Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
File:                     7W2oLbx9figY-WaAtm787bEIeUc.mft (raw, json)
Hash identifier:          DlZIdEyJRdmAv7vFx/aoaUw4KBc+wkNA34vz1Yp4iZE=
Subject key identifier:   30:31:26:D8:DC:FC:9C:E8:63:1F:4D:D6:A6:9C:71:91:8A:E7:29:B6
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Certificate issuer:       /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial:       019E1D2333674F4F6B6FD6C627593429F7E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
Manifest number:          191B
Signing time:             Tue 12 May 2026 17:01:46 +0000
Manifest this update:     Tue 12 May 2026 17:01:46 +0000
Manifest next update:     Wed 13 May 2026 17:01:46 +0000
Files and hashes:         1: 7W2oLbx9figY-WaAtm787bEIeUc.crl (hash: krW85V6V/jr3mGLAaK1VmSjyraRRGal/mTGmfujRCgQ=)
                          2: JsIYFyLR74GQysEIqnGykpSJQUI.roa (hash: iaHnb3OAMXTWsBgbEKrwhuTvCOgUBCodv1kDk+4mavA=)
                          3: NKy6Tyf5RyRglBk0yV_ExDPmxuo.roa (hash: ebb1VqS7aGDzvUXqYNWhDAqOkeGUT55XR6ggJqYbSMU=)
                          4: OUVdt4o2LS_i-Gunl0nnzrdW_jI.roa (hash: LG7q3NWzE4G2vBN3PTFInwdMW/gtEeHrNbl3IVaBPnE=)
                          5: YH5NKMifzBmhf3nIG20jcgRcBU0.roa (hash: V5cTAFBzO7CMX8CCIxzqRfhGsna670gP9hgi/NVqRBc=)
                          6: mCt7UGq2s1qnA69MYZljhYxWiD4.roa (hash: qi5pYWU2cgvvhT1J3aGpMqhq1J2xvA8Deh0/Hh6j/Rg=)
                          7: sRMtAiiTomuNQjvyhVAd07KYQM0.roa (hash: 1ZDSFc07GgvbF2RmQMqVaUItzv9tv/zTWoNdPvDIoXs=)
                          8: sjgUHUj_TSMku2aB-f61amSIyCM.roa (hash: /+JjugGAK765zafXtIVOVPtipqmOZ3WaKKGK25tgoO4=)
                          9: zhcr9I3s3OVNgzaih7vQHJr6C0Y.roa (hash: nLQ289DooRLgqJOtJaVgt01KECd6y0NdXrqka7CO4Ko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:23:33:67:4f:4f:6b:6f:d6:c6:27:59:34:29:f7:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
        Validity
            Not Before: May 12 17:01:46 2026 GMT
            Not After : May 13 17:01:46 2026 GMT
        Subject: CN=303126d8dcfc9ce8631f4dd6a69c71918ae729b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d9:2f:c7:b5:9c:3f:4e:8f:56:52:61:50:ce:
                    da:b7:69:6a:b0:15:84:b6:88:0d:23:18:71:fd:07:
                    f2:5a:22:62:a1:52:52:e9:10:18:53:86:53:4b:2b:
                    e0:61:cb:bf:3e:9a:78:c3:c8:18:18:02:8a:5d:1e:
                    42:14:98:38:9a:8f:9e:ef:4a:4a:33:84:fe:31:23:
                    ff:99:35:64:52:6e:13:e0:21:aa:f7:6c:b6:15:dc:
                    bb:e4:14:27:dd:7e:63:93:66:9b:56:0f:67:3b:5d:
                    bc:6c:f8:67:b0:aa:40:be:38:f5:a6:12:b7:18:7b:
                    44:21:e5:66:dd:75:f5:a1:17:f8:ab:17:24:70:94:
                    cc:56:f2:af:5d:27:26:d2:5f:51:ec:17:df:a2:88:
                    c1:30:0c:cc:4a:5d:80:91:a3:5e:c3:60:9e:9c:f6:
                    a8:96:6e:12:c8:9f:1a:63:f7:4d:f7:9d:68:e7:46:
                    51:09:e8:23:48:05:57:4c:21:7a:2b:d2:2b:69:d4:
                    4f:b1:50:98:2c:c5:79:75:9a:c8:83:70:86:c4:a9:
                    0c:3f:9e:f9:72:1c:d1:05:c4:47:3c:bf:5d:d8:a7:
                    a3:0d:a1:1b:8f:14:3e:01:dc:74:71:17:17:7c:59:
                    44:39:6d:47:b3:ba:65:d0:65:70:19:a5:15:18:72:
                    a1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:31:26:D8:DC:FC:9C:E8:63:1F:4D:D6:A6:9C:71:91:8A:E7:29:B6
            X509v3 Authority Key Identifier:
                keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:cd:db:e2:e6:9a:89:a4:0d:54:dd:4f:c4:7b:38:5c:5b:b8:
         5e:38:fd:9a:93:fc:eb:52:f5:d8:4d:3a:13:cd:e8:80:80:e2:
         4c:b3:e8:80:96:d5:ea:81:53:6d:6b:26:dc:a0:a7:4e:e3:0d:
         3e:21:a9:ef:2e:d2:05:8c:68:e2:82:2a:43:4e:67:da:d9:6e:
         db:59:5b:45:08:81:b1:ce:ff:38:6d:72:c8:e6:5f:12:40:f8:
         6f:54:d9:a7:52:ad:ee:ac:3e:4e:ff:71:6c:31:6b:53:08:e4:
         3a:72:b7:73:b1:d3:97:fc:ec:7a:11:a4:1d:2b:f7:ab:4f:15:
         ce:5c:e9:84:11:cc:58:73:bc:08:a3:f4:c2:53:8a:cc:0e:fc:
         bd:5a:2f:08:9e:eb:a4:dd:59:49:c2:1f:1c:14:b5:a9:87:77:
         b3:f8:db:78:15:66:9f:d2:a2:fb:65:d3:78:f5:db:5f:46:62:
         67:9a:e1:df:50:f9:58:dd:fb:37:40:95:da:24:50:2b:10:61:
         5a:ba:1b:63:0d:04:ea:92:1e:e1:a5:59:de:57:57:a9:81:f6:
         e1:80:ee:38:7c:7c:56:89:48:08:94:ca:96:6a:dc:49:32:4e:
         1c:22:c6:00:39:c6:69:65:1d:df:0a:9e:c7:79:c4:35:51:2a:
         41:46:a4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:44:09 2026 by rpki-client