Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
File:                     BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft (raw, json)
Hash identifier:          /hea/av8KNYNHhZJLW4AceHIV9OxQg3HMJeI1ZNWQO4=
Subject key identifier:   65:95:65:BC:3F:A7:E6:AC:D3:20:28:4B:07:D0:82:E2:1B:83:5E:AE
Authority key identifier: 04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
Certificate issuer:       /CN=044aacab9a49e143de68979ad156b42dabddde8c
Certificate serial:       019E1D5914DE6FE6DC78F2048E78798A1B23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
Manifest number:          190E
Signing time:             Tue 12 May 2026 18:00:37 +0000
Manifest this update:     Tue 12 May 2026 18:00:37 +0000
Manifest next update:     Wed 13 May 2026 18:00:37 +0000
Files and hashes:         1: 6VGmX6NAAFOzudHyly-8IFYoviU.roa (hash: 5ULIL6QIhSxpM5aYkY52QRwqFOkWYUStaLXhPQEiLb4=)
                          2: BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl (hash: IAjQavnDN7YYKoU2US89AxTb0huL9PnCcTzX2sGpbXY=)
                          3: bntWlO8oAlo3XYjAKgtrS7rFv8o.roa (hash: 6tubppKQ5zfg5RFiNy88jOr/kwZ+vEP0vXQ4G8njoEg=)
                          4: nuW6ML3TvJmSV9h0k4vMEIRWC5Q.roa (hash: msy2THWwVTMt/rAs3vNKJ6SLSzkdR429A7ghT9Iz+6Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:14:de:6f:e6:dc:78:f2:04:8e:78:79:8a:1b:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044aacab9a49e143de68979ad156b42dabddde8c
        Validity
            Not Before: May 12 18:00:37 2026 GMT
            Not After : May 13 18:00:37 2026 GMT
        Subject: CN=659565bc3fa7e6acd320284b07d082e21b835eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1a:fb:03:47:5b:4b:49:64:12:84:fd:30:43:
                    b5:52:3f:2c:00:53:90:ce:c8:41:e1:3c:ce:9d:9c:
                    b8:87:7c:d6:e3:5e:ff:0a:d2:3f:ea:97:6b:88:31:
                    a9:2a:c9:2e:00:29:5f:4b:2f:2c:de:98:34:57:99:
                    7d:34:c0:90:af:f7:74:62:86:89:27:f8:bb:bb:f0:
                    0b:b3:e5:9a:ad:54:51:c3:01:dd:a6:33:29:42:1a:
                    2e:95:9f:54:ce:1b:44:1b:af:cb:29:93:0d:87:2c:
                    82:ed:69:da:26:28:5f:d1:99:00:7a:b9:e0:ce:34:
                    92:97:3e:ce:f1:09:ac:48:fa:e8:2e:8b:e2:45:06:
                    db:19:8f:27:a0:0e:3a:a9:04:34:1d:a7:57:1b:d5:
                    79:30:be:a3:9c:5b:da:0a:0c:1d:e3:8e:d0:46:a9:
                    fd:7d:74:27:51:53:63:0e:87:d2:34:05:a9:5b:c8:
                    13:18:4a:24:97:35:3e:30:44:ba:5f:7f:a6:80:1e:
                    71:c2:22:e1:1b:8e:9f:22:74:b6:ad:c5:32:15:42:
                    44:f6:42:77:3e:c2:b5:75:98:7e:1b:d1:03:cc:e0:
                    a1:5f:7d:e5:5d:d1:22:98:93:df:d6:fb:35:12:cd:
                    2f:cc:7f:89:0a:9d:31:8c:eb:39:6b:99:e5:3e:8a:
                    d3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:95:65:BC:3F:A7:E6:AC:D3:20:28:4B:07:D0:82:E2:1B:83:5E:AE
            X509v3 Authority Key Identifier:
                keyid:04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:e3:47:81:37:8b:81:bf:0b:6f:7c:64:56:a9:69:20:86:c0:
         d2:59:96:26:97:d0:f8:5e:ec:d0:89:ee:03:46:c0:e8:00:7d:
         2b:6d:fa:13:50:40:52:8e:05:ac:ac:b1:f7:b5:98:37:48:cb:
         f2:10:75:1b:7e:27:82:ab:1d:b1:2d:a4:d7:77:23:9d:da:d1:
         16:61:5b:de:1a:49:6c:b9:91:cd:2b:16:71:48:c7:bc:26:6c:
         17:1c:73:e3:c2:15:b9:50:1b:0b:d6:ff:ce:3e:21:00:c4:85:
         09:c3:89:33:b6:4d:bc:68:2a:83:8a:1a:f6:8f:0d:d7:49:35:
         ca:5a:a6:f0:69:12:47:32:2b:16:bc:3e:8a:27:79:43:e4:f6:
         9c:5d:ff:0f:87:5a:ac:24:f3:04:6c:c9:71:5f:66:a6:62:b2:
         fe:fa:41:18:8f:e0:59:34:20:9a:e4:05:12:6e:2f:de:88:15:
         2b:95:4c:2b:5f:ec:00:e5:69:d5:7e:b2:5e:9a:f8:c3:a2:c0:
         e5:da:52:65:3b:06:68:e2:42:a4:cb:ed:7d:5d:8f:93:bd:50:
         22:1c:ab:1b:a1:f0:08:8a:38:13:41:92:7f:7c:8e:f7:ef:f9:
         ab:ed:6a:44:1f:80:5f:6a:fc:ab:93:5d:8b:6a:ce:7e:83:33:
         9f:f9:d4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:07:51 2026 by rpki-client