Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
File:                     a30fHod8EnmCdOATNFVPiZ846sE.mft (raw, json)
Hash identifier:          KiALSnF1t2++sGe5dkLFIF0+0ZMptQe+Rh7eThG79B8=
Subject key identifier:   95:FE:2A:D6:68:DC:39:CF:F1:60:E8:63:96:3D:2C:12:CE:90:92:BD
Authority key identifier: 6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1
Certificate issuer:       /CN=6b7d1f1e877c12798274e01334554f899f38eac1
Certificate serial:       019E1DFE7A344F31C335BFDAF5324E8C0D04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
Manifest number:          1395
Signing time:             Tue 12 May 2026 21:01:17 +0000
Manifest this update:     Tue 12 May 2026 21:01:17 +0000
Manifest next update:     Wed 13 May 2026 21:01:17 +0000
Files and hashes:         1: T66u3sAZ1h5lcd7CohPfojjoGXM.roa (hash: b1dlk+UCa27l6BBCa3opEOMqOQC7JiJWknd1DaHG0Vo=)
                          2: Ud3In0OaskIaLWIkC7KZsdF241I.roa (hash: AB7KnYKNBO0Ndoa3Ocgqa4UpFDUV3mhvx0miDDfBz5E=)
                          3: WBUV1KvDkb2jOcRdkjFWIVt7ErY.roa (hash: ajrXPdqhe0OAtEgCrpBNnNMpZPGjD6DwlNl7HI0x0zY=)
                          4: a30fHod8EnmCdOATNFVPiZ846sE.crl (hash: lv6NoewE7E/ooGEkCZQHqAKfpR51Tm5uTkfmshxXLTI=)
                          5: kJEyi9t8ewQAOML32QKelXRnNQw.roa (hash: qisABknNXytALeoXTgeNFHWe1rQRJTNgqfs59Mw/Lek=)
                          6: n_fghfm4yvkyJN0aLgQKMYifpk8.roa (hash: s8M9V6kInMrZ8SN7cdYOAnlXWHjxa+Mtfe0ezUCITCc=)
                          7: zHv_4yLb29OZEPsryzQwrsubCmY.roa (hash: bf6GHsA4iW8nNCo3qaxOx39ntbWsQ60VlVEmI5fRZwc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:7a:34:4f:31:c3:35:bf:da:f5:32:4e:8c:0d:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b7d1f1e877c12798274e01334554f899f38eac1
        Validity
            Not Before: May 12 21:01:17 2026 GMT
            Not After : May 13 21:01:17 2026 GMT
        Subject: CN=95fe2ad668dc39cff160e863963d2c12ce9092bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1c:68:78:16:41:70:fd:bd:9e:57:22:de:f0:
                    fd:70:d5:b6:15:a5:93:7c:dd:72:ae:32:62:0d:55:
                    9e:be:5e:88:d3:52:3b:73:57:a7:eb:cc:b8:63:d3:
                    7d:89:10:15:ac:a1:17:6f:6a:97:7c:77:64:fc:54:
                    60:d4:9b:e3:1e:5d:4e:bf:8f:32:31:63:5b:4f:99:
                    a7:69:4a:13:19:65:a8:77:54:00:d3:3a:23:33:b1:
                    74:d4:0c:7f:bd:4b:e9:af:a7:c3:3c:f5:6d:ab:63:
                    a0:1e:88:03:83:85:01:75:28:b7:29:b1:b1:28:9a:
                    5a:7c:70:8d:68:2d:01:71:10:69:74:47:e4:ba:8c:
                    ac:f8:ba:2b:fc:09:91:f6:70:33:f7:5e:19:75:17:
                    ed:a0:2f:e6:ef:a0:f3:fe:b7:83:f6:24:9b:6d:07:
                    59:d6:f6:1d:65:2f:dc:3a:3c:84:fa:64:79:7a:91:
                    f7:ab:fe:3b:0c:95:81:72:7c:b6:7f:24:56:a8:f5:
                    2a:90:a5:04:40:fe:5a:f9:0d:6f:32:89:8d:a2:cf:
                    22:96:a7:5e:76:fa:b8:5f:73:3f:78:04:51:64:16:
                    88:59:4a:5a:ab:b0:e0:42:fa:fc:95:d2:6c:d2:48:
                    72:28:dc:2c:78:5b:99:b4:f7:4d:ad:2c:93:6a:a1:
                    8f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:FE:2A:D6:68:DC:39:CF:F1:60:E8:63:96:3D:2C:12:CE:90:92:BD
            X509v3 Authority Key Identifier:
                keyid:6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:51:89:59:1f:91:70:c3:1b:9d:2a:b2:ac:22:77:d8:4d:e5:
         3b:7f:31:4f:24:5b:b5:32:26:19:f3:8c:69:91:71:6d:05:d2:
         1b:15:df:d8:79:4a:b3:ed:81:1b:f7:6c:b3:f4:29:96:9e:32:
         b8:7b:d1:bf:6b:78:a4:43:37:38:3c:db:13:90:0d:3a:7f:75:
         a4:7b:3f:29:07:f0:96:ba:00:1d:1d:83:dc:9a:be:dc:41:db:
         1e:4b:e2:5c:f9:ef:6b:33:97:ab:87:6c:d5:05:d7:9d:d9:2f:
         c4:d0:30:b9:cf:c9:0f:5e:27:82:f1:7b:9a:95:73:8d:26:17:
         f9:16:70:d9:a7:9c:13:ec:e4:e1:92:92:df:82:69:9d:85:f8:
         76:6f:ba:1e:1e:75:fa:06:65:32:b0:64:00:85:b2:32:b5:75:
         0f:e4:3e:99:6a:5d:fb:14:87:30:ae:5f:25:cf:2f:0e:1d:89:
         a5:d5:38:74:e4:c0:df:75:f5:b8:59:f3:26:d7:74:a4:cd:11:
         77:6c:4f:0f:41:dd:97:dc:f9:4a:f5:6e:65:34:e1:cb:ad:28:
         96:e6:0a:ff:89:0a:18:ad:1b:fa:66:de:75:a7:fe:9e:ea:a9:
         87:88:8a:45:97:53:ba:1e:b8:31:3a:81:08:f6:94:7e:9f:05:
         1c:09:fb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:22:50 2026 by rpki-client