Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
File:                     ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft (raw, json)
Hash identifier:          ma5JblVuVMBkWh9mkhMDJ7HN2WKH7FT/qlBwIK2b35o=
Subject key identifier:   FB:F3:B5:27:05:8E:BE:8C:CD:9B:09:D3:AC:64:15:D5:8C:B1:8B:5E
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Certificate issuer:       /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial:       019E1EA304052BE9814EA2DE15AAA5D9BDB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
Manifest number:          1943
Signing time:             Wed 13 May 2026 00:01:00 +0000
Manifest this update:     Wed 13 May 2026 00:01:00 +0000
Manifest next update:     Thu 14 May 2026 00:01:00 +0000
Files and hashes:         1: 5dAVtaJIi1EXqqYU5USv7fZXPs4.roa (hash: F+ZaLmkSoDDXKvEZfC55Pqn2Kegitmab6UvzlFAoMLA=)
                          2: EYW0DPWxBVq8OkJlufsQTH29-zg.roa (hash: LYmKFSnt04HxJKJsThK8gfh7k7FUGUtbXQNPAEzqIUM=)
                          3: ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl (hash: XmRr25Gwyb7ZTDZ5nbbmOO19Hoexs2IlC4wOZQ41QBA=)
                          4: WyfVVVbupjvPxLzRmrpKaA7AkYw.roa (hash: 02QZajpOlAkNu8PwY46zt4fm5XsA4QV5bfhzU3rgZmo=)
                          5: Y_29QVsVJvHnxddFaQdcq2kyCOc.roa (hash: ycsC5DW4Lfa6OQ8J1BIx0zDPciZcjwI4JTfmbrMI8V0=)
                          6: _MW7W40W598GgASR5Eoa_4tP1ko.roa (hash: aru9WUwoYSO6XyN5TKKL7ZyhgIa+93XhWqRZBdE8/Ss=)
                          7: yGko-YtBNaNvOP4tDs7GDUXg2eA.roa (hash: wSaHrBildo4ZcOo9cc+dzQPk/7VlKqTO3FnCX6x1CG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:04:05:2b:e9:81:4e:a2:de:15:aa:a5:d9:bd:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
        Validity
            Not Before: May 13 00:01:00 2026 GMT
            Not After : May 14 00:01:00 2026 GMT
        Subject: CN=fbf3b527058ebe8ccd9b09d3ac6415d58cb18b5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c0:4e:d4:ff:15:e3:5c:ad:74:4e:14:34:72:
                    b4:ba:15:10:46:6e:cd:12:c0:1a:ce:48:93:19:20:
                    12:71:a6:c0:5e:25:f4:fe:3c:d5:dc:0f:32:e7:bc:
                    28:d0:44:c8:0d:f5:1c:f9:4c:2d:71:23:27:4e:2a:
                    0c:93:08:45:90:88:97:e2:41:4d:14:c5:92:d7:f2:
                    69:71:a1:93:a4:e7:83:c0:72:24:82:6e:71:71:25:
                    30:e8:e2:92:07:68:06:df:56:6e:10:68:2c:b8:c3:
                    07:75:ac:75:27:3c:74:22:b5:96:9e:b5:24:af:d2:
                    d7:c1:d7:e1:78:27:47:81:92:d2:81:48:a7:28:c0:
                    0f:22:29:3f:66:fe:bb:38:67:06:2a:d5:41:c3:27:
                    11:11:2e:a9:0d:f8:a2:60:49:c0:2a:5b:05:d1:08:
                    19:75:70:49:92:8a:b4:e7:4a:41:b8:53:3a:74:07:
                    cf:b0:2e:b2:70:ac:75:71:45:e2:e0:16:4e:f1:c8:
                    64:1e:14:ce:7f:e7:0a:94:a2:29:7d:e3:0c:1d:f3:
                    ff:80:a2:eb:b3:7d:9b:03:76:d9:2e:e6:b9:b2:ac:
                    54:29:7e:a2:d5:8c:b7:d2:33:10:b6:24:4d:2e:48:
                    da:34:00:b3:d3:25:4d:8d:41:b9:42:1d:3e:cc:fd:
                    b4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F3:B5:27:05:8E:BE:8C:CD:9B:09:D3:AC:64:15:D5:8C:B1:8B:5E
            X509v3 Authority Key Identifier:
                keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:60:c1:c3:fc:bb:57:a6:59:5f:08:ed:bb:5a:6d:67:d5:2c:
         41:0a:c4:87:0a:2d:28:87:68:81:ad:c5:26:6e:4d:24:2a:67:
         64:2c:42:f2:be:95:89:bd:46:4f:7c:0b:02:16:d5:79:e8:18:
         7d:85:e1:93:9a:9b:93:12:00:ad:ed:a6:c8:f4:48:92:35:b9:
         c5:bc:42:44:84:75:d6:76:9c:13:9d:4b:77:f0:f7:01:92:ec:
         32:21:ca:aa:f7:1d:09:c9:f7:86:a2:88:1e:73:42:0e:50:d5:
         86:2b:94:77:63:ed:17:3d:f0:0c:6d:67:97:14:b1:18:62:9d:
         89:be:86:f4:f4:6b:f7:3f:c5:5e:96:1b:14:75:8d:33:bd:61:
         e6:42:9e:90:0e:18:e2:a0:99:10:87:25:1b:a2:0a:fa:f3:c9:
         34:ff:25:80:14:bf:aa:1f:bb:53:71:66:99:b6:98:2e:8c:ec:
         35:d6:19:1e:9d:6e:66:73:a9:e8:b3:ae:84:a4:9e:73:dc:06:
         7b:65:0a:54:4a:91:cd:17:06:5b:ec:73:99:d0:d0:d6:50:eb:
         eb:7d:73:7b:fd:d4:ab:e2:92:5f:ba:25:7c:81:70:5e:6d:4e:
         4f:c9:36:62:b4:6e:7e:41:07:4c:fe:0d:3d:b0:c9:bd:0a:f4:
         fc:ae:0b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:48:30 2026 by rpki-client