Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
File:                     T4EisJRezMsfL7mRL72GqgSmGYc.mft (raw, json)
Hash identifier:          H3P9y46r30a8AN0Ey/1aLLE3G/ws7c0cMuCEMWOSeJ8=
Subject key identifier:   B6:68:E6:9D:6D:EC:5B:89:9A:E0:2A:A8:94:DB:1B:F8:70:1B:18:EE
Authority key identifier: 4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
Certificate issuer:       /CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Certificate serial:       019E1EA2AE215136E591457D9D49739A27AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
Manifest number:          1906
Signing time:             Wed 13 May 2026 00:00:38 +0000
Manifest this update:     Wed 13 May 2026 00:00:38 +0000
Manifest next update:     Thu 14 May 2026 00:00:38 +0000
Files and hashes:         1: T4EisJRezMsfL7mRL72GqgSmGYc.crl (hash: Nokbq+ulgekleRkC21RQmAt0ZDJ6nqpeQR4se7e1I2A=)
                          2: uulI6ExTJtP3irGdM2S5HIHQNgA.roa (hash: dOSl4h1kgdktrCS2a2Neg4UQzObDt3tKhXAVO/T4UEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:ae:21:51:36:e5:91:45:7d:9d:49:73:9a:27:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
        Validity
            Not Before: May 13 00:00:38 2026 GMT
            Not After : May 14 00:00:38 2026 GMT
        Subject: CN=b668e69d6dec5b899ae02aa894db1bf8701b18ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c2:1f:3e:47:ef:80:e6:66:6f:c9:27:c9:ca:
                    3f:61:5d:66:32:d5:30:1b:db:67:80:4e:b7:1c:39:
                    dd:f8:bc:8a:65:ec:b6:5c:05:38:fc:b8:0b:33:4a:
                    b1:7d:e8:21:e5:1b:2a:57:c9:ff:95:62:2b:61:52:
                    8b:ab:37:65:21:f1:74:25:d6:68:26:0f:a7:0e:58:
                    bd:d6:e7:de:cf:5a:e4:3c:ee:c8:7e:a6:68:4e:81:
                    ae:d7:05:6f:ab:54:5f:82:a8:23:6c:39:41:60:b6:
                    0b:78:21:4d:e7:b2:3f:89:c0:46:72:d2:39:87:95:
                    40:70:d7:4d:6b:81:bd:1f:be:b2:9b:a9:58:83:63:
                    2d:47:0b:92:dd:49:fb:55:ae:09:bc:31:c8:cc:22:
                    0e:b2:57:11:85:62:ee:9b:96:01:3b:7e:05:5a:0b:
                    28:1e:3d:a7:80:60:b2:a9:30:ad:ce:49:43:c1:24:
                    72:b9:19:09:6f:a3:d0:da:07:59:9c:3c:b3:21:76:
                    3e:06:4e:a4:07:50:2e:c6:c4:c9:0a:ce:06:2e:e8:
                    e5:6f:79:8b:4a:22:65:d7:87:5e:eb:c5:45:71:00:
                    9f:67:95:f1:69:f1:f2:78:d6:08:57:72:d5:b1:08:
                    65:f0:19:63:66:bf:43:dd:3d:61:d0:5e:ae:bf:ab:
                    05:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:68:E6:9D:6D:EC:5B:89:9A:E0:2A:A8:94:DB:1B:F8:70:1B:18:EE
            X509v3 Authority Key Identifier:
                keyid:4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:73:0c:5a:9d:3c:95:ab:fd:6a:49:97:15:03:0e:f2:fb:89:
         0c:9c:89:85:c8:46:02:ca:c5:61:1f:b9:27:5e:5a:f6:e2:13:
         6b:d1:3c:c7:10:75:28:8b:00:af:73:27:e6:fe:71:50:5e:86:
         67:59:ff:21:19:ed:63:69:57:62:b3:92:50:08:e8:07:44:21:
         02:8d:ab:ee:86:cc:a3:4b:53:72:88:da:18:4e:53:7c:08:69:
         65:46:1c:6c:4d:a5:58:b3:be:dc:60:94:90:5e:bd:1c:bb:61:
         15:ef:2e:fa:53:bd:f9:76:60:8d:d6:2b:68:87:50:05:b6:05:
         9a:b5:92:c0:d6:dd:d9:f7:69:5f:bc:24:8b:4d:b1:83:de:fa:
         a4:5c:af:5f:64:06:44:30:62:ab:81:0f:16:79:6d:77:a2:08:
         31:53:67:ad:48:fd:12:69:48:c1:3f:7b:71:e3:32:ee:c0:fb:
         6e:ed:a5:54:7d:cb:ee:76:c9:05:3f:cc:3b:d1:20:e0:4c:d4:
         fa:63:29:19:f8:7c:7a:af:5c:9e:55:ae:22:28:77:4d:a4:cd:
         39:7e:bc:34:81:ee:26:15:20:ca:7d:54:cb:8f:52:83:f9:8a:
         c8:53:8f:d4:cf:e5:0a:7c:d5:c8:1c:a2:9d:fe:f4:73:ed:01:
         d4:0b:2f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:34:03 2026 by rpki-client