Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
File:                     cJSkJVlekjxLU7nAAKqPGa2SPyA.mft (raw, json)
Hash identifier:          25yp5etXAiritzVixC1/nQe6+zeHilYFyUeZaaMn4pk=
Subject key identifier:   3C:49:E0:B0:F0:A3:CB:C2:7B:BC:AB:69:78:AC:F7:C5:4D:36:FE:8F
Authority key identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
Certificate issuer:       /CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Certificate serial:       019E21DAB3C81F4E3E24E6CAF8E9C147C3EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
Manifest number:          1522
Signing time:             Wed 13 May 2026 15:00:41 +0000
Manifest this update:     Wed 13 May 2026 15:00:41 +0000
Manifest next update:     Thu 14 May 2026 15:00:41 +0000
Files and hashes:         1: 9Ek2AgPG-IuKRn4Ap7Q4taz5tIs.roa (hash: US5wluLOurNHGWpdK09uPzxIy4dNtgDg+FM3oRliWV8=)
                          2: J6BzaoEADEU3mnLpaeWB28tTH_I.roa (hash: LmZ8HNRZsz6o3yc1qdlURwkpFlRv54OEGoGiLtspLgg=)
                          3: KvGvnsUPTXn11jrE2Q3HUL3nJnY.roa (hash: GZr/8STpN+spxS7hr5Mqyl5f4Xkr+OLbAhQcRXrsj/I=)
                          4: PDRXvo0P_0NveIGADmK4mqe815M.roa (hash: Rt8tDT1Yhhc7JTO2euWnUSC2nUqLohrFpJ3t3YB6850=)
                          5: VxDIXA6mTGbD5-82yK7aUruPsa0.roa (hash: 6ywkNg1zwWV8B8t2RNAXo9ZBmG+pbw7ReG5CtVK2wj0=)
                          6: cJSkJVlekjxLU7nAAKqPGa2SPyA.crl (hash: 1MiMQqexDguKEE77HGCkGfAyve9mIaCRfAAHqmU6Sm0=)
                          7: uct3FriMmJ2dsZBkcrXJVXsGDFw.roa (hash: YxoLUypivPWxn2AjW2R+K6r0FePAjOs61fBGsFzRkR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 14:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:21:da:b3:c8:1f:4e:3e:24:e6:ca:f8:e9:c1:47:c3:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7094a425595e923c4b53b9c000aa8f19ad923f20
        Validity
            Not Before: May 13 15:00:41 2026 GMT
            Not After : May 14 15:00:41 2026 GMT
        Subject: CN=3c49e0b0f0a3cbc27bbcab6978acf7c54d36fe8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b9:fe:c9:a2:d6:a3:73:84:d7:e4:cc:7c:49:
                    44:1c:bc:b1:88:74:63:f3:40:5c:3f:12:11:3c:7d:
                    5b:7f:66:2f:d6:60:ac:37:93:a9:e6:b6:5b:58:ed:
                    6f:af:53:12:f4:54:82:06:e2:bf:e6:e3:4c:61:f7:
                    61:6e:c6:77:7e:72:d5:c6:24:22:b8:ac:ce:80:d1:
                    7e:e0:e8:29:00:1c:d3:96:1a:ff:29:60:3f:8b:85:
                    95:42:8b:f1:f4:5f:9e:03:90:b6:a4:d7:1d:4f:52:
                    36:90:e4:4e:79:27:05:5e:1e:f8:ea:65:3d:ba:94:
                    c7:9f:f4:03:12:18:b4:a9:d5:98:63:82:3a:1b:a7:
                    12:c0:5e:b7:8e:8f:9c:74:12:28:00:f7:99:3a:66:
                    05:e7:cc:62:e4:ba:ae:57:b6:90:0e:2c:25:cf:2d:
                    56:66:bd:b7:fe:e1:64:23:21:43:68:62:a8:b6:00:
                    9e:0b:51:16:ac:0e:e5:d2:19:4d:3b:f7:ab:8d:e5:
                    11:07:e9:83:d4:59:9a:e3:f2:35:c1:70:1e:52:ca:
                    e2:9e:1b:31:14:55:0b:89:68:6d:ce:99:c0:13:8b:
                    58:ef:0f:db:ed:82:53:3f:57:b6:3c:a1:9f:62:cc:
                    95:08:c3:68:87:54:31:18:cb:a6:a7:fa:42:02:1e:
                    45:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:49:E0:B0:F0:A3:CB:C2:7B:BC:AB:69:78:AC:F7:C5:4D:36:FE:8F
            X509v3 Authority Key Identifier:
                keyid:70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:ca:97:07:0d:1c:4d:23:66:ac:08:cc:dc:71:20:04:1e:c7:
         6c:1d:b2:b6:75:f4:75:ce:ff:d4:b9:9f:5d:b5:7e:73:88:04:
         27:ca:d3:55:58:99:7e:82:ec:f9:95:7c:cb:6b:64:c5:98:43:
         3d:cc:47:a9:d4:47:b1:91:d5:43:0e:5c:65:20:a6:4b:15:a5:
         11:7e:0b:4a:a4:cf:47:ae:dd:e4:1c:9f:b1:6d:06:ce:95:24:
         d6:f8:09:c0:7a:24:c2:4d:ca:ee:54:e0:e5:54:41:6b:07:94:
         9e:1e:9a:cd:22:f0:96:99:ae:a6:45:27:4b:97:72:77:83:9b:
         0a:50:7f:2d:65:4b:df:bb:a4:a7:ab:9c:61:fa:49:29:5c:af:
         0a:e1:8d:e9:25:62:80:9e:e3:76:38:36:90:d1:af:d5:be:b0:
         bb:6a:66:db:fc:c7:77:eb:06:7e:9e:73:a2:00:99:63:8a:7e:
         46:e4:3e:3a:f5:06:ad:86:b6:b3:79:92:d9:6b:7c:40:8a:8a:
         85:bf:d5:c0:23:1c:51:fc:2d:52:a1:4d:76:60:3f:a3:8c:21:
         56:3b:dd:8b:36:6a:22:b5:38:89:e4:cb:6e:96:49:43:54:25:
         43:d7:af:c2:b7:e7:01:3c:83:8e:11:71:90:09:dc:7b:e7:3f:
         25:b6:92:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:18:14 2026 by rpki-client