Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
File:                     tEORSkjl2uWnVrHjuPvkN-4Niww.mft (raw, json)
Hash identifier:          HNkR3RrwMnpxHBspc7Oh411pM5OAiwLolEMKWuKh/4Y=
Subject key identifier:   E0:41:83:9E:10:7E:07:EF:AF:A4:C4:96:1A:42:5F:8F:F1:09:71:81
Authority key identifier: B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C
Certificate issuer:       /CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
Certificate serial:       019E1F7FBD6F2A363A4D04488B12858061B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 04:02:05 +0000
Manifest this update:     Wed 13 May 2026 04:02:05 +0000
Manifest next update:     Thu 14 May 2026 04:02:05 +0000
Files and hashes:         1: 49d3lo0t_8Ax5cbwJrY_Tha0ERQ.roa (hash: qoFvjnjBe3Z9lf3XdiqiaeG3oM6pWV6dcIPmH4VpFRw=)
                          2: 7ufFK9wMYQIlfPF5mBmnlqE81ZE.roa (hash: byv9bKYSFyW281U6XJiGXV1al8HvRRvhSL2jHGqxWtU=)
                          3: gdZbcfQhj6CVyMJsPQMT1BZmtdM.roa (hash: X/T0yNnwui4YvzGKyxtkJ10/UIQIZbvCIKZsavRhgn8=)
                          4: hckySekDjcPjJjmCb8xV-0niibA.roa (hash: rABvuPwZ4k/dR/LQvlCJNpnmkfZ6RaaAKF1LFAoY6XM=)
                          5: tEORSkjl2uWnVrHjuPvkN-4Niww.crl (hash: vPervEnj20RyNXe9Hi1i5wEQL7iHrC4VvhBGmr9NDLw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7f:bd:6f:2a:36:3a:4d:04:48:8b:12:85:80:61:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
        Validity
            Not Before: May 13 04:02:05 2026 GMT
            Not After : May 14 04:02:05 2026 GMT
        Subject: CN=e041839e107e07efafa4c4961a425f8ff1097181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9e:10:d4:cd:d8:83:36:0c:25:a9:8a:06:87:
                    bc:55:aa:de:43:55:71:a8:03:4c:0f:a1:64:bb:e7:
                    cd:23:ef:a3:60:7e:4d:8b:04:cf:c8:9f:fd:dc:a1:
                    6c:2d:bd:0a:25:48:76:9d:f8:e7:79:28:8e:6d:85:
                    6d:cd:d2:09:fe:b7:93:09:26:96:51:1f:4b:81:62:
                    4f:01:31:a3:5b:c8:b0:b0:5d:0a:84:52:26:03:7a:
                    b5:b5:3f:e3:63:36:f7:1f:cb:82:2f:95:72:29:b2:
                    15:54:63:3b:d2:40:bf:2f:bf:1b:4f:6d:f6:39:d5:
                    fe:47:47:4d:c6:c2:48:c1:2e:a9:9e:10:a4:47:83:
                    b2:2c:18:d1:04:75:64:47:bb:f6:10:39:b6:d6:d3:
                    41:76:55:ed:08:f2:f5:b3:f4:54:ba:ee:ba:36:d6:
                    dc:c9:b7:00:ce:b7:cc:10:ad:a7:24:0b:f7:6c:7b:
                    8c:1d:16:95:c4:16:ac:7f:6c:11:ea:5b:ea:6f:43:
                    0d:07:2b:54:c1:6f:3a:5c:c5:4c:bc:20:b6:a3:90:
                    4e:04:98:c9:66:b4:89:02:c5:e2:ff:87:4e:97:ab:
                    f9:8f:9c:06:d9:d7:3d:c9:97:82:0a:08:56:73:84:
                    5b:e6:26:c0:81:22:6e:ad:a1:f0:b9:8b:b6:0b:57:
                    2f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:41:83:9E:10:7E:07:EF:AF:A4:C4:96:1A:42:5F:8F:F1:09:71:81
            X509v3 Authority Key Identifier:
                keyid:B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:10:19:a9:9d:d0:e2:99:31:bd:52:1f:b1:34:d1:34:f2:f7:
         e5:ec:ec:78:58:65:a8:95:2f:b0:89:61:f8:cb:ca:ca:31:90:
         5c:63:05:ae:b6:9c:33:39:98:1b:38:17:85:ec:48:29:df:43:
         e9:04:5a:4f:6c:7d:49:93:aa:ad:fe:43:c9:34:61:75:98:21:
         2d:b7:09:c2:68:af:82:d6:70:96:ae:f1:bc:fd:da:fc:5b:1b:
         46:2c:7f:2e:fd:48:1b:02:5d:fd:e4:06:c5:0f:f3:68:24:0c:
         28:92:46:c0:ca:35:a8:d9:59:a1:c4:4f:e8:d7:9c:ac:11:41:
         6a:f0:b0:c9:e2:1b:ee:db:08:da:ea:15:75:79:e3:9a:4e:e8:
         bb:3e:bd:2e:49:b2:fa:db:fa:c8:28:6e:2d:2f:7e:30:85:b5:
         c7:5c:e1:43:b1:a8:6c:7e:c6:1c:d6:51:82:60:ca:a1:59:8a:
         9d:50:b8:86:65:3e:6c:5f:ad:d1:3e:9e:a2:79:61:6d:72:ef:
         a6:5c:e5:c3:17:83:42:03:55:01:f9:ce:83:73:70:c1:37:ff:
         95:0e:f5:7c:c2:2f:a6:fa:b3:c0:35:2f:80:a2:8a:49:15:28:
         9c:df:86:40:d2:ff:c7:c2:45:fd:f8:17:44:eb:12:b0:0a:24:
         27:05:08:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:48:42 2026 by rpki-client