Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft
File:                     P2U3Wk029crhof4kWKOAUmz-22o.mft (raw, json)
Hash identifier:          CEQbsns2e7MrtypDcLXBjkOpnagJScqgU42C817yYUQ=
Subject key identifier:   14:ED:FA:C5:CB:78:CE:D0:84:15:47:11:EB:55:F2:29:9A:A7:22:A8
Authority key identifier: 3F:65:37:5A:4D:36:F5:CA:E1:A1:FE:24:58:A3:80:52:6C:FE:DB:6A
Certificate issuer:       /CN=3f65375a4d36f5cae1a1fe2458a380526cfedb6a
Certificate serial:       019E1FB554C9E87B05372F23008857D6A4C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft
Manifest number:          0465
Signing time:             Wed 13 May 2026 05:00:37 +0000
Manifest this update:     Wed 13 May 2026 05:00:37 +0000
Manifest next update:     Thu 14 May 2026 05:00:37 +0000
Files and hashes:         1: 8WGCMkLHivRZtBn2lCr7Peb5fB8.roa (hash: Lec00BWr1FDj5Se46w/SW9Oe5vFyDVib4D6WgGcoj3Q=)
                          2: P2U3Wk029crhof4kWKOAUmz-22o.crl (hash: pgDsjM/FSKs/sBPyIpGI7qyL//SJDV5WAzjBS6Ao5UY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 05:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:54:c9:e8:7b:05:37:2f:23:00:88:57:d6:a4:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f65375a4d36f5cae1a1fe2458a380526cfedb6a
        Validity
            Not Before: May 13 05:00:37 2026 GMT
            Not After : May 14 05:00:37 2026 GMT
        Subject: CN=14edfac5cb78ced084154711eb55f2299aa722a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4c:43:d9:66:76:9b:ff:b1:a2:e8:bb:a5:bb:
                    45:26:bf:d8:c6:83:2f:56:78:be:64:21:4d:49:72:
                    03:a7:83:6a:a9:58:e6:56:83:76:0e:2a:06:58:3e:
                    ea:35:bf:ba:58:d4:b6:b3:17:10:fb:78:58:be:06:
                    b5:35:c9:50:85:d3:70:ce:ac:d4:7d:5f:c8:47:5f:
                    2f:b8:ea:65:fa:c5:c1:0d:5c:59:b2:af:2b:a0:34:
                    b3:3b:38:75:62:12:f8:a2:50:f5:c1:84:70:95:7d:
                    0e:a9:fd:a2:85:23:52:6d:73:c9:e7:14:78:59:13:
                    01:ca:d6:61:a2:be:e8:b2:bb:27:88:31:ed:b5:86:
                    68:8e:d9:f1:34:84:85:49:1c:64:c1:a5:fe:87:b2:
                    65:19:bd:08:23:37:f5:30:a9:90:6c:08:8b:1e:ab:
                    c2:af:ee:fb:bb:ce:4c:2a:8d:f9:a3:03:5c:4c:c3:
                    89:95:53:6c:d0:57:67:f1:b3:fa:d6:85:81:20:86:
                    a5:ad:e9:cd:75:67:2c:78:78:60:7d:f0:98:c2:71:
                    31:bb:e7:69:c9:17:6c:6e:24:1c:e3:8a:f3:44:cc:
                    95:09:cf:bd:88:52:a9:3c:8c:37:6e:c8:5d:ab:c8:
                    00:f2:49:09:5a:4d:7b:d8:99:34:63:20:81:7d:bc:
                    01:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:ED:FA:C5:CB:78:CE:D0:84:15:47:11:EB:55:F2:29:9A:A7:22:A8
            X509v3 Authority Key Identifier:
                keyid:3F:65:37:5A:4D:36:F5:CA:E1:A1:FE:24:58:A3:80:52:6C:FE:DB:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:36:38:49:19:a3:78:c0:1d:fe:7b:4d:72:df:9e:e6:99:0c:
         16:eb:bd:30:49:83:71:39:7c:24:ce:16:7d:88:9f:8e:df:22:
         7a:0e:9b:9a:0c:7b:91:44:fe:b4:94:3f:ff:9d:30:53:78:da:
         df:2f:49:dc:70:7e:2d:8e:5e:d8:ab:78:90:b9:b2:8a:0b:fc:
         a9:a0:a2:dd:23:7f:db:97:19:9c:27:3b:a6:fe:0c:af:51:80:
         da:4e:d7:ad:cb:d2:75:ea:95:fb:fd:e5:e9:5d:c9:84:bd:90:
         3f:28:44:8d:9f:97:cf:1f:c8:14:cb:a1:97:dd:b2:58:1e:ed:
         dc:eb:a5:e8:b3:9b:4e:0a:2b:3c:da:7c:4b:9b:46:fd:31:0f:
         c9:d6:20:71:51:12:34:44:77:16:db:4f:2b:69:9c:0a:aa:b2:
         aa:5d:4f:0d:1c:61:4e:99:16:34:83:05:ca:7e:f0:61:00:8f:
         62:56:45:a5:a4:46:ba:94:85:a4:d3:dd:58:a8:02:7b:31:d6:
         f8:1e:90:0c:78:8f:9c:64:b3:9e:a1:7c:6b:21:6f:b5:f6:5f:
         02:4d:f8:d5:1b:b8:02:66:27:e1:c5:d0:fd:c9:1f:32:43:71:
         ef:f4:3b:78:c1:51:ec:1a:9a:2b:f3:63:c1:ba:ff:60:f3:1e:
         70:73:74:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:43:23 2026 by rpki-client