Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
File:                     Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft (raw, json)
Hash identifier:          TvXENfert0eOS9LYSK3HsfYnKsBSBnD2vpklka2WETM=
Subject key identifier:   F2:FE:9F:F6:CA:EF:76:04:FF:4C:22:C8:3B:5B:72:DA:F0:16:74:A3
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Certificate issuer:       /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial:       019E1F10FC169D9E8560AB71AF0F0EBC61B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
Manifest number:          1930
Signing time:             Wed 13 May 2026 02:01:07 +0000
Manifest this update:     Wed 13 May 2026 02:01:07 +0000
Manifest next update:     Thu 14 May 2026 02:01:07 +0000
Files and hashes:         1: 1Yk3wLsSFqIceQz9okyZeYwSmUU.roa (hash: XuNQlAxXibSKzFFM3alxNEJs9SFC+R0bjfD85sz3lps=)
                          2: 2rNvx3N9jKo76idv1HsGHAcnnwk.roa (hash: eczcKAWkF5L/9LrtvswF4lmskTN97duPXq74deE4ZjY=)
                          3: 89TNYzq_U7xA7Y9BxvWtQuf55Qw.roa (hash: gJOB7b6DwbK+XopIODXerFY7Dl/1i2NMhMaK+LjT9Lk=)
                          4: Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl (hash: kBAi7Xhy09aqlrX19Kh9YZjGrMAg7QkDU10s44K4FKs=)
                          5: XGgIS2kdMhFLyP-i-D0W3B8JW7A.roa (hash: eJBUNPOd5UiGzU5DENLhYsoGYS/OErO6pyZfCeZ9+DI=)
                          6: Z-AEi0EtQTiXIQZyMMd-Bg1cjpI.roa (hash: yIwR/WFk+tPJZkyXjHRduYJCHgmO7w46d3yBhaQ1ujQ=)
                          7: _AlvkImBx9fT_58A-ot68g3ZAWg.roa (hash: msAI/PDOB8nUEhgzHGsqD3SG29keFYFQtvJbuYgfbh4=)
                          8: e6E78PhXHpGFjckaurV7HRo45Qc.roa (hash: /P55Uaooj8U1yQTcKMlV6RxlENtuteMc4CS0XE887QU=)
                          9: pc9jqeFvGm_Ya7ftOHGOywYXqHk.roa (hash: hvmbpnMOx6aLgariBv7H4no6hWJ9AktUdxssOvOvSNs=)
                          10: wEsor2MQvIFzGGLmwfUZgbYVkto.roa (hash: asdhK4hFtXHqOa5kFwrF3vv+JxQieRNKL69DY1/povE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:fc:16:9d:9e:85:60:ab:71:af:0f:0e:bc:61:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
        Validity
            Not Before: May 13 02:01:07 2026 GMT
            Not After : May 14 02:01:07 2026 GMT
        Subject: CN=f2fe9ff6caef7604ff4c22c83b5b72daf01674a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c6:15:66:9a:c3:66:34:92:dd:a6:2f:13:7b:
                    c0:70:66:14:89:31:50:13:04:08:27:fa:41:12:9d:
                    00:48:57:c3:07:3f:9b:1d:f9:a1:0d:d0:62:84:46:
                    27:85:af:a0:95:2f:73:fa:fc:62:4f:5b:8d:21:06:
                    68:da:35:e0:2f:38:2b:84:4e:68:d4:1d:da:9b:39:
                    30:df:a2:16:7c:6e:81:28:3a:7c:2d:ff:e1:88:06:
                    53:ba:d0:c0:38:e3:79:7d:95:e9:ae:91:f5:c1:7c:
                    18:cd:c6:5a:51:0d:8d:0b:ee:2c:c5:19:71:a3:54:
                    f7:25:7a:45:ac:cc:82:35:45:95:d9:9d:76:c3:c3:
                    ae:49:48:ac:e2:ed:bc:6b:3e:dc:82:09:95:57:75:
                    d8:ac:32:f7:6d:55:3d:bb:29:31:a2:37:c4:8f:c4:
                    b8:eb:89:df:6a:4f:0d:af:05:2e:04:89:b3:8f:3f:
                    d4:c9:99:21:1a:2a:6b:0e:9e:8d:7e:82:2f:f8:20:
                    fb:b7:26:7e:91:86:6f:c0:98:5f:96:9e:1e:62:06:
                    88:35:31:a5:28:db:29:82:ff:bb:96:d3:e4:a8:bd:
                    6f:33:17:88:9e:66:0a:c4:d7:5f:c9:f6:d9:88:6f:
                    75:4a:be:c7:ad:a8:65:21:52:a3:c0:f9:3f:ce:3c:
                    cb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:FE:9F:F6:CA:EF:76:04:FF:4C:22:C8:3B:5B:72:DA:F0:16:74:A3
            X509v3 Authority Key Identifier:
                keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:8b:26:64:2b:00:2d:7b:1c:57:7b:7e:54:44:d1:b2:a9:fb:
         14:bc:11:c3:0a:74:be:20:6d:00:25:5e:76:61:67:da:1e:ad:
         62:63:b9:35:54:dc:19:a4:4f:6c:0c:10:71:59:73:49:f6:b7:
         8a:58:f0:2a:aa:60:2f:b0:bc:19:bb:7b:99:77:fc:16:02:e0:
         33:92:fc:5e:4a:4a:78:b8:0a:13:03:07:f9:ed:c3:cb:f9:95:
         5b:ae:a5:5f:d1:aa:be:51:b5:74:59:ae:22:a3:4f:32:60:d5:
         f8:c6:59:b2:49:66:28:cb:b0:b9:71:4a:12:b4:83:16:7c:52:
         86:94:cc:7a:50:f1:6f:20:ec:7c:1f:44:16:66:78:01:a5:6e:
         a2:87:5c:e6:ce:86:28:33:04:a8:51:6d:a8:a2:ee:5c:2f:16:
         7c:0d:2e:24:61:07:6a:57:88:bc:e0:4b:da:10:bc:89:18:be:
         1e:94:11:b8:ad:31:5d:25:5d:bd:13:28:53:ec:53:69:05:c8:
         8b:f8:f9:53:34:d6:07:4f:6a:54:7d:a6:d8:e8:c5:95:c6:6b:
         20:f8:cd:96:43:e5:c3:c8:b2:0e:b6:25:de:a3:cf:ee:e8:38:
         34:2f:fb:4d:2e:37:be:fe:de:55:0f:33:b6:2c:d7:0d:44:cc:
         3e:8d:1a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:58:20 2026 by rpki-client