Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
File:                     TJETJOhpvEyl7IutDT3f9oVEGXk.mft (raw, json)
Hash identifier:          hFA1gi8XcwyAbpvS5grNR8fxrG4qi+bCTo8f3OjkOUo=
Subject key identifier:   90:F1:64:DC:CD:05:52:A5:4F:61:DF:E2:13:27:A1:58:8D:9F:81:32
Authority key identifier: 4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
Certificate issuer:       /CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Certificate serial:       019E1D222AE6FAD0DCCEC64D5861947DEFE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
Manifest number:          190C
Signing time:             Tue 12 May 2026 17:00:38 +0000
Manifest this update:     Tue 12 May 2026 17:00:38 +0000
Manifest next update:     Wed 13 May 2026 17:00:38 +0000
Files and hashes:         1: DfRI4dovSnMSIcVz_GFD0L7vBIw.roa (hash: kG8QsSLcBHIkntfvUqxfKD4RZMhBctOildhkIA33eIw=)
                          2: TJETJOhpvEyl7IutDT3f9oVEGXk.crl (hash: eqOLFhVU4lDnpTbaIb6nFYUQPGAgxB7wGSHvC0qK+mw=)
                          3: hG7korJHdX3J-VQRQpsautEAs5k.roa (hash: Iemgb9cSM4wP9xZ65kMEtq49P3Moq93S8ieRnN38Nu4=)
                          4: oE6QS3Q6uaxGz3Cm7YOOUEm6M9s.roa (hash: gHUoKUVYSCToS8vVN5V7q87OQVYzxsOvUwmEfqESOxI=)
                          5: qSNYJ-9hvnj2oMFvdiXLbxjhOwk.roa (hash: bfBTAvujo01mv5S6EOQahz4Gss8vRe5ZhsQN9X0Csy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 17:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:2a:e6:fa:d0:dc:ce:c6:4d:58:61:94:7d:ef:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
        Validity
            Not Before: May 12 17:00:38 2026 GMT
            Not After : May 13 17:00:38 2026 GMT
        Subject: CN=90f164dccd0552a54f61dfe21327a1588d9f8132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e5:60:82:6f:6c:b6:1d:74:a6:35:9d:6c:44:
                    1e:00:2c:04:78:8e:c3:7b:cc:03:a2:fa:ac:e5:9b:
                    84:e4:4c:23:db:ad:fa:f4:6b:50:5d:cd:55:68:cc:
                    2c:92:13:1a:f8:1a:ea:55:8b:36:a6:78:34:8e:54:
                    2b:fc:c8:b3:64:5b:46:74:eb:bc:01:dc:02:91:71:
                    46:16:47:c0:c6:88:2f:d5:11:08:be:89:64:d9:03:
                    85:a3:b6:7a:de:11:2e:15:13:58:71:ff:c5:61:bd:
                    f8:ec:92:5f:89:12:22:5d:7c:c2:91:c3:a5:b7:9a:
                    37:4c:9d:ed:09:56:f2:16:9d:de:1b:d5:20:08:98:
                    e6:49:76:f9:16:7f:79:ce:0f:6a:b0:67:ee:89:60:
                    2d:82:45:d1:63:ad:1a:df:66:3a:ca:13:16:d6:78:
                    99:8f:bb:76:8f:25:5e:f3:ca:2b:50:d8:9e:cd:c9:
                    c2:36:c1:ea:d9:21:85:65:c8:1e:a6:24:e7:40:a1:
                    3a:d7:2b:2f:35:c7:3d:2d:76:cd:28:87:07:95:8b:
                    61:59:31:86:b8:3d:90:46:32:a9:34:89:fe:6e:fb:
                    65:a7:5a:de:70:45:1d:4d:27:e7:b3:b8:87:32:b5:
                    ae:55:40:1f:9f:dd:15:23:41:90:71:37:65:a0:38:
                    12:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F1:64:DC:CD:05:52:A5:4F:61:DF:E2:13:27:A1:58:8D:9F:81:32
            X509v3 Authority Key Identifier:
                keyid:4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:37:47:fd:c3:90:db:06:84:2f:3d:3b:7b:48:b4:e4:bc:16:
         cf:79:e7:03:7f:73:23:ab:a1:ae:f6:75:ee:e9:c6:7f:ae:3d:
         cd:77:31:09:5d:c3:10:8f:b2:26:5c:a3:0b:ea:7b:96:42:9c:
         38:b2:2d:b9:04:72:4f:ba:cc:ca:12:88:e3:3e:d3:fd:34:96:
         45:40:92:50:4b:04:ca:44:c4:de:67:12:65:5d:74:75:42:af:
         1c:64:33:56:39:60:6a:f6:d5:9a:3d:d1:8d:25:8e:58:ce:08:
         7d:65:80:ec:a6:b2:70:2b:46:76:4d:99:11:ca:46:57:fa:2d:
         35:7a:bc:ec:44:ba:99:32:5b:a0:ab:e6:54:f2:bc:a2:16:f6:
         2f:6a:1b:98:24:eb:64:a0:fa:f2:18:2c:0b:68:4f:66:f7:29:
         4c:71:96:ba:8c:fc:05:42:3d:53:44:ad:6a:6c:86:63:00:91:
         4d:1a:93:cc:17:9b:7d:37:4a:95:a3:de:8b:ca:40:6d:9c:21:
         0c:c9:9c:3e:5e:06:0c:68:38:13:ce:79:d2:7c:72:a8:7e:01:
         58:96:b0:1b:a2:1a:4a:b3:27:a4:98:23:77:85:8c:23:35:bf:
         e8:3d:06:ec:55:34:0d:a1:e1:d7:54:95:3e:76:47:b3:60:8e:
         16:a6:dd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:07:51 2026 by rpki-client