Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
File:                     sSZ6Uay2bymRvqUkP-OIBolxofE.mft (raw, json)
Hash identifier:          9I9/SKaudttqO2DO3Oyu/BT4bCf7eBDuYzYzp6sN9CM=
Subject key identifier:   FA:2A:FB:9B:08:CC:48:E1:8B:BC:7B:5B:36:9D:80:57:AB:79:8D:13
Authority key identifier: B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
Certificate issuer:       /CN=b1267a51acb66f2991bea5243fe388068971a1f1
Certificate serial:       019E1DFEAB7FFA42A9A3BC3498A1DC2CC1DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
Manifest number:          190E
Signing time:             Tue 12 May 2026 21:01:29 +0000
Manifest this update:     Tue 12 May 2026 21:01:29 +0000
Manifest next update:     Wed 13 May 2026 21:01:29 +0000
Files and hashes:         1: 7tRxzOjQ9HlU-8n_YoQ9S2kmRLc.roa (hash: VZLOnCAersGhWtsmb7R0s5AlGZFScIm4sdJlK/A7tN8=)
                          2: adzoREFInhl8FjmgvHTz0qVeVfY.roa (hash: F2EQINWN8W6q9+2DD+3oTE1LSrvuSuwcoWJxaeRkHIk=)
                          3: dHldAtNYV4t048YemeLaddoxAKM.roa (hash: tEMIhM30IigRqNGpU/NdvDlUsc/epVuY00PjM4/BZEw=)
                          4: kORyH1zk4kpVVZcN-RFEOaPpCYQ.roa (hash: eM3a4CHDiPxCoPRiTlT4LzKEhGGZUAXh/d8bAjKFKxA=)
                          5: sP8B78WvrO-I9FMOKnP4eLOTxh8.roa (hash: j0/QkDqzGm9cKi69XdtrTTNVhk9moQxAiYICzefknS8=)
                          6: sSZ6Uay2bymRvqUkP-OIBolxofE.crl (hash: wi5VbeprrcVTnke8oaD/MUhSl9G1wDvLwRcFBz75Svw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:ab:7f:fa:42:a9:a3:bc:34:98:a1:dc:2c:c1:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1267a51acb66f2991bea5243fe388068971a1f1
        Validity
            Not Before: May 12 21:01:29 2026 GMT
            Not After : May 13 21:01:29 2026 GMT
        Subject: CN=fa2afb9b08cc48e18bbc7b5b369d8057ab798d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e1:82:44:99:9d:14:e7:1a:1c:66:88:0f:8d:
                    e0:e0:e4:ce:f0:e3:94:10:a5:9a:e1:bd:6b:00:b2:
                    d5:69:b5:c5:a2:61:7b:3d:24:da:e4:63:17:1a:98:
                    6d:69:59:84:0d:15:b8:ad:5b:d7:0d:d1:29:cb:8e:
                    b6:9e:7e:69:32:c0:fd:98:d8:98:05:cc:af:52:80:
                    d1:f6:83:89:35:ec:f5:42:c9:b3:ec:35:c1:a3:9b:
                    a2:04:67:62:72:50:9b:62:59:6c:33:4e:57:b8:85:
                    be:10:05:45:78:fb:50:c7:eb:08:a2:f7:76:5d:5d:
                    d7:8c:83:fe:87:0f:42:0b:9e:99:9f:ba:66:a4:1a:
                    08:61:45:38:fd:9d:60:20:51:ed:2e:48:18:1b:f8:
                    aa:e4:7b:76:5b:c2:5b:1a:19:8d:25:93:b3:b8:b1:
                    cc:5f:3f:58:7d:21:1a:b8:69:c8:2c:16:ab:cc:c9:
                    ac:50:72:d2:69:05:a5:7d:d4:eb:58:93:d5:3f:a3:
                    f1:5e:9c:93:3e:eb:16:35:d8:81:18:95:8d:ca:93:
                    69:4f:3a:1f:03:28:96:8d:0a:30:af:55:9a:99:be:
                    4b:cf:50:3e:58:e0:8c:62:b5:13:60:1c:f2:2c:8a:
                    54:70:14:99:59:3a:b7:5f:e1:aa:86:4c:6c:43:ad:
                    95:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:2A:FB:9B:08:CC:48:E1:8B:BC:7B:5B:36:9D:80:57:AB:79:8D:13
            X509v3 Authority Key Identifier:
                keyid:B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:ed:76:5b:66:3e:b8:97:44:76:78:bf:3b:ab:c3:7d:3c:16:
         05:f9:0a:05:5e:15:00:23:bc:60:20:27:92:4e:a3:96:1e:e7:
         1e:ca:87:37:56:5d:b3:ca:df:88:c4:46:c5:b0:ab:1f:5c:16:
         89:cb:f5:66:74:c3:17:10:b3:82:f6:4b:fe:c9:69:73:ea:f0:
         67:5b:71:d5:9c:63:50:a3:55:f8:fa:cb:ea:6d:2e:f1:91:a1:
         a4:fd:1d:90:70:38:c9:5f:4e:57:9b:56:5d:a1:3c:85:01:16:
         a9:c0:9b:91:b6:35:5c:b0:bf:69:0a:44:3e:b3:66:03:d2:18:
         1f:50:ef:f9:91:58:5c:a0:d1:bc:59:de:5b:30:66:96:6b:b7:
         47:2e:47:10:d3:99:a6:5a:ec:3a:32:d9:8b:dd:d9:a0:e0:6d:
         61:66:dc:ba:99:c4:59:c4:41:9c:d6:89:e6:2e:25:3b:17:24:
         d6:7a:33:88:a2:73:ce:c3:7e:45:b1:0b:50:b4:eb:17:17:6d:
         2b:39:4e:aa:f1:03:71:5d:3e:03:8e:19:ee:ed:0d:d5:98:ef:
         0f:b9:53:cb:44:d5:34:14:bf:26:25:63:12:3b:cc:34:ba:2d:
         db:9a:87:3c:68:a3:53:41:ae:fa:3d:17:1c:39:6d:5a:2f:80:
         cb:01:3c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:50:32 2026 by rpki-client