Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft
File:                     74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft (raw, json)
Hash identifier:          10wiPIgGNSvM2FJi0aCRCJHhIA/BIqVfNee7jIQFw48=
Subject key identifier:   FD:14:91:05:96:8A:AA:C8:F3:00:BF:B4:9B:40:F6:65:62:77:31:6D
Authority key identifier: EF:80:3A:49:0F:D6:20:35:18:BB:E6:44:BC:72:09:AF:B7:7E:C7:B4
Certificate issuer:       /CN=ef803a490fd6203518bbe644bc7209afb77ec7b4
Certificate serial:       019E1D599AF988271D8CC18BAFF601907F26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft
Manifest number:          0AA0
Signing time:             Tue 12 May 2026 18:01:11 +0000
Manifest this update:     Tue 12 May 2026 18:01:11 +0000
Manifest next update:     Wed 13 May 2026 18:01:11 +0000
Files and hashes:         1: 3nO3Eu2HYNgfsHOzOD5IS3szUzQ.roa (hash: CLkZIvvir/OJbbrzSfgsy0YtbLrBe518P4dyR0joX20=)
                          2: 74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.crl (hash: SkGUX1C7cc2NijTBOdUKXppcJf5wQEaWbUY7kfKLajk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:9a:f9:88:27:1d:8c:c1:8b:af:f6:01:90:7f:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef803a490fd6203518bbe644bc7209afb77ec7b4
        Validity
            Not Before: May 12 18:01:11 2026 GMT
            Not After : May 13 18:01:11 2026 GMT
        Subject: CN=fd149105968aaac8f300bfb49b40f6656277316d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dc:00:cf:b5:6d:f4:e7:7f:a9:94:d3:53:aa:
                    2b:73:93:ac:59:06:20:aa:4c:27:54:fa:90:13:08:
                    69:c6:7a:47:03:51:72:9c:f9:85:ce:c0:96:3b:f7:
                    3d:d9:82:45:3e:85:6b:a3:3f:cf:00:69:11:34:5f:
                    f2:aa:90:e7:72:0c:45:83:59:4c:89:91:b8:5a:b5:
                    c0:6a:ba:65:22:b6:14:f8:6d:20:19:93:04:06:d6:
                    1a:54:5f:6e:11:a9:2a:72:3a:92:23:15:fb:d1:57:
                    65:40:39:31:1a:48:c4:20:84:8f:da:b5:e8:b7:48:
                    bd:36:72:a2:a6:e9:53:ed:28:66:20:a0:a8:9b:1e:
                    47:a6:37:c6:79:26:99:8b:30:9e:37:84:1d:c3:4e:
                    77:e3:d7:50:04:91:cd:d3:dd:68:5a:ac:06:e5:2d:
                    89:b0:47:a7:a8:ea:ac:57:e2:b6:d7:53:7d:11:cf:
                    e5:9f:e2:87:8f:fc:06:a4:5b:32:2b:8f:36:78:a2:
                    95:9a:fb:c0:28:1e:91:9b:0f:95:69:de:0c:39:ec:
                    ef:dd:cf:50:e1:2c:82:b1:da:4f:43:9e:3a:13:98:
                    2e:91:b6:bb:20:87:bc:ee:09:cf:71:b4:09:3f:21:
                    c1:69:d0:9b:3c:09:60:e5:36:9a:5d:24:d6:12:ff:
                    a5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:14:91:05:96:8A:AA:C8:F3:00:BF:B4:9B:40:F6:65:62:77:31:6D
            X509v3 Authority Key Identifier:
                keyid:EF:80:3A:49:0F:D6:20:35:18:BB:E6:44:BC:72:09:AF:B7:7E:C7:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:e1:77:6a:fb:7a:c3:2e:f0:c6:05:08:3d:f6:19:e8:78:ac:
         c9:54:f3:dd:a3:96:48:04:62:19:99:ed:91:91:ed:96:0e:ac:
         45:e9:19:05:49:8c:aa:64:37:0f:f3:71:c6:2d:39:04:93:3d:
         f7:96:e7:8d:32:82:ee:79:c9:10:e6:45:7c:32:4c:94:9e:ea:
         11:8a:c1:b5:26:58:49:6e:09:7e:0a:7c:f2:1f:3f:08:96:29:
         e2:a8:79:8b:97:ac:14:eb:0f:d7:74:8b:62:61:dc:54:03:57:
         74:a8:fc:04:87:90:50:a8:08:7b:77:a5:de:cd:43:85:5a:90:
         a5:cd:ea:62:9d:57:be:ae:88:56:36:db:d5:a7:c0:03:09:7b:
         2d:48:d9:8b:b0:e7:dd:7a:4d:f8:83:b8:cd:6e:94:34:0b:c9:
         9b:bd:71:6c:80:98:77:4b:67:11:d8:f5:eb:4b:71:0c:ca:cd:
         d2:2f:06:63:4a:b7:4d:74:b9:cd:0a:41:24:f9:97:67:b1:57:
         4e:b7:f7:ef:75:d3:c4:07:2a:80:86:12:96:fd:35:65:a4:f8:
         5b:41:e1:56:ca:c4:97:ab:d4:bc:98:47:d5:45:f3:dc:65:b4:
         38:4b:0e:9d:27:6c:51:b7:7f:48:04:e7:00:3e:aa:b6:22:e8:
         f8:37:1c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:39 2026 by rpki-client