Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
File:                     A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft (raw, json)
Hash identifier:          3wRBZJxKXt7WbTDYzVLEWgEp4MeoPuPSL1e2P47hiok=
Subject key identifier:   19:6C:47:10:BC:D5:51:B0:3F:5F:6F:E8:FD:94:29:D9:77:43:69:56
Authority key identifier: 03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97
Certificate issuer:       /CN=03590f562050d9769ed57b07b1bc931ecddf1397
Certificate serial:       019E1E3574D13D668CFBF548D0DA26FE1E5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
Manifest number:          1041
Signing time:             Tue 12 May 2026 22:01:20 +0000
Manifest this update:     Tue 12 May 2026 22:01:20 +0000
Manifest next update:     Wed 13 May 2026 22:01:20 +0000
Files and hashes:         1: 0THIEFLPGzyRudImhlLOCHA8Xm0.roa (hash: ObG1p5RA+7bSM1qqVPI+8hEztkIOy9iOV3GpF72AbQE=)
                          2: A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl (hash: IH3SBUU/WbdiXHppJmBiydjH64vbKRWsjTBtAXyTTzo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:74:d1:3d:66:8c:fb:f5:48:d0:da:26:fe:1e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03590f562050d9769ed57b07b1bc931ecddf1397
        Validity
            Not Before: May 12 22:01:20 2026 GMT
            Not After : May 13 22:01:20 2026 GMT
        Subject: CN=196c4710bcd551b03f5f6fe8fd9429d977436956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7d:a1:31:07:05:80:be:69:4b:36:bc:60:f6:
                    15:9a:79:e1:ef:84:05:ce:2c:ae:11:8a:c7:a6:69:
                    db:59:f9:43:6b:91:44:86:d7:1a:09:dd:52:7e:9c:
                    72:f7:1c:3e:25:2c:03:5d:15:57:7e:4c:b0:e5:d6:
                    92:2d:c1:0a:48:00:55:91:a8:bb:e8:f3:86:2e:13:
                    fa:62:4c:a5:ff:1d:49:32:c3:08:fe:43:91:11:0e:
                    23:bc:aa:8c:3f:a1:9a:7f:e4:ac:75:23:42:1d:db:
                    27:cf:bd:83:ac:ba:ec:ac:56:97:e3:44:dc:c0:80:
                    72:e7:d8:12:1c:4e:6d:c4:ec:6b:8c:0a:06:c2:86:
                    f7:e8:d5:2c:d9:58:4c:7b:2d:0c:9f:f2:82:02:ef:
                    5f:79:b4:4b:80:ce:aa:94:3e:30:38:4d:e2:19:e0:
                    2d:91:b0:f6:8c:61:5e:fe:9d:d0:7a:e8:d1:06:fb:
                    21:c3:4f:92:65:02:fe:b3:23:e1:44:eb:4a:66:0b:
                    8a:1b:5e:43:b9:94:d9:3f:8d:0c:16:2a:4d:dd:30:
                    c8:71:59:c9:6f:ee:d6:f2:d3:ec:fb:86:01:2f:7e:
                    89:df:85:94:2f:a8:37:88:63:af:67:0b:76:c5:a3:
                    0a:07:af:4e:86:b9:1f:81:86:e0:15:e7:a5:64:e3:
                    56:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:6C:47:10:BC:D5:51:B0:3F:5F:6F:E8:FD:94:29:D9:77:43:69:56
            X509v3 Authority Key Identifier:
                keyid:03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:df:b0:af:12:77:39:cd:1c:7b:f9:e8:6d:79:51:e2:77:75:
         0c:50:7f:2e:d0:78:57:0b:73:94:2c:41:0f:c0:a5:29:22:e2:
         41:ed:c2:4c:d3:3f:5f:12:ff:98:4e:06:69:55:8a:f6:38:5c:
         0e:64:af:6c:43:b9:18:4e:49:4c:a0:cd:62:a9:d2:c3:0a:2e:
         3e:4f:bd:fb:a9:ab:12:b6:09:db:dc:09:2f:73:ed:02:88:29:
         98:b8:4f:0b:68:9b:61:64:88:39:9c:dd:1b:2c:82:07:ca:76:
         cd:45:83:6c:d2:7a:1e:78:68:b0:be:1a:b7:5a:9f:12:4b:44:
         bc:b1:fe:70:45:c9:d6:b0:c8:98:57:50:62:f7:c6:7b:fb:f9:
         63:f4:bc:ad:ea:2a:f0:83:e4:da:64:02:2d:8b:42:b9:b3:8f:
         3e:09:bc:a5:de:d8:41:58:49:40:41:0f:68:98:b2:05:35:80:
         4c:05:da:56:81:f0:40:ac:4a:bd:04:62:84:45:cf:84:fe:31:
         81:31:5b:33:33:bb:58:88:d9:12:45:8a:16:5e:d6:44:fd:b1:
         8c:cd:31:33:8a:59:66:01:b7:f7:cc:b4:0c:be:93:b2:22:f1:
         c9:71:41:4f:f0:51:47:8f:ca:66:e0:57:c1:2f:90:1b:f1:a1:
         56:0a:bd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:21:12 2026 by rpki-client