Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
File:                     RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft (raw, json)
Hash identifier:          hKwnIDrYDx5B/t61DhVQbomLgHeG22Qv5SW1QfrZDCQ=
Subject key identifier:   C2:59:ED:F1:99:76:5B:40:44:81:CB:F9:41:2F:6B:13:67:0F:C9:7F
Authority key identifier: 46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
Certificate issuer:       /CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Certificate serial:       019E1F7ED514658BCA7B598E58EE171A4F58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
Manifest number:          10F2
Signing time:             Wed 13 May 2026 04:01:06 +0000
Manifest this update:     Wed 13 May 2026 04:01:06 +0000
Manifest next update:     Thu 14 May 2026 04:01:06 +0000
Files and hashes:         1: 7JHxpyxpo02zkoPorIc6uG3BVuA.roa (hash: b8rxzTKBj6Qg6MVgNOKKZSKKJO0QmX7hL5AcNsaVFUw=)
                          2: RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl (hash: KsVHXn6QBeJasFMiioK2TpTQ0S9AAAgNivPa4tE6+X0=)
                          3: cfefMU6VCTQ-krOdPG6PUT0K-AE.roa (hash: /iqY0OlFoitueMsNG0GZcTyMYyjjsKmq3zEGu1XC6Dw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7e:d5:14:65:8b:ca:7b:59:8e:58:ee:17:1a:4f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
        Validity
            Not Before: May 13 04:01:06 2026 GMT
            Not After : May 14 04:01:06 2026 GMT
        Subject: CN=c259edf199765b404481cbf9412f6b13670fc97f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7a:d0:8c:19:92:b5:40:82:14:a2:5b:a0:89:
                    9f:67:63:a8:85:70:a5:54:72:ef:9f:51:e1:68:3b:
                    ab:84:62:fb:0f:35:bb:5b:ca:6c:a3:04:96:27:72:
                    bf:41:76:44:0d:1b:7d:47:a3:a5:a5:7e:55:13:9e:
                    13:e0:fd:1d:4c:5f:1c:a5:09:37:72:52:f1:d0:fd:
                    fe:0a:40:18:c6:75:dc:fc:ee:76:ac:58:b0:82:3e:
                    7b:cd:d9:32:7f:e6:09:66:0c:f7:56:3f:f0:a8:8b:
                    4b:6b:53:3b:f2:71:9b:d9:bb:8b:8a:ea:2d:3a:20:
                    d9:4a:71:5a:1b:41:78:f6:c2:bf:22:bb:c3:de:73:
                    dd:47:f5:97:b9:64:29:97:9d:e0:3e:e8:5e:0d:94:
                    1b:b6:0e:e3:7e:c1:67:01:61:e7:c0:cc:8b:8e:0e:
                    5c:8a:84:f7:1f:df:9d:d8:54:20:13:20:30:60:78:
                    e1:cc:79:c9:a4:bb:51:5a:11:60:8b:e0:a7:c2:02:
                    74:94:39:89:77:5f:bc:cd:ea:f5:e5:1f:88:2a:d1:
                    2e:57:83:be:bb:f0:b6:ca:65:36:e7:df:f2:ed:1a:
                    da:36:84:10:bc:2e:6b:eb:ed:f6:19:d2:f6:ec:7b:
                    20:72:cd:da:b6:62:40:39:20:94:f3:3e:46:68:ae:
                    84:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:59:ED:F1:99:76:5B:40:44:81:CB:F9:41:2F:6B:13:67:0F:C9:7F
            X509v3 Authority Key Identifier:
                keyid:46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:20:39:23:b1:56:2b:8c:dc:b8:03:45:1e:2d:be:d6:f7:70:
         7c:e4:76:b6:45:25:fa:b5:50:99:e0:39:06:77:37:a7:2d:2a:
         6e:6f:22:3c:3e:4b:ef:6a:78:12:87:f8:eb:d6:86:bf:83:cd:
         8c:da:1f:a3:e6:8e:a1:e4:d3:1c:7e:cd:89:21:0b:d9:7d:a9:
         ab:c9:b8:84:90:82:c9:b1:29:29:95:ba:a6:ba:f7:1f:ea:07:
         d3:4a:cf:0c:bf:c4:c6:10:7f:5d:13:11:35:de:5b:f2:79:8b:
         e3:e7:84:ed:14:07:8a:44:e7:b1:91:f6:68:cc:e0:40:14:7f:
         4f:90:ee:f6:4d:d8:95:f6:47:e8:ee:b1:18:9b:11:e1:98:80:
         58:c7:61:b9:6e:c8:fe:95:11:78:94:7b:fb:4b:2a:8e:22:df:
         08:77:f7:17:0f:b9:31:1b:70:89:95:89:2d:40:a7:0b:d9:f7:
         b4:9d:7b:ac:63:73:78:28:c6:0a:20:36:cd:97:47:73:bf:b5:
         d0:a5:a7:59:84:61:b5:c0:bc:2b:5c:bd:bd:c3:04:4f:04:7f:
         ec:cd:1d:c5:b1:d2:21:f6:e8:ed:db:9b:2e:3f:b5:9a:b5:30:
         3e:cc:b7:16:d4:72:e0:c1:36:94:11:e0:de:ea:1e:d8:91:b1:
         9f:46:7c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:06:32 2026 by rpki-client