Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
File:                     tRidnqgtX7tm1sEfGHYzR2A04N4.mft (raw, json)
Hash identifier:          Wb8mVpyhF4l0InwmmN9UXdTuLQrcuYzWz8kvHc4uubw=
Subject key identifier:   AA:F2:F4:10:30:A0:59:04:F1:33:03:3F:FB:4B:0F:4D:78:2A:C6:36
Authority key identifier: B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE
Certificate issuer:       /CN=b5189d9ea82d5fbb66d6c11f187633476034e0de
Certificate serial:       019E1E34D839180E1C0DD21F80C4E0113341
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
Manifest number:          E8
Signing time:             Tue 12 May 2026 22:00:40 +0000
Manifest this update:     Tue 12 May 2026 22:00:40 +0000
Manifest next update:     Wed 13 May 2026 22:00:40 +0000
Files and hashes:         1: 7GwQxSlC6XgRoIpTEwZKgVnWS-4.roa (hash: xTOxR17JVwPWxSBMYNixvTz0OcXATfB8jZao2sdgwZ8=)
                          2: PoRIN0dVSAqaAWKn9ELbCUPN7Jg.roa (hash: LsqKFis/T/54SQiHP5UPnUKT29GNEt5RyIpD8UjP9yM=)
                          3: TeVnupeK_YGYnRPsXm4BzJfTjS8.roa (hash: +to8DEmlcRGaEadfSEWc6hlZ2GarI7KNFF5xKs1DZR0=)
                          4: a73ilWUc_Nrs3Jl6BZxzTzmJLZs.roa (hash: WvDo87B2C+QVONEixLsbWJGXRyfPQL9c6V0kT+6W0SI=)
                          5: cwmNk6bauKUzUIBHxMYj4Ucw8iM.roa (hash: h5yQVWC+XIfRSSbHYLwBKmXd6G/qYJCUqPZaJnYQNT8=)
                          6: gCEAfeGtC7sCDWjwRgdE41W_tBw.roa (hash: shPX6M61gEwMPP1QY1pi1KXBEKTnDFJ7aoQzTSjSFHw=)
                          7: p3wpRRs-f7GQUm8KtIUlma6wjSs.roa (hash: 90E81RrURGxHLOrJQ2EQ5/Y8TtYWMesX5r41cRtv1NA=)
                          8: tRidnqgtX7tm1sEfGHYzR2A04N4.crl (hash: V4ofcwKPQwQZ9bWHBt3pIuCWjTwvyIHxPaKIUWEuHyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:34:d8:39:18:0e:1c:0d:d2:1f:80:c4:e0:11:33:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5189d9ea82d5fbb66d6c11f187633476034e0de
        Validity
            Not Before: May 12 22:00:40 2026 GMT
            Not After : May 13 22:00:40 2026 GMT
        Subject: CN=aaf2f41030a05904f133033ffb4b0f4d782ac636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ef:c3:b5:2b:c9:2b:5d:8b:bc:69:02:d8:6b:
                    e8:20:6b:5d:e7:fd:2b:3b:07:5c:8d:44:46:c1:af:
                    d9:75:03:67:47:78:96:84:72:b8:2b:51:89:c2:58:
                    c5:24:14:c6:e2:71:66:c7:a3:b3:c9:df:19:c6:8d:
                    35:6d:a7:97:79:92:43:51:35:0d:55:35:25:f1:72:
                    bc:59:89:97:7d:fd:f1:d6:9c:08:a0:77:9e:24:e8:
                    b1:b6:fd:0f:48:9c:9e:54:c1:53:15:f7:31:9f:fa:
                    f2:05:b5:79:1c:79:93:3b:58:a3:65:0d:4a:a7:87:
                    be:04:35:cd:21:15:c4:0e:8f:d7:cd:41:de:bd:64:
                    7a:47:da:6c:27:92:f2:1f:65:be:80:f6:7d:10:7e:
                    f4:68:54:98:90:9a:99:69:9c:41:8b:c4:53:43:6f:
                    98:10:6f:42:3b:df:3c:70:f5:b3:20:44:43:52:d7:
                    d9:ce:b3:33:f4:9b:74:55:5e:78:e7:7f:47:e9:b2:
                    ea:16:15:83:ae:ef:0c:a6:19:55:e8:00:a5:fb:e2:
                    b0:4c:f5:a1:b2:d6:d7:2d:8f:85:28:26:71:f3:da:
                    0e:8f:c2:c3:53:ee:2b:f1:13:db:d1:9f:33:bd:69:
                    26:3d:7c:3a:0c:f7:3f:7f:0b:42:74:c9:50:12:4f:
                    d4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F2:F4:10:30:A0:59:04:F1:33:03:3F:FB:4B:0F:4D:78:2A:C6:36
            X509v3 Authority Key Identifier:
                keyid:B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:85:98:f8:8a:48:67:5d:60:8f:9b:36:06:77:c9:ca:59:0f:
         41:a9:6c:3a:82:a3:7f:e5:e9:b7:ba:4d:fd:87:a7:9f:0c:3c:
         d1:4f:ed:29:c5:8b:3d:68:71:1c:f9:76:fa:e5:a9:9b:1d:ea:
         db:88:9d:7d:d2:91:e4:c9:00:d2:7c:7d:ed:25:cf:d9:f3:60:
         bf:c0:77:8f:49:c0:a6:b8:8a:54:83:4e:09:ab:d3:b9:36:7f:
         04:d8:f7:eb:c3:2b:69:d5:8d:28:9d:22:68:8b:60:9c:8c:b0:
         51:36:13:0e:6d:96:57:19:fe:38:c3:84:8d:f8:ee:4d:7b:c2:
         67:fb:c2:eb:bb:f8:92:c9:b4:1b:ef:39:8b:65:4e:2e:73:f9:
         4c:a5:de:10:89:83:03:7d:69:32:3d:8f:ad:10:73:eb:14:9c:
         88:db:6a:54:0b:45:54:c0:6e:27:b0:d8:1c:0d:b8:83:1e:e5:
         3d:f2:45:a5:25:43:de:a3:b9:d4:aa:b2:f3:3a:a2:e7:cc:16:
         00:be:89:3e:7b:52:fc:b9:30:ba:89:be:f6:77:1c:2e:f3:d8:
         c8:57:94:e7:2c:72:ab:67:3a:8a:47:a3:f6:40:35:26:c5:70:
         a1:24:7d:ff:d7:b4:2d:bd:a4:a5:75:b1:7b:b1:5e:83:2b:21:
         5c:8c:91:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:46:08 2026 by rpki-client