Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
File:                     ii4u4759dSXtdLeq4H6Srsr4STY.mft (raw, json)
Hash identifier:          kAYCT2KosMETLiadfJwBkHlJdoUn2Z/qS1BymKLDonM=
Subject key identifier:   1C:C5:91:AE:C3:21:2A:4D:0C:73:41:D9:70:14:7C:B5:24:3D:A0:E4
Authority key identifier: 8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36
Certificate issuer:       /CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936
Certificate serial:       019E1E351872EC90ADC83780BF980A08DE60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
Manifest number:          0794
Signing time:             Tue 12 May 2026 22:00:56 +0000
Manifest this update:     Tue 12 May 2026 22:00:56 +0000
Manifest next update:     Wed 13 May 2026 22:00:56 +0000
Files and hashes:         1: DXojyG6Fa76_70LTpGedxCQc75s.roa (hash: HWxVU0ho3JUfdYcZ/ilbHWOHlNIlCGDgzL/80lsIOt4=)
                          2: ii4u4759dSXtdLeq4H6Srsr4STY.crl (hash: vamG2s9LiaHJMZTOFLw+unMLArsQJ4FFFdoUQGEVfCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:18:72:ec:90:ad:c8:37:80:bf:98:0a:08:de:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936
        Validity
            Not Before: May 12 22:00:56 2026 GMT
            Not After : May 13 22:00:56 2026 GMT
        Subject: CN=1cc591aec3212a4d0c7341d970147cb5243da0e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:21:f0:d6:0b:3c:36:5d:54:a8:da:f9:4c:ef:
                    9c:a2:36:62:0d:f7:63:bf:ca:57:58:21:2e:73:df:
                    f0:55:29:c6:a2:fb:04:7f:38:93:78:0f:7e:86:d2:
                    d0:1f:f2:5d:55:e7:87:0e:17:0a:da:11:e0:76:46:
                    92:89:d8:a5:1e:b4:9d:39:55:01:b3:78:ce:5a:77:
                    d4:7e:52:f9:3a:25:ad:59:a8:82:98:be:df:74:ac:
                    c8:da:7c:f2:9e:b9:29:28:da:cb:e8:f2:dc:b3:aa:
                    45:e1:18:7b:7f:ee:ef:0f:a1:b5:e3:64:6e:e4:8b:
                    0f:8b:0c:15:e3:71:7c:5f:0c:f4:c4:de:9e:ca:69:
                    52:ab:47:0e:bf:96:d0:17:41:e7:3a:3b:85:a9:a1:
                    37:87:a2:80:1d:bc:a1:3f:24:94:11:13:2d:c5:1f:
                    a1:71:7b:2c:be:e4:87:f8:d4:69:41:9c:8d:d4:e1:
                    14:25:53:63:06:d8:57:9f:7d:9d:fd:4f:dc:47:b8:
                    c8:38:0f:10:7b:cb:e2:f1:05:fd:2f:c9:be:41:60:
                    72:d2:65:53:f5:e3:0c:ca:d0:b5:43:3f:35:ba:d8:
                    4e:36:7a:cc:78:11:35:d4:bd:c9:90:47:3a:f1:e4:
                    52:05:9f:8d:a3:a9:80:d5:42:78:ab:31:6d:2a:b6:
                    d2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C5:91:AE:C3:21:2A:4D:0C:73:41:D9:70:14:7C:B5:24:3D:A0:E4
            X509v3 Authority Key Identifier:
                keyid:8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:e7:79:c3:c7:37:91:89:9e:4a:ea:5b:63:17:c6:19:d3:2f:
         12:9b:5b:73:dc:69:21:b8:9c:5a:95:31:71:83:12:39:05:88:
         fd:7a:71:0f:c9:be:65:3f:82:22:2d:e1:fc:04:da:b8:a7:63:
         d6:9a:9a:92:fb:55:02:cc:db:99:af:6c:72:9f:d1:4f:60:62:
         47:62:ea:10:5a:d5:d8:24:a6:d8:52:a2:5c:8f:ed:ae:6c:bb:
         d7:66:c6:c0:ad:d8:e7:55:f5:fc:a4:82:27:cf:17:dc:2c:f2:
         f6:4f:73:7b:b1:09:77:e4:24:27:43:1d:31:09:a7:2f:5a:0f:
         6e:b8:f5:8c:d3:1b:f0:72:f0:2c:34:10:ad:6a:c5:ac:3e:fb:
         18:12:f4:29:54:7b:aa:80:b4:d1:e3:15:f0:1d:87:e3:85:a1:
         19:55:aa:27:26:fa:ec:ca:6d:0d:c2:16:47:8a:07:73:30:21:
         77:f7:46:e0:c5:55:1b:e5:ce:95:97:5b:a8:b6:31:6a:50:5d:
         cf:23:87:7c:94:96:5c:42:4e:2e:a9:69:12:5c:f3:ac:7e:3f:
         4e:4f:a8:ea:74:8a:37:fb:b5:8d:73:3f:b8:f8:b0:35:89:a5:
         08:2d:4f:8b:32:c2:bd:2c:8b:ed:e9:7e:bd:15:71:a2:6e:d7:
         7c:11:24:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:02:31 2026 by rpki-client