Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
File:                     rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft (raw, json)
Hash identifier:          09lXgTlmPNm4a5IoWWclCZoKAF9SKZjFNi0VtGSh0l4=
Subject key identifier:   33:B1:E1:66:F3:5C:E9:45:84:35:2C:0A:76:13:DB:CB:44:3A:7D:75
Authority key identifier: AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
Certificate issuer:       /CN=af121cd6e11da095f856d79deec469d0c6358494
Certificate serial:       019E1DFE5149894FC208B69B5905456FB0FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
Manifest number:          1446
Signing time:             Tue 12 May 2026 21:01:06 +0000
Manifest this update:     Tue 12 May 2026 21:01:06 +0000
Manifest next update:     Wed 13 May 2026 21:01:06 +0000
Files and hashes:         1: KzmoITHkJpLOR4Tlul5pobyRKM4.roa (hash: AsqRiFYDTCnKZFcWZmiW079vgPj+Gpml9bimn7NxEjY=)
                          2: LeESlSzWIvuQdTBNS-mk1tTyv7E.roa (hash: WD96tCmI2Z4zPrVkF6yX9hz40ljCQT+UIo7XuVxQtwE=)
                          3: rXLsHixYlq3Kcw9EvhZkSV4zLvI.roa (hash: xL1IzYaCYhuM2YhqoZfpmf/cRlZ3zbvhm0l28fnKcTk=)
                          4: rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl (hash: EA+piZqJmx2fI1Hsr5/wasZdL/uP1JjGl8kb/Eym0iE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:51:49:89:4f:c2:08:b6:9b:59:05:45:6f:b0:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af121cd6e11da095f856d79deec469d0c6358494
        Validity
            Not Before: May 12 21:01:06 2026 GMT
            Not After : May 13 21:01:06 2026 GMT
        Subject: CN=33b1e166f35ce94584352c0a7613dbcb443a7d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:af:da:92:bc:f4:61:7e:25:e9:ed:11:44:e2:
                    fb:69:5b:3d:d3:be:db:bb:31:e2:71:38:b1:66:17:
                    28:d9:53:56:1d:f7:62:96:2a:69:07:4f:82:86:23:
                    05:53:78:83:28:c8:f5:9a:58:2e:0f:6a:60:16:a1:
                    c9:e2:a4:f8:3c:56:95:2f:b9:35:68:ee:89:2f:e4:
                    2c:d7:db:f2:fb:32:f4:34:6d:ad:52:d3:d6:64:af:
                    55:e5:0f:48:ea:52:b4:a5:18:a1:f3:e9:a7:c6:ca:
                    91:4b:0f:21:ae:d5:1c:53:38:cf:86:46:a4:1e:da:
                    fe:bd:a6:ab:a4:41:2b:d7:2f:f3:26:ad:6b:72:63:
                    17:28:53:54:8e:bf:8d:29:ab:8a:fd:46:9f:ce:89:
                    62:25:4b:fd:e2:48:22:0d:6d:b8:5b:d2:c1:33:1d:
                    ab:fd:85:35:82:28:d8:1b:8b:f3:54:dd:13:f4:ce:
                    92:04:e3:47:57:14:5f:87:74:af:bd:1f:68:3c:50:
                    27:29:96:6a:0f:11:8b:2e:6e:75:75:3e:e6:d3:4a:
                    d5:21:cb:4b:bd:eb:1c:3a:bc:f3:6e:14:89:91:fd:
                    ea:e3:ee:f1:a9:e8:e1:9b:dd:40:3d:a3:c2:d7:65:
                    59:45:2c:56:c5:0e:92:57:6a:a1:b2:05:3c:bd:20:
                    92:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B1:E1:66:F3:5C:E9:45:84:35:2C:0A:76:13:DB:CB:44:3A:7D:75
            X509v3 Authority Key Identifier:
                keyid:AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:91:a5:9a:20:c3:3e:09:b6:ec:30:5b:f2:05:10:e9:bf:49:
         1b:e1:c9:c4:e0:30:37:bb:89:6b:ef:0d:13:22:16:91:ad:ac:
         72:69:0d:e9:26:86:62:1a:af:c9:55:03:a5:79:43:00:08:a1:
         e1:f9:a2:6d:88:a3:a1:5d:45:29:2f:6f:04:b2:41:cd:b2:86:
         eb:63:08:f6:fc:ac:39:bf:c0:46:8b:0c:c0:42:85:3d:69:4f:
         30:c2:51:d0:05:32:b7:8c:e8:42:76:73:0f:8e:07:00:9e:1b:
         1c:b6:98:63:e4:97:37:08:32:c2:28:de:c1:8e:88:3e:fa:cf:
         a3:7c:b6:0e:5d:a7:4c:bd:a2:4a:bd:d3:bc:0c:a2:00:d1:ab:
         70:cd:e8:ad:a5:15:29:28:02:71:c3:df:08:1b:47:ee:63:da:
         39:45:a5:37:8a:08:27:39:09:16:b1:3f:5b:76:6c:15:60:e0:
         87:b2:9e:ce:97:19:ad:ea:67:28:1c:22:23:2d:d1:4a:3c:b7:
         00:18:62:db:cd:ff:67:9d:dc:14:de:ff:26:87:51:4c:53:ce:
         18:71:aa:aa:ff:ba:3e:be:40:85:6f:6c:40:6d:c1:c4:c7:65:
         ff:a2:d2:10:83:74:7f:b6:4f:d1:e1:3f:dd:69:f6:ad:2e:58:
         fa:36:47:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:00:13 2026 by rpki-client