Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
File:                     RtlEd8i1TRLsiz97bZrnjlELI9g.mft (raw, json)
Hash identifier:          jThMOZfVBwFgS6dDir+vxkJq9KDYwMO+qiuNYu33J6A=
Subject key identifier:   8F:B4:9F:14:C1:D9:35:A2:8E:10:E3:15:3D:6E:F9:39:41:C7:77:F3
Authority key identifier: 46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
Certificate issuer:       /CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Certificate serial:       019E1D59C2343ACEB9BC4CF7F205CB29F38F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
Manifest number:          1908
Signing time:             Tue 12 May 2026 18:01:21 +0000
Manifest this update:     Tue 12 May 2026 18:01:21 +0000
Manifest next update:     Wed 13 May 2026 18:01:21 +0000
Files and hashes:         1: 0k5rm2Iz0BeAvz19lvLpxPfw33A.roa (hash: lXgHVP+amjdt9/+4VCZRPfNYTxajOvoe3XRa3mRnGyk=)
                          2: 3CbB-gU8Fkh_ywYdbqAJCeJYWoE.roa (hash: iBZA24ojW5yz7VpoZ8gZBo7ejClO8z0JYYTLlgfEF4Q=)
                          3: DbBkcBKTLwUVIRYiZoMGLtLABqc.roa (hash: nYJ7uYsvXEIvKqfy6utLXX5lQJgID0iu/HQASNofn+k=)
                          4: O04MUFDmO5qq7bmpK_rQWFQxh8k.roa (hash: Uc2uBg9hGaGI5Aen/J3CqWLoDqDvImijmG4PCPG2uHc=)
                          5: RtlEd8i1TRLsiz97bZrnjlELI9g.crl (hash: FJDxUw9MMJNceGELrGVueKuvfhxK0aV28Ed37RgysdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:c2:34:3a:ce:b9:bc:4c:f7:f2:05:cb:29:f3:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
        Validity
            Not Before: May 12 18:01:21 2026 GMT
            Not After : May 13 18:01:21 2026 GMT
        Subject: CN=8fb49f14c1d935a28e10e3153d6ef93941c777f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:18:23:a5:3f:2e:69:32:ab:74:05:da:f5:14:
                    a8:91:ab:33:f5:db:d5:ae:65:4a:0a:de:76:82:62:
                    60:e4:0d:17:22:5e:10:75:c8:8c:1e:8f:be:3a:3f:
                    7c:22:c4:56:65:01:19:57:8f:af:ef:b3:85:31:92:
                    43:5b:86:cb:28:44:30:dc:a6:78:cd:be:57:26:bf:
                    a4:9b:47:9f:ad:64:92:af:c7:9c:4f:c9:9d:48:a9:
                    ce:82:01:85:20:a2:b4:cf:a2:22:6b:bf:2d:b5:ab:
                    24:ff:c6:7b:bb:fc:ff:aa:8c:d2:ef:71:54:75:12:
                    a0:7f:6e:ca:48:8c:82:68:5f:f3:e4:0f:9d:19:80:
                    d4:3d:cb:0e:ac:c7:8a:8b:b0:5b:a0:e6:d6:80:16:
                    d3:d5:30:ee:f7:94:bf:cc:8b:da:cd:4f:47:45:9c:
                    b8:9f:e9:28:66:91:32:2e:e4:68:f1:19:3b:a1:2e:
                    ea:8f:fd:9a:f2:5b:c3:d1:5d:80:15:ae:76:0a:15:
                    89:b8:65:6a:ee:ec:29:b2:65:a3:7d:ac:45:30:e1:
                    5c:b1:a0:98:1f:16:4f:65:e0:41:6f:9d:c3:9e:17:
                    36:49:7e:26:a7:9c:c5:f3:18:8a:1b:5d:45:40:75:
                    d4:66:79:a5:b5:96:cc:f5:75:2a:11:dc:d2:43:d1:
                    75:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B4:9F:14:C1:D9:35:A2:8E:10:E3:15:3D:6E:F9:39:41:C7:77:F3
            X509v3 Authority Key Identifier:
                keyid:46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:4d:01:71:65:f8:3b:23:c1:31:55:05:c3:20:71:6d:08:c0:
         1f:d6:ea:9c:ce:28:62:a0:76:a5:a3:16:1e:cb:e7:5a:c3:67:
         db:1f:18:06:ec:15:2f:56:4b:20:c1:9d:68:47:dd:e0:ce:c7:
         21:63:4f:93:38:75:6e:8f:86:65:d7:c0:e0:ca:f0:dd:16:04:
         84:2e:93:65:9f:90:11:22:30:73:ee:71:92:24:f9:b0:2a:7c:
         27:20:70:84:99:5d:1d:04:05:41:af:19:50:60:09:b6:5d:b1:
         aa:69:3a:51:8f:f5:1d:0d:13:d9:8f:16:54:34:87:bd:3a:7d:
         fd:c7:02:fe:06:de:4a:0f:8b:e1:e2:58:bd:8c:65:b8:b8:7c:
         c6:be:ba:ea:d9:d6:d4:37:e8:41:2a:f0:90:77:5f:fc:4e:31:
         82:97:19:3c:a0:a9:e6:07:6e:76:19:08:4b:30:ee:2d:51:f3:
         70:de:0e:ed:b6:05:d5:6e:07:75:92:34:58:b0:14:6c:8a:9e:
         62:87:fa:0a:d7:44:57:5c:7b:51:29:44:6b:46:b5:0c:9d:f0:
         88:1d:d4:4f:0f:51:13:8d:3f:d9:de:43:f1:66:85:47:c9:50:
         43:ae:ad:3c:39:53:c2:0f:0d:be:43:d1:9d:cb:85:ce:e2:f5:
         5a:cc:22:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:10:47 2026 by rpki-client