Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
File:                     SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft (raw, json)
Hash identifier:          ekcqZpZvUVh0+XfLdwINnyDyHJPPHz/Ymq3CNmUhS1c=
Subject key identifier:   55:FA:29:C7:1B:86:4A:30:A4:CC:FA:72:DF:44:27:BC:8E:BA:D6:EF
Authority key identifier: 4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
Certificate issuer:       /CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Certificate serial:       019E1EA2E7156A7479023C20DBEA39FF7C88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 00:00:52 +0000
Manifest this update:     Wed 13 May 2026 00:00:52 +0000
Manifest next update:     Thu 14 May 2026 00:00:52 +0000
Files and hashes:         1: FXM0lZ9RW8MVyeNhLRa0gA27Yz8.roa (hash: AOWqH2G8p3eNy+r9FYww+1k4v48/EVkof2UT4jbdqII=)
                          2: ScbfsojaaHjN1VPlqjt62kAyKyQ.roa (hash: lQ50zLidvT+ypigEP+SJVNAGB7dMGWzSVTcP7sdJtfU=)
                          3: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl (hash: pxXDHqfppNZrwV6vty56qFjGDZ2sjDBL3vlHmiC++PE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:e7:15:6a:74:79:02:3c:20:db:ea:39:ff:7c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
        Validity
            Not Before: May 13 00:00:52 2026 GMT
            Not After : May 14 00:00:52 2026 GMT
        Subject: CN=55fa29c71b864a30a4ccfa72df4427bc8ebad6ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bd:06:e0:a3:42:20:c5:0d:89:64:c1:4a:4b:
                    f4:65:79:69:97:e9:c7:6f:2b:2a:e0:eb:fd:ea:17:
                    03:b6:3b:83:e7:0a:b6:0d:0b:9b:0f:57:91:55:03:
                    6e:1b:40:c8:0c:0c:1f:00:00:5d:97:8e:d0:2b:59:
                    ed:29:40:d7:75:ba:70:b9:c6:5e:95:04:fb:12:ef:
                    18:d0:fd:0a:da:7d:41:30:f4:c9:b6:0f:bf:7e:52:
                    6b:09:78:f9:61:d2:91:36:ff:b4:bb:97:d9:04:10:
                    a2:6b:ce:ea:22:d8:f1:11:21:85:2e:d8:2d:93:09:
                    f6:ac:6e:29:0c:3b:ef:0b:72:87:b4:86:c0:07:f3:
                    79:53:45:e4:b1:56:7d:22:ef:9c:0d:52:74:4f:87:
                    d1:23:f8:25:92:16:5e:39:2f:fc:eb:7f:3d:41:5a:
                    f2:ca:c6:a7:2b:8e:63:13:31:20:aa:84:90:c6:9b:
                    2f:db:2d:f6:68:91:91:3f:9d:d5:99:3e:64:1f:33:
                    9f:8e:aa:92:c2:c3:e1:65:54:dc:b1:98:6b:8f:84:
                    e8:bc:bc:ff:f4:2b:99:5c:24:07:d7:2b:9d:51:2d:
                    a3:f6:8c:4e:7d:cb:d8:cb:3c:eb:4b:cf:79:94:20:
                    b0:1a:20:23:43:0c:eb:ea:e3:b9:a2:f1:51:b8:fd:
                    4f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FA:29:C7:1B:86:4A:30:A4:CC:FA:72:DF:44:27:BC:8E:BA:D6:EF
            X509v3 Authority Key Identifier:
                keyid:4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:b0:ca:91:19:a0:66:83:fb:af:76:bf:c5:92:48:f7:70:4a:
         f3:be:dd:a6:d7:27:d5:3b:8d:70:77:1f:6b:79:3e:56:d3:d8:
         2d:ae:1e:d9:2f:dc:85:2f:ce:02:ae:68:5f:90:2c:ef:7a:d9:
         ba:38:2f:9e:5b:88:8d:a0:2b:4b:df:96:be:e6:3b:cd:73:8b:
         1d:5f:04:7e:13:3a:31:06:4d:4a:35:48:e4:d2:0c:51:21:fa:
         ca:18:fa:a8:a8:7a:de:d7:14:bb:02:21:18:2a:3d:1b:68:08:
         42:60:f8:94:e9:4f:63:16:f5:31:be:26:0a:c6:d2:4b:00:c2:
         f0:a7:56:29:79:68:6e:d3:36:1e:45:29:27:4f:c2:1c:94:54:
         59:05:d2:dd:77:c9:be:ef:14:5e:f7:39:a0:12:be:b4:a3:04:
         93:1a:a1:50:8f:2a:4e:00:51:69:5a:e4:0c:e5:ef:cd:3a:6c:
         81:0f:eb:d1:fd:ce:0f:f6:41:e5:5a:96:9a:d0:84:96:25:ce:
         a0:23:5e:10:e1:eb:4a:b0:0a:91:25:2a:01:04:14:08:5a:0b:
         5c:78:c6:9c:6e:0f:71:7d:c5:25:64:08:45:3f:64:93:49:01:
         83:71:33:57:3a:e4:ab:2d:67:22:f7:6b:d2:9a:1f:7f:7d:3a:
         65:02:87:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:44:20 2026 by rpki-client