Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
File:                     4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft (raw, json)
Hash identifier:          OOy/j7wmXRkllJ89Mvseoj++oqp8ePRU961KFAo4PT8=
Subject key identifier:   8C:ED:AE:66:D8:7F:0F:8D:FB:F9:3D:DE:A4:36:4A:BF:1E:FD:72:DA
Authority key identifier: E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
Certificate issuer:       /CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Certificate serial:       019E1EA2E35AF10FFFDB74EDE99BF2702135
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
Manifest number:          1906
Signing time:             Wed 13 May 2026 00:00:51 +0000
Manifest this update:     Wed 13 May 2026 00:00:51 +0000
Manifest next update:     Thu 14 May 2026 00:00:51 +0000
Files and hashes:         1: 4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl (hash: h8kAh441a72zSsQbrvGQZy7y85Ck+pnc1ZCEcIvuZfM=)
                          2: Ut_nk45-PrVxes0DMrlE6POGcXc.roa (hash: oo94Gr3/o7iKPPOqsqmwUWcuIt1lQW+gn6zRbGd06vg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:e3:5a:f1:0f:ff:db:74:ed:e9:9b:f2:70:21:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
        Validity
            Not Before: May 13 00:00:51 2026 GMT
            Not After : May 14 00:00:51 2026 GMT
        Subject: CN=8cedae66d87f0f8dfbf93ddea4364abf1efd72da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6d:88:10:6e:ad:6e:e1:cc:7f:71:23:55:db:
                    8c:9f:69:c5:d4:c9:4e:59:66:d3:d1:d0:0c:9d:94:
                    6f:8a:f4:6d:e8:3b:2a:70:1f:7c:cb:8d:fd:b0:1d:
                    d6:44:83:19:1d:60:28:8c:59:1b:c3:e7:a6:42:49:
                    54:f9:77:61:26:aa:dc:da:a7:19:4b:67:b5:15:0d:
                    9e:39:8c:35:aa:b4:97:dc:f6:46:f5:ab:90:e7:4d:
                    02:39:b0:f4:28:77:4f:fd:dd:98:fd:d0:73:d4:d6:
                    3f:8a:0d:58:83:3b:0e:ea:b8:64:d4:f7:48:cf:1d:
                    1a:db:34:95:98:eb:e0:91:7c:b7:c3:6e:45:3f:84:
                    be:95:35:67:4f:a5:29:35:2d:c2:11:3c:e6:2b:96:
                    cf:c1:74:a9:7f:b3:fa:ab:79:e5:31:85:18:ca:b7:
                    1b:bf:bd:b6:d7:47:60:85:dc:83:cd:b3:e8:8c:b9:
                    9d:4d:b0:58:e5:d2:85:f5:56:ad:a6:93:96:97:e5:
                    b1:2a:d2:76:42:ea:60:ab:e3:dc:54:0b:cc:f2:6e:
                    e8:81:6f:98:2e:e5:67:88:d5:25:86:00:8f:eb:07:
                    cd:7f:67:e1:f2:f7:59:02:f7:c6:11:73:38:31:38:
                    ec:67:2a:66:b0:3f:d9:96:0b:bd:c3:09:10:cc:b0:
                    8e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:ED:AE:66:D8:7F:0F:8D:FB:F9:3D:DE:A4:36:4A:BF:1E:FD:72:DA
            X509v3 Authority Key Identifier:
                keyid:E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:33:c3:15:02:57:f8:c5:6c:ed:31:9b:32:5d:e5:69:89:40:
         1b:03:a2:db:7a:09:e3:3b:51:45:4e:97:10:50:4e:a6:75:95:
         b1:f7:1c:b9:d2:55:cb:6a:b3:d5:95:bb:a6:8d:0e:9d:cf:44:
         4f:ba:90:bd:df:3f:7d:1e:11:75:1b:fd:2e:50:30:1c:51:89:
         ee:00:db:8a:43:ea:04:95:7d:ed:36:2d:b8:24:97:d0:db:b0:
         6c:5d:d9:42:56:94:40:4a:6f:b5:94:f5:ca:d4:27:95:12:77:
         62:73:4d:46:06:3d:49:83:cb:39:85:c2:b4:b5:04:8e:16:82:
         21:77:81:63:e9:c5:78:60:28:40:4b:cf:7b:45:f0:68:a5:4d:
         a3:2a:f1:c2:4b:f4:0b:9e:1a:6b:91:de:f5:18:9c:50:6a:3e:
         15:ce:19:aa:5c:13:b6:9a:a7:2d:51:c4:f9:74:38:65:87:fb:
         e8:ea:19:e3:62:05:79:19:42:92:76:6e:3b:20:3f:8d:40:f8:
         b9:26:cb:5a:43:77:6c:f5:bf:68:09:f7:4a:d4:1e:5a:c2:86:
         e0:4e:97:1b:e7:e1:80:74:59:c1:05:78:63:3a:aa:8e:89:74:
         d0:a1:6c:75:04:e8:f5:6f:c6:2f:8d:28:55:35:0c:ca:54:60:
         9e:21:4c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:01:28 2026 by rpki-client