Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
File:                     A39TL6Ji9ca9lhW8151u3UPy4HU.mft (raw, json)
Hash identifier:          5iBPhxo2bjygGy8/zRkDjVpqTZOeCeGPA3CHIER2FtM=
Subject key identifier:   80:E0:24:3A:F4:BE:47:AD:C4:33:E0:55:AD:97:61:CB:C1:C8:98:B8
Authority key identifier: 03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
Certificate issuer:       /CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Certificate serial:       019E1FEC9AF7368A73F31E5230C7992C7E0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 06:01:00 +0000
Manifest this update:     Wed 13 May 2026 06:01:00 +0000
Manifest next update:     Thu 14 May 2026 06:01:00 +0000
Files and hashes:         1: 0kDLFicUYCSnk5qezsAnlqD_YsQ.roa (hash: nPUI+tPRgC8/2WDdTR0OhIepUfEAFxE9m9YTijKjEm8=)
                          2: 5S_7thf2DaNAtWCpIaM3S8JGyIw.roa (hash: gFO7mmA7nFE7H8OIcfxRMIamOyG5pl0gNHLu/ghYBzU=)
                          3: A39TL6Ji9ca9lhW8151u3UPy4HU.crl (hash: DDh32NSS1s7wG/oFaA+G/8U52WeSkBpK2O6gtCNoILk=)
                          4: okyJ_dyqGcdnFwHJe7BtYHyXka8.roa (hash: 4dVv/6YLlqIKpJZjxm1+2Z9rbJ0osG+l17eURfhyO4s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:9a:f7:36:8a:73:f3:1e:52:30:c7:99:2c:7e:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
        Validity
            Not Before: May 13 06:01:00 2026 GMT
            Not After : May 14 06:01:00 2026 GMT
        Subject: CN=80e0243af4be47adc433e055ad9761cbc1c898b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2b:84:4a:13:20:37:45:18:93:58:99:8c:c7:
                    aa:de:26:67:81:e9:fc:f9:bc:9f:a6:ac:28:8e:64:
                    ee:4e:28:4b:3c:44:e3:64:e8:be:a8:7b:ed:65:a9:
                    72:e3:23:fb:db:14:c2:45:c1:3e:ae:7b:20:d2:41:
                    b7:58:e8:03:0a:73:63:e9:7e:3a:7f:bb:d3:a4:85:
                    b4:b0:4b:c3:af:b5:14:b1:10:bc:90:18:3f:74:4a:
                    f0:63:01:66:52:ea:76:52:e1:db:60:76:6d:90:0e:
                    01:6a:d5:d3:73:e9:1d:26:f7:10:12:22:7f:fe:13:
                    7c:49:60:52:9d:ce:d5:3e:02:71:e6:f9:5a:14:0d:
                    12:91:1e:7a:d3:34:51:be:fc:49:9c:bb:49:9c:ae:
                    d1:6e:6e:b6:b1:4e:0d:be:ab:56:27:32:df:24:ba:
                    6c:73:5a:02:81:df:f4:ba:25:3d:e4:2a:30:86:a5:
                    b3:3e:b5:18:6f:8c:8d:26:bd:ed:25:0b:5a:36:3e:
                    a6:93:e0:58:95:21:a2:99:dd:17:a5:f3:ef:93:66:
                    0e:6c:43:ae:f0:06:7d:d1:e0:cf:52:b8:98:72:4d:
                    dc:c9:ab:49:5e:85:84:35:56:fb:5c:0d:55:51:49:
                    fd:cf:22:bd:db:6b:cd:8c:c2:1b:7f:ea:c9:9c:f5:
                    f6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E0:24:3A:F4:BE:47:AD:C4:33:E0:55:AD:97:61:CB:C1:C8:98:B8
            X509v3 Authority Key Identifier:
                keyid:03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:28:08:b1:06:c0:d1:9b:3f:96:6f:ca:bb:b8:0a:70:6b:03:
         f3:03:45:39:7f:d3:fc:77:41:27:6e:f9:f9:0a:e6:9d:ec:04:
         21:d1:5c:94:d2:c9:bf:14:f6:85:bb:2d:4c:a0:b6:a6:38:9d:
         94:1f:a4:b8:59:50:67:77:16:26:25:65:18:a2:07:e2:a1:11:
         7d:48:bb:01:5d:9c:73:3b:3c:a6:b1:2d:4e:bd:b5:a4:07:89:
         ad:0e:20:1b:02:b5:59:76:00:44:cb:6d:6d:6b:1e:5f:ef:97:
         b1:ec:05:48:c3:2d:af:9a:c2:b5:a0:03:85:f5:87:cb:97:ed:
         a1:df:49:0e:76:51:7f:f3:84:6e:5a:30:55:08:36:99:01:6e:
         f2:c7:3f:02:50:96:8e:2b:d2:53:2a:ee:c7:da:f3:31:d6:35:
         c3:2b:78:4a:d8:67:a5:a8:30:a0:6d:36:60:bf:7d:42:b5:66:
         8d:58:99:16:54:6a:69:02:b0:f4:f1:9b:5a:52:72:29:16:ee:
         19:11:90:ad:ff:4e:a5:b9:ff:00:47:a8:bf:be:88:04:a7:79:
         d2:d0:47:3d:3f:1a:44:6d:c0:99:08:70:14:09:ab:20:c7:39:
         4e:6e:2d:cd:47:42:75:58:f0:db:93:a6:fd:a6:4c:5e:d6:56:
         4b:f9:92:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:34:51 2026 by rpki-client