 13 01:01:10 2026 GMT
            Not After : May 14 01:01:10 2026 GMT
        Subject: CN=edd716eafc2b79b29597805aec3fd41c204f93da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ad:e5:93:f7:7d:85:da:05:3f:a2:38:9e:ff:
                    56:e6:31:75:d2:7c:2f:84:bf:ef:6a:4f:45:75:df:
                    6c:5a:ff:2a:3b:ef:48:a8:2e:e0:5a:86:f2:8c:f5:
                    f1:13:d7:41:bb:cd:2b:fd:db:e3:3e:4e:88:bb:aa:
                    24:bd:17:69:92:b3:3c:56:55:8c:0a:b6:e6:d8:13:
                    29:10:b8:3b:80:5f:c7:b2:2e:30:13:d3:5c:68:df:
                    b4:e4:a3:31:f6:93:e2:b8:1e:72:03:21:42:70:cc:
                    d3:05:c1:ca:22:6f:79:69:e2:69:c1:15:c0:2b:3f:
                    6c:ee:51:9d:06:0d:b4:0b:f6:f3:ea:c6:dc:fc:34:
                    8c:82:b7:34:7d:5a:d5:25:3f:c2:cc:7b:24:bf:09:
                    41:cf:10:74:81:47:04:91:74:f6:1f:70:3e:2b:27:
                    1e:46:c3:45:f6:8b:2f:15:24:e6:cc:a3:a9:50:5a:
                    f6:d5:92:a6:52:b1:ae:f4:8d:14:75:39:52:6c:5b:
                    fe:4e:7c:b4:88:a8:b7:64:58:9b:25:de:9d:e9:c3:
                    4b:3e:cd:07:a4:e9:4a:13:01:8c:79:4a:05:72:61:
                    41:87:15:5a:6d:2c:22:11:7c:34:2e:d1:67:da:71:
                    ef:5f:45:21:e4:54:48:8b:d5:1f:0d:53:9d:bb:33:
                    b0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D7:16:EA:FC:2B:79:B2:95:97:80:5A:EC:3F:D4:1C:20:4F:93:DA
            X509v3 Authority Key Identifier:
                keyid:BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:ef:ae:09:70:9a:86:1a:02:aa:74:4d:7c:56:48:9c:6f:54:
         5a:6b:42:52:f4:bb:10:aa:21:fc:f7:07:29:a4:83:62:47:4b:
         05:7a:e9:0f:5e:9b:5a:2d:a2:36:5f:c1:25:60:cb:eb:62:ee:
         ce:4e:b0:1a:ef:3b:57:6c:de:24:23:37:7b:68:7e:a4:8b:84:
         e4:60:14:15:4a:73:3d:4c:13:f7:a8:2c:6f:ad:2b:3f:de:17:
         a2:57:06:60:6c:f0:b6:b6:f2:aa:09:0f:26:d3:d4:28:c1:05:
         28:99:f4:66:bc:1d:81:93:88:5b:45:d0:89:91:e8:24:fe:6f:
         d7:6a:7b:56:08:db:f4:4e:4c:7b:0a:80:39:9d:dd:b8:9d:2a:
         6d:11:09:89:dd:b7:ac:67:53:8b:3d:cf:26:e7:a7:67:c7:f4:
         d3:18:d4:72:4a:13:c6:54:53:24:4d:fe:46:32:c6:c2:6c:64:
         a1:6c:e1:ac:a0:c3:b6:a6:ee:1e:74:ca:ab:45:25:ed:b8:73:
         71:00:10:51:20:ef:c6:34:d3:66:eb:85:97:95:e6:ee:0d:0f:
         3e:cd:f9:3f:95:09:32:8b:2e:de:4a:5d:91:87:29:7d:0d:36:
         3a:ce:41:0a:d3:c0:55:93:a2:a3:7e:f5:64:55:a0:c4:08:12:
         35:3d:18:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:15:57 2026 by rpki-client