Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft
File:                     rOzREmnuoGcmJ3zjYatRzkIEnjY.mft (raw, json)
Hash identifier:          dO3/v1CfXjLbJ9K73LHbE33Nfw/PrI0LRsf1PNv7Yuk=
Subject key identifier:   31:5E:B2:86:0F:EA:E4:30:65:DA:E0:DC:65:C4:1C:96:3C:B5:A4:AF
Authority key identifier: AC:EC:D1:12:69:EE:A0:67:26:27:7C:E3:61:AB:51:CE:42:04:9E:36
Certificate issuer:       /CN=acecd11269eea06726277ce361ab51ce42049e36
Certificate serial:       019E1F7EDEED8BFF73BAB9F3DC93641924A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft
Manifest number:          0273
Signing time:             Wed 13 May 2026 04:01:08 +0000
Manifest this update:     Wed 13 May 2026 04:01:08 +0000
Manifest next update:     Thu 14 May 2026 04:01:08 +0000
Files and hashes:         1: 1oXMdBZ5QwBEktq29jlZeTysc3c.roa (hash: WrwjvmGXn9QS/QC9EfjjK7O+1t52HaSP06M7BN2wY4Q=)
                          2: BsHhOGPLqv_b-i7lbkWetPhmogc.roa (hash: 6b/HByXr0kCEfte6/E55VHhk+GpSly1EQ1fovYfyDC0=)
                          3: LQ4p4FWR2wiOfJ7GYUxYWopRPko.roa (hash: QCy7JHnHp3e55OkboH/41OR5K91quYIv15ltvpwox8U=)
                          4: qZ6mNAnH1X0WEvWvCW48xFHIAzM.roa (hash: bRXqasdQMNLOjthWLYT2MOp9X0uzuSjiftrzVa+XjXU=)
                          5: rOzREmnuoGcmJ3zjYatRzkIEnjY.crl (hash: B1sR74D4fQoSKb/q/BcGdupLAruaUwnEWzm2NugQQGw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7e:de:ed:8b:ff:73:ba:b9:f3:dc:93:64:19:24:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acecd11269eea06726277ce361ab51ce42049e36
        Validity
            Not Before: May 13 04:01:08 2026 GMT
            Not After : May 14 04:01:08 2026 GMT
        Subject: CN=315eb2860feae43065dae0dc65c41c963cb5a4af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:62:62:01:57:be:f6:91:9b:b5:fb:db:6c:5c:
                    ea:9c:f6:04:14:70:e8:b7:bf:dd:8c:f4:e7:4e:c9:
                    cb:ec:01:94:c4:9d:6a:b9:eb:8c:f4:9e:c0:81:55:
                    8d:6d:c4:9d:26:bc:8b:73:00:35:47:4d:fd:3f:ad:
                    25:38:74:8f:cf:b1:8e:cb:a0:f3:3a:1c:43:d4:d8:
                    9f:f9:ce:09:9c:87:2b:7d:b3:aa:1e:44:36:ae:8c:
                    31:2e:77:85:75:c7:b6:ba:6d:92:cb:13:18:b4:8c:
                    b2:66:48:1f:a3:c5:34:19:8f:f6:2f:c8:22:31:24:
                    a1:22:79:f2:c1:9a:58:71:1a:b2:ac:41:5b:d6:d3:
                    55:be:d8:36:9d:9c:a6:04:fb:ff:5f:2e:74:50:22:
                    da:e6:45:6c:51:43:04:35:31:94:fb:26:bb:c5:67:
                    ba:4c:e2:55:c8:c6:29:4a:cf:0d:b4:99:ad:d3:2d:
                    12:60:d7:2c:7b:31:4a:f8:e8:6a:cd:e0:fb:7f:16:
                    e9:61:a4:c5:7d:95:ab:0e:b1:98:4e:f2:5f:33:42:
                    d1:4f:ff:dd:31:35:f4:b5:32:6d:19:cd:d2:ef:b0:
                    29:10:40:7e:02:f3:12:d8:be:f3:69:73:54:e5:e5:
                    bf:ea:51:44:46:7b:0b:5e:92:91:97:de:c9:2d:4e:
                    72:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:5E:B2:86:0F:EA:E4:30:65:DA:E0:DC:65:C4:1C:96:3C:B5:A4:AF
            X509v3 Authority Key Identifier:
                keyid:AC:EC:D1:12:69:EE:A0:67:26:27:7C:E3:61:AB:51:CE:42:04:9E:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:c3:38:7c:61:c2:c5:16:0e:6e:76:89:2d:28:c3:ed:64:e2:
         6f:cb:1e:e7:df:5f:61:5d:96:dc:47:9e:a9:38:d2:7b:e9:93:
         d9:f2:25:e2:d4:9a:76:de:9e:fe:3b:c5:ae:23:49:a1:bc:55:
         1b:1d:89:03:b4:7c:df:d7:60:c9:05:a8:06:bc:23:a9:a7:cb:
         96:92:49:74:a5:8d:fa:79:de:b0:35:ea:e4:d0:68:e7:0c:2f:
         35:ed:07:ba:69:aa:0e:28:dc:5f:84:f3:9a:fe:c5:99:a8:10:
         75:bb:fc:80:53:7d:df:48:b9:8a:51:40:b2:91:ad:47:a0:d5:
         74:43:01:4e:ad:cd:ae:e7:fa:eb:bd:94:d0:e8:6e:ed:ae:9c:
         f8:9b:b5:11:ce:40:73:c2:9e:0d:f9:35:41:b7:1e:3e:5b:e7:
         cb:6d:02:9a:a7:d8:fd:8f:a2:c2:cd:09:1e:9a:f4:23:b1:d3:
         53:87:00:fe:57:a3:ba:81:37:98:71:97:48:3d:6d:dd:ee:66:
         11:d0:5b:87:ba:6b:69:27:d4:cc:ff:79:60:54:6d:3d:e5:db:
         5f:6e:70:94:fc:5f:08:72:43:90:18:73:15:d9:cf:93:3e:2f:
         cc:2c:a3:36:94:3c:7f:3c:8d:f2:20:a4:18:c4:e9:60:f0:4b:
         16:a9:43:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:36:13 2026 by rpki-client