Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
File:                     TiopnxgqH9UdSwNimXr3qq4Na-k.mft (raw, json)
Hash identifier:          hk8qF4UuRslluXqPY1UFKuu6vbb8Dpx/YP+/lUi/nHo=
Subject key identifier:   B1:A1:2F:E0:49:70:54:DA:36:62:42:37:CE:0E:DA:2A:54:DB:4C:93
Authority key identifier: 4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9
Certificate issuer:       /CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
Certificate serial:       019E205A712013669F6C9AC97A15D832F830
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
Manifest number:          190A
Signing time:             Wed 13 May 2026 08:00:58 +0000
Manifest this update:     Wed 13 May 2026 08:00:58 +0000
Manifest next update:     Thu 14 May 2026 08:00:58 +0000
Files and hashes:         1: 2k317uytVg1LgjGnM4csFnuL6uw.roa (hash: X5Q8tV/hqbcuK15v8loayY7mcbXwTofvZ2nrjL9ZwFs=)
                          2: RQBMarFkU3OrDTBkZypKiOwxqg8.roa (hash: WhhYg2h0zkcqk2yaFPJERRYww67tY59hAk64ZXv/RAg=)
                          3: TiopnxgqH9UdSwNimXr3qq4Na-k.crl (hash: UfxI9vgTQVZqotv3GRNrRxVCyj9b2zumMuocXbFPrd4=)
                          4: v9i47anpnbrdLEZ-n1nwTrZVjyg.roa (hash: z6aINaroQHvMvD3JovJtp4EHLXzys7G2ZYIjVrJrEgw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:5a:71:20:13:66:9f:6c:9a:c9:7a:15:d8:32:f8:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
        Validity
            Not Before: May 13 08:00:58 2026 GMT
            Not After : May 14 08:00:58 2026 GMT
        Subject: CN=b1a12fe0497054da36624237ce0eda2a54db4c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8c:17:6f:58:b5:8e:87:2e:ad:33:b3:9c:6d:
                    10:e0:12:d0:6a:a2:80:01:55:ee:a2:1c:36:45:c5:
                    b6:33:ef:eb:e0:60:6e:e8:1d:93:22:6d:fb:52:ff:
                    e7:b4:de:dc:8b:e4:40:51:c9:93:d2:26:74:d9:8d:
                    1c:da:b0:0a:aa:6b:a5:2d:80:83:3d:43:0e:8e:45:
                    4d:b9:b3:ea:b7:ed:7b:5d:98:87:0f:d0:e5:ae:67:
                    5c:75:a6:de:b0:c9:27:89:fb:7d:93:7f:c6:0c:55:
                    5d:5f:ef:96:36:3b:a0:f8:82:ad:ad:6f:7d:3c:72:
                    2c:fc:be:6b:43:c0:a6:82:d8:dd:85:68:9f:20:ad:
                    99:84:a8:f4:a5:ce:20:72:bd:1a:b4:b7:28:5c:ed:
                    81:66:2e:02:0d:30:10:56:55:41:0d:d6:ab:f4:2e:
                    6b:da:7f:5c:5e:0d:61:70:b0:1f:47:7f:29:96:dd:
                    fb:e0:a9:0e:a4:15:67:22:50:a7:fb:44:fc:cb:91:
                    fd:78:65:32:40:57:33:6a:58:b8:47:3d:0b:b0:82:
                    08:c5:a7:57:6d:eb:15:24:e4:f5:74:36:eb:76:23:
                    ad:35:67:3c:bc:ae:3f:a2:60:93:7c:7f:e1:3b:ba:
                    82:53:bb:18:ef:50:45:ed:df:91:e5:18:8c:fd:c1:
                    cb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A1:2F:E0:49:70:54:DA:36:62:42:37:CE:0E:DA:2A:54:DB:4C:93
            X509v3 Authority Key Identifier:
                keyid:4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:2e:42:44:51:1d:bb:fd:82:51:8d:82:c8:05:64:ed:ee:06:
         64:5f:56:00:a2:db:6d:6f:cb:01:d1:8f:4e:5b:6d:4c:75:33:
         bf:af:93:57:40:bb:20:2f:6c:c5:c7:dc:38:e8:ad:41:54:78:
         e7:fe:94:b4:b7:12:d5:de:40:93:08:40:71:49:06:b3:27:88:
         4b:fe:03:65:65:5a:86:d4:e3:d8:9c:69:8c:bd:0e:b7:62:e9:
         8b:52:8f:c3:46:0f:68:7e:6d:a7:25:fe:79:f6:af:f4:4e:ca:
         b0:67:38:52:9c:53:df:b6:d4:d0:f0:5c:a8:7d:91:92:90:ed:
         db:e7:a9:3a:a8:63:48:36:0b:6f:95:e7:99:22:66:da:a9:f1:
         c0:12:d2:69:13:87:1b:e9:1e:ca:2d:ed:7d:08:b6:8c:bc:24:
         26:1d:00:dc:90:f4:92:83:a0:38:28:c1:3b:bb:01:bd:06:93:
         b0:31:2d:88:8a:92:1d:9d:40:c1:f5:a9:b4:d3:7e:f9:e9:fa:
         b2:f4:e0:10:cf:4b:1e:22:37:e1:ac:35:63:7f:7c:fa:ab:9b:
         eb:0e:1f:b8:5a:0a:f3:91:01:05:7f:82:e5:19:2d:65:37:e3:
         44:8d:58:66:43:d2:ad:d0:c2:1f:78:77:46:ac:cb:54:83:0b:
         6b:74:65:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:35:29 2026 by rpki-client