Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
File:                     Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft (raw, json)
Hash identifier:          0BkOb38RR0zVW5VJ97eziBa1gSRCYWQIYQgkgd3g8gQ=
Subject key identifier:   91:C1:23:6B:3C:97:DA:C3:01:2E:2D:EA:EA:78:AA:33:65:26:E7:93
Authority key identifier: 4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44
Certificate issuer:       /CN=4eaefc49e6cd67e25996a2c0fc57b80cc23dba44
Certificate serial:       019E1D59B84EEEC8CCAFD0D94999DAE908B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
Manifest number:          1899
Signing time:             Tue 12 May 2026 18:01:19 +0000
Manifest this update:     Tue 12 May 2026 18:01:19 +0000
Manifest next update:     Wed 13 May 2026 18:01:19 +0000
Files and hashes:         1: HPyXpgvZq0DmF5lYqywyaXxXuLs.roa (hash: xJJdHEjB0zhK0uHLhPfuryAT20NVmJFJDeJjva/xFEM=)
                          2: Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl (hash: OsLekeP7lo1d6NHeb3j9CQxDcBtKDUsKN50a/2R9o9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:b8:4e:ee:c8:cc:af:d0:d9:49:99:da:e9:08:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eaefc49e6cd67e25996a2c0fc57b80cc23dba44
        Validity
            Not Before: May 12 18:01:19 2026 GMT
            Not After : May 13 18:01:19 2026 GMT
        Subject: CN=91c1236b3c97dac3012e2deaea78aa336526e793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9f:53:7a:40:40:ee:c2:c8:d0:0a:5c:d1:b1:
                    9d:ef:ed:82:8c:b6:c1:75:8d:b1:77:73:45:52:25:
                    0a:7b:5a:8e:c7:dd:ca:03:21:77:ef:2b:e2:52:20:
                    32:f7:79:bc:dc:be:c5:40:7e:70:6f:03:87:26:a2:
                    ef:b4:f2:fd:fe:e5:3f:47:bc:59:8e:92:5a:19:dc:
                    57:f5:5d:30:69:75:41:4e:77:be:14:70:8d:a6:e2:
                    d9:80:44:f7:f5:f4:37:00:43:70:84:84:5d:6d:f0:
                    2c:c0:c9:2f:6c:59:b0:f2:51:75:ad:fe:3a:6d:4f:
                    ad:df:b6:e6:d4:42:33:7e:99:93:2b:80:06:9c:e7:
                    1f:4b:9c:03:84:cf:00:50:f1:fd:2a:41:b5:94:0c:
                    08:fc:a4:06:02:22:81:a4:3e:85:0a:8d:65:bb:3b:
                    e7:85:27:0b:d6:dc:58:99:ab:da:aa:a7:73:6e:a4:
                    9b:48:f6:73:7a:72:53:c6:64:55:5f:f5:42:4f:2f:
                    d3:59:44:87:b3:6f:1e:2c:a6:11:d6:21:e6:53:6f:
                    df:48:5f:4b:93:88:e7:a7:5e:7d:1f:9a:9b:62:4f:
                    ce:a1:63:7f:26:17:c8:4e:8a:dc:b7:fb:45:ff:83:
                    a9:90:66:c2:00:cc:2b:5b:36:e3:b9:17:61:b0:f6:
                    45:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C1:23:6B:3C:97:DA:C3:01:2E:2D:EA:EA:78:AA:33:65:26:E7:93
            X509v3 Authority Key Identifier:
                keyid:4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:8c:e4:16:71:ea:00:8a:cd:b9:c3:96:62:b9:96:de:33:d6:
         d9:a7:d5:13:5c:7e:1c:8a:f2:36:2e:b4:f5:35:a9:48:f6:78:
         5e:93:f3:c5:20:97:c3:cd:32:2b:d2:df:57:90:28:d7:5b:02:
         79:22:07:ee:12:66:84:1a:a1:a2:a8:3c:9e:1c:64:a7:28:fe:
         17:64:73:fb:a7:0a:02:b3:74:54:f0:d0:de:9a:4c:b9:9e:c3:
         b8:7e:c1:8d:80:ce:e3:38:4a:fe:3f:6f:6e:0b:a4:d3:e9:5d:
         cf:49:16:ce:fc:31:2c:51:af:92:47:a0:55:dd:92:dd:c1:7a:
         44:30:ca:a8:6f:c0:a1:57:85:ef:04:d3:be:d9:8b:85:90:d6:
         cf:ab:17:ff:a1:84:91:b3:2d:08:d2:42:43:cc:7b:e5:be:60:
         77:f1:31:0c:bf:7a:98:6d:24:9f:3f:d5:06:b8:fd:9b:b4:cf:
         a3:bd:3a:a5:32:6a:de:59:5d:dc:d2:1b:ef:2f:c4:28:07:de:
         62:8b:07:d3:fc:83:5d:d1:9d:50:d5:b9:fc:c1:82:62:9d:68:
         e7:a3:b1:a1:f9:ba:33:b6:d4:99:62:68:b2:ce:db:8a:4a:bf:
         fd:06:a9:39:f0:20:de:08:d7:6d:b5:ff:5f:51:b8:8a:0b:75:
         43:b7:ff:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:49:29 2026 by rpki-client