Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
File:                     TO1MeGdCnuAvXNwa--qlunEzYAg.mft (raw, json)
Hash identifier:          HFwUm8RKfD/N2LmMafYevn4mTwprS+9F17eSnzCa56g=
Subject key identifier:   35:1B:48:27:51:B9:D1:27:F3:31:6D:35:02:E9:B9:E9:5F:4A:A9:18
Authority key identifier: 4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08
Certificate issuer:       /CN=4ced4c7867429ee02f5cdc1afbeaa5ba71336008
Certificate serial:       019E1E6C2507A86A12E373335F6F1667E19A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
Manifest number:          1903
Signing time:             Tue 12 May 2026 23:01:04 +0000
Manifest this update:     Tue 12 May 2026 23:01:04 +0000
Manifest next update:     Wed 13 May 2026 23:01:04 +0000
Files and hashes:         1: IvfRGdnfN7_UPGAiz9QzeIqr6I8.roa (hash: ht/PdnItSCVuCn0LFXjdxW5Jjp/nTLMvvbH6aoSlok0=)
                          2: TO1MeGdCnuAvXNwa--qlunEzYAg.crl (hash: GMQl/57VUSr4mX6fUnKoA2mfzoWATYFhyf+6XRNEnvM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:25:07:a8:6a:12:e3:73:33:5f:6f:16:67:e1:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ced4c7867429ee02f5cdc1afbeaa5ba71336008
        Validity
            Not Before: May 12 23:01:04 2026 GMT
            Not After : May 13 23:01:04 2026 GMT
        Subject: CN=351b482751b9d127f3316d3502e9b9e95f4aa918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:08:c3:1d:6e:af:98:ff:aa:b8:56:76:87:e9:
                    fd:13:b0:4c:0f:22:b1:68:21:19:26:bd:11:45:c7:
                    6f:d3:2a:f1:97:c3:b9:0b:f0:82:4c:9e:fe:91:f5:
                    09:50:c6:33:39:4d:ca:26:60:41:e7:2d:95:8d:e3:
                    93:7c:0d:13:82:5a:0f:ed:60:e5:19:7e:a2:38:61:
                    b6:6a:d3:ea:31:2d:01:f6:46:e0:66:ff:2d:d1:03:
                    c4:52:e6:a3:dd:d5:8e:e8:b8:50:9c:ba:57:cb:7b:
                    35:42:40:b2:80:57:97:c3:62:3a:f2:c6:6f:ab:cc:
                    3e:bb:48:ad:b2:c6:7b:7d:8f:8c:11:86:36:83:b8:
                    0c:d7:34:ae:75:c5:46:b5:d1:38:e0:50:53:8b:a5:
                    d2:de:e9:16:df:20:51:48:08:a4:92:41:84:3a:97:
                    74:5a:a0:65:44:e4:6f:01:c2:00:bc:01:f4:1e:36:
                    bb:33:d6:03:eb:a0:3a:00:4d:85:06:4b:f5:f6:90:
                    37:f5:17:15:75:7f:c4:4f:8e:f5:47:c4:33:37:f4:
                    47:79:18:f5:d5:54:07:1c:8b:1d:a6:d1:20:ab:ef:
                    6b:85:b7:1b:22:f9:44:f4:56:db:63:d8:22:27:64:
                    b3:64:12:c5:0e:20:e1:9e:d4:50:26:ba:c2:93:3b:
                    18:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:1B:48:27:51:B9:D1:27:F3:31:6D:35:02:E9:B9:E9:5F:4A:A9:18
            X509v3 Authority Key Identifier:
                keyid:4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:e3:9e:ae:c8:71:70:71:21:6f:65:7b:a7:e6:8a:14:4b:41:
         a7:8b:b9:24:1f:a8:ef:55:5f:56:1e:36:ef:ef:e0:96:c6:9f:
         9c:ab:e4:4c:03:fa:29:0b:22:12:b7:e0:57:15:4a:b6:b9:7b:
         6c:86:fc:79:6a:23:ba:a6:64:e3:9d:8f:60:bd:39:84:ab:10:
         c2:f5:2b:42:a1:ec:ae:00:ac:7a:89:03:b9:96:c2:58:5f:10:
         70:d6:3b:b8:57:8d:26:c5:d7:71:cb:17:cb:95:f9:f5:2e:04:
         46:87:31:e3:e5:1c:30:6f:07:86:d7:74:4a:6b:17:ec:58:34:
         c2:1d:33:ee:c1:2d:be:00:ea:a1:79:aa:59:48:08:76:0f:5f:
         9f:20:5c:ba:9d:12:69:a0:6f:74:ef:01:eb:05:da:ed:3b:33:
         98:84:60:6d:40:ee:54:9e:75:8c:9b:ca:d6:41:17:be:7c:c4:
         35:66:b5:ad:b3:52:ee:5e:3e:ec:91:02:94:de:c6:28:13:cb:
         ff:ef:48:ef:6c:20:cf:3b:d3:4d:f3:2a:01:2b:f8:cf:8f:ef:
         3a:95:c6:b8:1f:7d:40:ca:8c:ef:af:c4:89:be:f0:72:e3:87:
         18:10:31:ba:b7:b9:70:3f:e2:29:f7:65:9e:66:23:71:01:c7:
         cd:d9:89:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:16:41 2026 by rpki-client