Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
File:                     suORFp8MnyGqjy6J5zdccuxnT-s.mft (raw, json)
Hash identifier:          U1DxJtYbI6Tkq9Mm+CCDfr2UObUd8PkQDuGs0bqb6kg=
Subject key identifier:   D5:7E:E4:C9:77:0D:EB:F6:B6:12:B0:30:B2:0C:5A:A7:E8:33:3C:80
Authority key identifier: B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB
Certificate issuer:       /CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb
Certificate serial:       019E1D9126EA799DA0723ACE59A7165CC3AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
Manifest number:          1899
Signing time:             Tue 12 May 2026 19:01:52 +0000
Manifest this update:     Tue 12 May 2026 19:01:52 +0000
Manifest next update:     Wed 13 May 2026 19:01:52 +0000
Files and hashes:         1: PaUq1i1qchD33WEhkgfziRXOQqo.roa (hash: 4jZTQPexjQrBRUzBh0uva4unQWrx3Cy+0TA6XIINReI=)
                          2: suORFp8MnyGqjy6J5zdccuxnT-s.crl (hash: dCzV4PGO+zrw96foPG16sgm0wipoflFFP96vJLeBF4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:91:26:ea:79:9d:a0:72:3a:ce:59:a7:16:5c:c3:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb
        Validity
            Not Before: May 12 19:01:52 2026 GMT
            Not After : May 13 19:01:52 2026 GMT
        Subject: CN=d57ee4c9770debf6b612b030b20c5aa7e8333c80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a4:0e:9a:0d:0a:0b:c1:e4:a6:22:76:c7:77:
                    e5:93:93:56:87:98:8f:a2:88:ca:b3:46:d7:94:26:
                    83:f9:0f:e4:4d:4b:ef:9c:57:9e:02:e3:41:42:7b:
                    01:bb:cc:06:ea:1e:94:fe:72:d7:f2:6e:78:08:a5:
                    1a:92:7a:57:c4:52:20:bf:4c:ec:85:7a:1f:39:15:
                    34:8c:42:1c:5e:5d:4b:33:c3:cc:89:2e:fd:e2:04:
                    ca:97:64:c7:d4:df:ea:ff:04:80:f7:84:09:db:12:
                    48:08:13:1d:8c:d2:01:fd:84:5f:e5:03:90:09:32:
                    f8:61:1a:d1:8e:20:74:93:b0:a6:d1:9e:2d:c0:fd:
                    c1:82:82:46:77:7e:78:96:d1:85:72:af:0f:1d:23:
                    62:e8:b3:82:85:27:35:40:6a:39:59:32:c5:ce:62:
                    99:8a:26:19:c6:d2:e6:dd:a8:3e:2b:a9:7a:e5:8a:
                    3b:4d:23:9f:33:06:cc:29:40:47:00:2a:b8:13:8e:
                    eb:c7:bf:4d:d0:44:a9:dd:c3:00:0e:1f:d7:2d:b8:
                    27:09:d2:b8:7b:a6:6f:41:e8:15:ce:4c:a2:8e:2f:
                    5d:83:9c:e5:23:0f:f0:66:87:f0:5d:51:b7:1b:e4:
                    ff:43:26:7e:ed:02:3c:0d:4f:4b:5a:63:f1:ff:36:
                    eb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:7E:E4:C9:77:0D:EB:F6:B6:12:B0:30:B2:0C:5A:A7:E8:33:3C:80
            X509v3 Authority Key Identifier:
                keyid:B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:42:46:b4:61:82:ef:c5:82:a6:22:02:a0:4c:da:41:6b:48:
         b3:8e:93:9a:13:1d:c5:0e:d6:75:74:d8:65:d3:9e:cb:1d:20:
         cc:a1:fe:78:cf:f5:dd:5c:7b:d0:ad:84:1c:22:e1:bb:1e:1b:
         3c:97:9d:85:f8:c7:bf:18:d5:97:f9:03:30:3f:45:6e:16:4b:
         41:e0:6c:50:81:dd:c4:a9:85:0d:5c:16:8b:4c:b0:36:1d:95:
         a8:a5:95:87:6b:e2:78:d1:f5:fa:d4:ab:64:c6:c9:02:af:f4:
         c4:e4:22:c9:88:b1:a5:e5:97:1d:ee:d3:57:b5:39:9e:14:4a:
         a8:f7:1f:46:ac:b0:b8:7d:02:8c:1e:24:15:9a:d1:5f:9a:f6:
         b9:09:f4:74:e8:2b:e3:7a:a3:d2:9a:5a:c2:c0:60:48:83:fc:
         fa:9a:d0:50:ca:5c:b3:ec:0b:92:d9:42:d5:6f:b7:47:5f:2f:
         b6:ce:65:2f:72:eb:79:d8:9f:ae:dd:aa:6e:95:5a:e9:cf:0b:
         16:5b:07:54:1b:57:36:76:29:3a:03:c7:a4:24:7f:da:63:97:
         f9:9d:74:41:9e:66:9b:eb:9f:6c:ed:9c:97:a4:00:27:9a:f3:
         58:c0:71:db:db:b5:98:ef:e1:5d:8e:12:f4:69:35:49:87:ce:
         83:bd:da:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:29:46 2026 by rpki-client