Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft
File:                     c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft (raw, json)
Hash identifier:          Uh6W850IeyuuY4GfGmKWsIl/F+uHXal+Pf8ay/bXPb0=
Subject key identifier:   67:75:9E:EA:D8:F6:29:9F:2B:90:3B:2E:87:43:FC:08:38:6F:F3:DD
Authority key identifier: 73:84:E5:08:E3:AD:F8:ED:D6:F2:A2:42:CD:AD:6B:DE:9A:5A:D0:18
Certificate issuer:       /CN=7384e508e3adf8edd6f2a242cdad6bde9a5ad018
Certificate serial:       019E1E355FF7888114EF76E94648D5BE375B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft
Manifest number:          019A
Signing time:             Tue 12 May 2026 22:01:14 +0000
Manifest this update:     Tue 12 May 2026 22:01:14 +0000
Manifest next update:     Wed 13 May 2026 22:01:14 +0000
Files and hashes:         1: HL-ROcW7ouFfM-ooSu_o2VREjBY.roa (hash: ujK5KehUzQkF735/HRjccuZM+b+O1T9dLVbDOeZE17s=)
                          2: c4TlCOOt-O3W8qJCza1r3ppa0Bg.crl (hash: E7PlHMpyul5zASB34d8V8Tjwm+KbtZuT3UNCY05JLp8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:5f:f7:88:81:14:ef:76:e9:46:48:d5:be:37:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7384e508e3adf8edd6f2a242cdad6bde9a5ad018
        Validity
            Not Before: May 12 22:01:14 2026 GMT
            Not After : May 13 22:01:14 2026 GMT
        Subject: CN=67759eead8f6299f2b903b2e8743fc08386ff3dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3c:59:f0:ba:b9:a0:d9:da:43:d7:7b:df:68:
                    6b:0a:22:c4:11:9b:f8:44:e3:09:30:c5:19:40:a6:
                    18:14:f0:85:a8:dc:e1:c8:92:17:3a:29:1f:72:93:
                    cf:c8:57:b8:b5:3d:ec:b4:8e:77:91:12:d4:a9:ff:
                    59:b7:1e:f6:9c:9f:92:7a:2b:07:80:e0:56:eb:b2:
                    7c:df:a2:45:47:64:d5:ed:3e:9f:1c:c1:7f:fc:42:
                    6c:ae:71:27:66:6f:2f:3b:c1:01:89:30:ff:34:7c:
                    9b:a5:bb:c2:e6:f8:ca:94:c4:0c:77:6b:8e:b3:46:
                    9a:93:0c:47:9b:44:0b:b7:58:6c:53:6f:32:c4:7d:
                    37:ef:81:84:f0:90:08:06:20:e5:71:0d:f2:57:f5:
                    6f:61:44:4f:54:37:e7:35:ad:3a:b1:89:37:c5:e5:
                    de:fb:5f:d2:9c:19:d2:65:af:f7:56:e5:92:57:c2:
                    4c:cc:42:38:75:25:2f:9a:af:56:5b:4b:61:8e:b4:
                    66:1b:04:1d:ea:2e:9f:c3:41:fd:d4:e1:db:a5:52:
                    bd:ee:38:b2:94:f1:a4:29:0b:e5:2d:72:23:77:fa:
                    8e:0a:35:e0:b5:c4:04:cc:b5:e8:3c:fc:bc:c7:a5:
                    09:ea:d2:9c:28:85:78:ae:5d:05:bf:73:51:e9:49:
                    53:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:75:9E:EA:D8:F6:29:9F:2B:90:3B:2E:87:43:FC:08:38:6F:F3:DD
            X509v3 Authority Key Identifier:
                keyid:73:84:E5:08:E3:AD:F8:ED:D6:F2:A2:42:CD:AD:6B:DE:9A:5A:D0:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:48:0c:08:e3:40:f5:52:eb:b9:24:4f:08:37:17:b5:0b:15:
         52:53:47:c7:74:8d:84:9a:93:50:43:a5:63:5d:38:1b:26:36:
         e0:d5:6d:55:c5:b4:f4:5a:fe:e0:6a:82:46:bf:72:ab:aa:74:
         fd:a4:33:1e:43:9b:db:8a:5e:01:8c:b7:6b:fc:21:29:56:8c:
         8f:4d:b7:f7:5e:ac:f5:22:31:00:22:ee:c3:c4:55:6b:b2:ff:
         db:94:50:3b:c2:26:db:68:9f:b1:fd:72:98:ca:0a:28:d7:1d:
         94:d6:f1:28:80:05:8a:31:7d:0b:e5:05:b9:7f:d7:bd:cb:4b:
         d6:e8:f9:cf:d7:a2:af:28:e7:1c:3d:e2:43:d0:24:4b:35:57:
         13:58:25:fb:b5:16:2f:52:c5:0f:2c:47:5b:cf:fa:c7:6b:4c:
         25:19:11:2f:53:1c:42:b5:52:cd:45:a0:0b:a2:9c:ff:7c:b5:
         b3:12:e0:aa:ad:af:f9:ad:df:00:47:1e:27:29:5b:52:e8:97:
         5e:ee:59:0a:3d:d6:ab:ab:0f:10:45:e1:52:5c:f8:56:fe:93:
         68:80:25:f6:e9:42:58:ba:cd:d3:c3:58:a2:86:6c:dc:b1:4c:
         3b:75:1f:c4:4d:96:43:d1:20:e0:72:de:3c:74:11:3b:2c:e0:
         a4:5e:5f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:40:58 2026 by rpki-client