Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
File:                     1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft (raw, json)
Hash identifier:          sTeeI6ogpruuZeI+g1DObmdV0zG1M/a3JJiGaHHo/cE=
Subject key identifier:   82:5F:F2:9F:77:6C:75:87:71:B3:74:A9:7F:46:EB:9C:0B:E5:A6:D6
Authority key identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
Certificate issuer:       /CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Certificate serial:       019E1D9059F1E96D297CE2BF0C78FE5CDC4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
Manifest number:          042A
Signing time:             Tue 12 May 2026 19:00:59 +0000
Manifest this update:     Tue 12 May 2026 19:00:59 +0000
Manifest next update:     Wed 13 May 2026 19:00:59 +0000
Files and hashes:         1: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl (hash: DCEWDXnJHfj+U0M1M8cSMqNtAhC1tde/RuqXtqlmnV0=)
                          2: 5Qv7t_ADQOb6Y00SIFPxywPS8ro.roa (hash: OvUzcgXdun7e7rJvnWGXK1KokOo+inejKBUGCGEtOjc=)
                          3: 8pXCuBWrEvdy2wZTlEp32tqPYW8.roa (hash: uGUL/if0f5ws0TqXiUCRr04ljVZ6Fve+sjfhpDCgGM4=)
                          4: Hl64XGbhjDhXSK_RP_lVJRGK17Q.roa (hash: jQK1etd719NMqRMk4bSxLL+vsw1/OQyKrvCRPSvnFfI=)
                          5: nHHN0WPLlHYApdgpFpnFyF7FXNo.roa (hash: xucnQbWZYtMeJ0bkGPwNcpkM2rdQLkCGv8+6HH3/d1M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:59:f1:e9:6d:29:7c:e2:bf:0c:78:fe:5c:dc:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
        Validity
            Not Before: May 12 19:00:59 2026 GMT
            Not After : May 13 19:00:59 2026 GMT
        Subject: CN=825ff29f776c758771b374a97f46eb9c0be5a6d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e6:84:b1:63:72:ee:58:e8:e7:d7:1b:49:00:
                    b4:4f:3f:bb:86:0e:c6:04:e4:cc:ae:68:5c:a0:47:
                    b3:7d:18:14:d7:72:4e:5d:d4:20:41:0e:bc:70:76:
                    40:63:c8:25:67:49:f0:88:d7:6a:97:5b:4c:5c:34:
                    d9:4e:1e:64:81:d5:26:11:c4:84:f7:3d:22:4b:5e:
                    7b:9a:c7:2c:d8:d1:d3:43:44:4c:9b:5a:61:f7:0a:
                    d9:9e:b9:ba:86:7d:12:c6:c4:16:81:47:b3:84:48:
                    f3:32:30:70:83:af:81:b3:ef:4c:80:66:9b:09:b7:
                    ca:ff:10:9a:07:23:44:de:ea:29:ff:7e:80:9c:31:
                    24:2d:bc:ad:2c:c5:20:28:99:4f:23:ef:fd:20:ed:
                    03:f6:4c:aa:96:08:42:66:97:3d:c9:a8:c9:5d:af:
                    86:c6:3d:8a:50:84:20:a3:5b:78:b7:34:e7:3b:c9:
                    0e:b1:9b:71:60:12:e7:cc:4e:f1:6e:ef:e6:72:a1:
                    9b:ad:a4:5d:ab:d0:bb:59:d7:d1:57:1b:fe:ac:55:
                    1c:42:91:70:22:c7:06:d3:08:d7:9a:2b:48:93:6e:
                    4a:a9:07:49:79:b0:1e:5a:2c:e0:78:b5:ea:35:4e:
                    74:48:ad:02:ec:cb:aa:4a:ba:9d:59:74:89:9e:e8:
                    32:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:5F:F2:9F:77:6C:75:87:71:B3:74:A9:7F:46:EB:9C:0B:E5:A6:D6
            X509v3 Authority Key Identifier:
                keyid:D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:23:d5:a3:e5:62:da:b1:9e:11:a6:08:46:0f:0f:ae:13:ac:
         a2:23:37:ab:d8:38:09:ea:c9:8c:66:fe:fb:99:c0:3e:02:bc:
         ba:23:ef:7c:a6:d8:37:17:c3:10:d8:29:f7:e1:9b:ae:60:44:
         01:7b:b3:c8:d8:03:4e:dd:d2:20:16:31:8e:ec:f1:ba:76:35:
         93:06:3a:fe:b2:49:8b:84:22:6a:5c:88:cd:7d:85:d1:70:55:
         f4:82:f1:b2:1b:77:74:fc:a9:2b:33:2f:f6:b9:88:3b:34:b9:
         f0:cf:22:ea:ce:28:bc:c2:23:d8:04:ac:00:a8:3f:6b:dd:5c:
         2a:bb:5c:1e:7b:0a:cc:f8:db:a0:55:6c:bc:62:7a:22:3b:ee:
         ac:a6:6b:84:03:c2:d2:64:49:be:e8:ef:97:38:f1:59:80:91:
         43:29:29:bc:5c:f1:18:42:7c:93:fa:47:24:39:89:78:5d:92:
         36:08:2a:fd:80:c8:c4:b7:4a:ec:5d:5e:b3:54:63:63:5a:2d:
         2c:e5:b2:b2:34:9b:4a:f3:2e:03:c1:46:f1:f4:82:9c:29:94:
         b7:b4:92:2e:71:74:45:71:d8:52:46:8e:33:5b:7d:53:3d:02:
         8b:49:42:e0:ec:7c:9f:6f:56:6a:54:cb:38:8f:fb:8f:d8:5d:
         a5:2c:6b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:14:45 2026 by rpki-client