Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
File:                     TuUnUqgb3-CkAfmiYdef7kthcRU.mft (raw, json)
Hash identifier:          GkiqRBLJsKVKlHO8eYiU/VflUN3G8l3gtgCbRlj4XKw=
Subject key identifier:   34:8F:DA:77:54:81:25:A7:9B:59:E0:F2:80:98:51:2C:57:4B:F8:12
Authority key identifier: 4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
Certificate issuer:       /CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Certificate serial:       019E20FF81E6A654078D657F2391CC2D8466
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
Manifest number:          1293
Signing time:             Wed 13 May 2026 11:01:16 +0000
Manifest this update:     Wed 13 May 2026 11:01:16 +0000
Manifest next update:     Thu 14 May 2026 11:01:16 +0000
Files and hashes:         1: BwYkdZop4LfVcsQVgrky2aIlIX4.roa (hash: /Oi14aBcEjwNAEOQ7H90tj2pA4FVuDXPniFiDKqahKI=)
                          2: TuUnUqgb3-CkAfmiYdef7kthcRU.crl (hash: 33AMA2VyC0+2tMYXRGX9WMmvy6NpQMH90B+AU8mUdUc=)
                          3: ZOocGxfRUY-ZdQMbvLZ_NjXdVTk.roa (hash: GrEXKkEmP7szfXCEYL1TpbMhWg/OeEWq9BaM4Ey1R7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:ff:81:e6:a6:54:07:8d:65:7f:23:91:cc:2d:84:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
        Validity
            Not Before: May 13 11:01:16 2026 GMT
            Not After : May 14 11:01:16 2026 GMT
        Subject: CN=348fda77548125a79b59e0f28098512c574bf812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d2:08:e8:15:52:70:37:e0:d6:38:f8:5b:c1:
                    e5:d7:fb:71:19:03:14:b4:0b:03:d9:73:3d:01:ab:
                    17:66:64:80:88:1d:7c:67:11:47:c3:71:93:a8:a7:
                    b8:a6:b9:e9:29:9f:3b:c2:9f:f4:b8:6e:bb:f2:4d:
                    f1:a0:b6:66:2a:84:20:94:5b:ef:23:90:32:79:a1:
                    80:84:57:76:66:92:5d:d7:15:8a:c2:58:94:2b:2f:
                    62:35:25:b4:76:2b:fc:6d:b2:c9:9b:f7:e8:3d:28:
                    a9:53:d1:77:5d:04:41:83:b6:ff:1c:04:ee:51:00:
                    77:df:22:f9:21:9b:93:0a:1c:df:f5:37:16:80:c3:
                    2e:71:05:d9:50:a1:e8:ff:8a:5c:a9:40:ec:eb:49:
                    50:13:e7:d4:7a:1a:c6:05:cc:62:29:fe:49:9b:16:
                    76:ad:b6:3a:4a:10:68:64:8a:a4:0a:74:ca:d8:62:
                    0a:4a:a6:9c:3f:99:d9:5b:98:62:1b:e1:36:5d:4c:
                    c2:b5:ea:d8:7d:20:bb:0f:b7:7d:63:82:33:62:44:
                    a3:e2:47:56:59:60:d0:13:a8:fa:70:6b:ff:ef:ae:
                    93:88:e3:33:d6:90:2d:b8:5b:d8:68:eb:6c:51:c6:
                    56:32:2a:f3:87:56:04:00:ba:af:73:8c:e8:ac:49:
                    3e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8F:DA:77:54:81:25:A7:9B:59:E0:F2:80:98:51:2C:57:4B:F8:12
            X509v3 Authority Key Identifier:
                keyid:4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:56:a6:6d:20:4d:a3:01:6f:aa:15:7f:4e:92:8a:58:7d:05:
         60:ae:47:6b:94:51:10:d2:72:85:d3:36:9c:be:94:35:c3:ef:
         cb:a8:42:38:85:91:e4:25:08:34:fd:dd:96:57:f8:51:99:2a:
         fc:33:c9:69:04:b5:34:b2:e0:1d:8e:5e:f6:70:d8:7a:40:26:
         bc:a6:7c:a8:2a:10:70:80:df:47:fd:f0:2d:fb:cb:2c:50:6a:
         b3:51:68:39:15:97:6a:46:98:7d:09:c3:56:0c:03:6d:c8:f5:
         1d:7f:4c:b8:9a:52:ca:8f:ae:3d:ee:49:02:fc:11:86:23:9d:
         85:36:bb:07:08:95:9a:7f:33:09:6e:0c:7c:77:74:54:0d:9d:
         e1:c0:a0:5f:68:e8:99:17:63:71:b2:69:9a:7f:84:ae:86:df:
         53:0c:17:56:f7:33:9f:ce:16:af:80:5b:66:69:0b:8c:03:0c:
         99:e6:0e:b7:f6:e5:5e:3b:07:db:2f:b0:0f:2b:58:d6:22:7d:
         05:50:02:fb:fd:13:fa:85:11:2d:38:38:aa:b5:ab:3d:fe:9e:
         a2:9c:d6:fc:aa:5e:3e:c6:8e:e4:9f:a8:ca:70:6d:9e:76:33:
         66:27:a1:e1:be:68:84:23:ca:17:27:ba:a7:87:1a:4e:bf:ef:
         dc:4a:e2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:52:19 2026 by rpki-client