Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
File:                     Pt7grog0cFCIgFBEvnXHQDsdx-I.mft (raw, json)
Hash identifier:          /QEPCd7r76SYYVeh3qtm/BsekRXHohyA3pAY2QvWj0I=
Subject key identifier:   4B:49:4A:C9:8C:55:C2:DB:11:AE:E1:05:0E:CE:CB:97:76:8E:DA:45
Authority key identifier: 3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2
Certificate issuer:       /CN=3edee0ae8834705088805044be75c7403b1dc7e2
Certificate serial:       019E1D596917DF85766AB77A69EEC1FC30C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
Manifest number:          159B
Signing time:             Tue 12 May 2026 18:00:59 +0000
Manifest this update:     Tue 12 May 2026 18:00:59 +0000
Manifest next update:     Wed 13 May 2026 18:00:59 +0000
Files and hashes:         1: N0lWMYy9L6tUgt5C_ALrdVgjFpM.roa (hash: 3TxHIvizHgvT9zapL1jqZMumyRmsqmWLMCRlhTI/E5A=)
                          2: Pt7grog0cFCIgFBEvnXHQDsdx-I.crl (hash: OGqIIyS1UUP2YTlMhUElxH098z62foyjTZzKAtp0Bco=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:69:17:df:85:76:6a:b7:7a:69:ee:c1:fc:30:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3edee0ae8834705088805044be75c7403b1dc7e2
        Validity
            Not Before: May 12 18:00:59 2026 GMT
            Not After : May 13 18:00:59 2026 GMT
        Subject: CN=4b494ac98c55c2db11aee1050ececb97768eda45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:48:55:8c:52:1a:7e:95:0e:c9:d5:3b:00:2a:
                    5b:f7:45:6e:d6:1e:3a:e6:9c:99:25:75:46:9e:3e:
                    00:dd:ca:fd:3c:c4:54:41:cd:71:bb:d9:42:b1:91:
                    c5:3b:e7:f4:7e:dd:2f:7d:73:34:c4:ac:3e:84:b6:
                    fd:96:db:ed:68:c9:4b:ab:89:4d:ff:7d:0a:db:e0:
                    8e:32:07:20:19:e2:b3:e2:c5:95:65:5e:ab:75:4f:
                    46:af:f5:68:8f:d9:bc:d1:76:ad:8d:8b:b7:6a:36:
                    0d:6f:f1:2b:5f:41:ef:82:6d:d2:6e:73:92:a2:96:
                    e4:7e:2b:2e:ce:eb:08:24:0a:25:d5:f9:fc:88:a1:
                    a7:71:29:dc:04:db:13:bf:7c:44:ff:52:3f:0c:cc:
                    24:82:bf:45:b0:cb:9d:1a:9d:d6:d1:7d:78:54:5f:
                    1f:7d:3e:b0:57:f6:6f:3e:cf:2e:d4:54:b7:6a:b1:
                    58:11:dd:6b:91:6d:cd:a5:1e:0d:f9:d0:ea:79:de:
                    7e:0e:54:b7:32:2b:d8:fa:54:a0:c6:d2:f2:60:1f:
                    fc:7a:cd:62:ef:21:48:02:96:50:1b:5c:67:90:1e:
                    77:b1:7a:de:5b:86:59:91:07:0b:14:38:e3:9d:19:
                    60:50:d1:0f:76:7c:17:0a:95:62:cc:41:4e:aa:2f:
                    d6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:49:4A:C9:8C:55:C2:DB:11:AE:E1:05:0E:CE:CB:97:76:8E:DA:45
            X509v3 Authority Key Identifier:
                keyid:3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:ad:b2:d7:ca:bf:53:6a:ff:75:a5:ec:52:39:46:6a:74:3e:
         7c:3a:e8:1d:d6:9f:30:34:06:a1:ed:7c:1a:d8:8c:d2:15:8d:
         eb:55:da:d0:2d:a6:57:ba:8f:fa:9a:70:48:27:56:65:34:31:
         70:30:c0:fb:41:71:e2:97:00:fd:94:11:27:d9:31:a1:3b:ce:
         4f:c8:79:4a:29:6d:e9:c0:1a:d7:12:91:fe:34:eb:10:5d:9d:
         30:c3:2c:32:fd:35:c7:7a:fd:4f:58:3e:38:f0:af:88:b7:9f:
         66:b7:ee:c6:be:63:5c:09:65:cb:c9:1c:81:20:7e:39:5e:a8:
         57:8f:b8:36:bd:a0:cc:79:da:0c:21:ac:c5:45:0e:23:d4:30:
         df:06:a2:85:4c:0f:ba:bb:d6:3a:11:2c:34:ad:b2:5a:48:06:
         2a:52:dd:7e:2e:dd:e0:41:12:ef:10:67:05:9e:4c:f6:2c:6d:
         f2:e6:ee:92:fe:b0:a2:7c:51:17:42:b1:1b:66:9d:94:af:77:
         78:92:b2:d2:fa:83:6b:87:9a:ea:c2:44:4d:e9:39:7b:5e:f0:
         dd:b5:7e:18:c4:a2:7f:c7:fc:68:aa:35:fa:27:72:94:74:1f:
         7e:7f:da:36:f1:ee:4b:39:cd:2e:c6:81:30:ac:ef:9e:4d:fc:
         77:c4:c5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:04:35 2026 by rpki-client