Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
File:                     4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft (raw, json)
Hash identifier:          XflIg9UnkURLplLdaRq3k3MVu9pbRBhzzLbY8FyrUf4=
Subject key identifier:   CE:77:A0:BE:E4:EA:E4:59:60:76:01:9E:FD:39:69:02:75:C9:C4:6B
Authority key identifier: E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
Certificate issuer:       /CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Certificate serial:       019E1D90F5CBB75F987845FDF0B54329C893
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
Manifest number:          1918
Signing time:             Tue 12 May 2026 19:01:39 +0000
Manifest this update:     Tue 12 May 2026 19:01:39 +0000
Manifest next update:     Wed 13 May 2026 19:01:39 +0000
Files and hashes:         1: 1-nIDHjjDOfK0qkT3T38aF1CybZo.roa (hash: wfNaZ1sAvLj/BXad973SBMXYEOp2AK12GK1yxn0qtHA=)
                          2: 4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl (hash: HXMzuU917FkUkk4zvGvDkPsIQpNRsPUWJvpA2x68d3I=)
                          3: 7cNt7nS6Ga02pEEvUGwXFcclfa4.roa (hash: IhtCXpz8Ziv5ADSE80GH1TqeWkIm73cJMRq8OxzR0jw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:f5:cb:b7:5f:98:78:45:fd:f0:b5:43:29:c8:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e215be4532e9588c40531a7f331eabfbf4770a5e
        Validity
            Not Before: May 12 19:01:39 2026 GMT
            Not After : May 13 19:01:39 2026 GMT
        Subject: CN=ce77a0bee4eae4596076019efd39690275c9c46b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2b:b1:06:93:09:b6:d0:46:b2:90:2e:a5:21:
                    e4:ff:90:00:dd:7e:82:2e:49:5d:7d:96:cb:58:45:
                    3d:75:5f:20:bb:fd:68:7f:5d:99:a7:30:5c:d6:81:
                    e5:7c:72:0b:1a:80:ee:15:0f:22:6a:86:40:6a:2c:
                    28:a2:11:26:2c:9f:49:22:7d:3e:99:8f:80:4d:68:
                    ea:56:4b:c5:22:21:8c:57:fa:90:e4:2f:fc:e0:da:
                    15:40:81:28:3f:6a:08:1a:6c:59:3e:ee:84:84:c2:
                    80:03:b5:fa:43:71:89:a9:6c:f3:68:84:8d:41:a5:
                    53:8a:43:86:28:b1:4c:36:3f:e3:42:f3:8a:00:f9:
                    09:89:f7:af:0e:45:9b:a6:db:61:9b:f8:c9:a4:88:
                    b6:5f:ec:08:94:08:f4:58:c8:ef:b8:ff:41:be:39:
                    f5:f8:b9:d6:0d:21:68:f3:de:83:f0:54:18:a6:42:
                    eb:42:f3:af:a4:fd:80:1e:18:87:91:c7:50:1b:29:
                    d6:b9:c9:17:93:b4:61:d6:3d:93:36:dd:a7:50:54:
                    24:ca:1d:4d:eb:90:56:4e:c5:60:fb:46:06:c4:7a:
                    d5:fe:dd:cc:60:02:86:88:b9:bb:3e:3b:0e:69:88:
                    bf:bc:84:a4:74:41:ea:6f:16:95:d9:76:00:aa:7b:
                    23:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:77:A0:BE:E4:EA:E4:59:60:76:01:9E:FD:39:69:02:75:C9:C4:6B
            X509v3 Authority Key Identifier:
                keyid:E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:e1:e9:ab:02:41:94:43:29:27:62:c2:ca:d9:58:b0:70:10:
         88:12:5a:59:d2:05:10:47:34:2c:f3:dd:ab:29:7d:6e:68:be:
         8d:ec:05:4f:be:88:0a:ed:33:d4:68:83:34:7e:4e:8b:bd:3a:
         f4:d3:7c:06:bf:93:c7:5d:d9:71:49:e6:f3:57:d8:14:e7:a2:
         79:1e:08:2c:52:28:8f:1d:82:fe:5b:05:ea:15:9f:c0:91:4a:
         37:16:56:c5:52:6d:1a:23:15:3e:00:0f:96:0b:31:3d:39:a4:
         08:5f:de:76:c3:9d:62:4b:ed:68:c8:d0:e0:19:25:bc:e7:8b:
         03:49:2c:bc:77:65:16:fe:b5:94:21:40:3e:55:6d:26:85:c5:
         53:2d:f8:f0:de:f4:0a:cd:46:a1:e3:51:77:22:ff:22:d8:6b:
         9e:c2:e3:f2:1f:0f:d0:02:bc:82:cc:63:f8:c6:8b:e6:a7:15:
         c4:e6:4d:e5:82:fd:54:e4:c2:8d:b8:7b:2e:17:67:79:e6:e6:
         fe:c5:ba:7b:a4:dc:00:03:50:5c:6c:9a:c9:4b:38:3c:6f:6c:
         37:98:13:42:02:7d:91:69:21:20:4d:ba:e6:8c:37:5f:c2:90:
         ea:de:e0:dd:be:f8:f2:c3:8d:a7:74:16:f3:01:38:33:b8:1b:
         10:52:25:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:06:42 2026 by rpki-client