Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.mft
File:                     4te3649H5Sd5Ev8FjP7X2Jn8abk.mft (raw, json)
Hash identifier:          BRUaHH1DW8fx9EV9802h4s9l1/blSbGrg9GnjkYC/4I=
Subject key identifier:   A2:96:17:02:E2:0D:B1:40:9E:D7:C7:5E:26:83:0C:84:56:28:6A:FE
Authority key identifier: E2:D7:B7:EB:8F:47:E5:27:79:12:FF:05:8C:FE:D7:D8:99:FC:69:B9
Certificate issuer:       /CN=e2d7b7eb8f47e5277912ff058cfed7d899fc69b9
Certificate serial:       019E1EA3BB5E645BB4E427FF5DA044F64C21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4te3649H5Sd5Ev8FjP7X2Jn8abk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.mft
Manifest number:          1896
Signing time:             Wed 13 May 2026 00:01:47 +0000
Manifest this update:     Wed 13 May 2026 00:01:47 +0000
Manifest next update:     Thu 14 May 2026 00:01:47 +0000
Files and hashes:         1: 4te3649H5Sd5Ev8FjP7X2Jn8abk.crl (hash: nTs1EjqvAaXfrIjxo9BjI2KjDT2pYCUfzOGA4cWJUrA=)
                          2: yPdEnBlETthfb3n2w6_5p1naims.roa (hash: FMus24cOQ5H8kqoUzdVY1kxUQ7CnaxtzdvTHW/XwsqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4te3649H5Sd5Ev8FjP7X2Jn8abk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:bb:5e:64:5b:b4:e4:27:ff:5d:a0:44:f6:4c:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d7b7eb8f47e5277912ff058cfed7d899fc69b9
        Validity
            Not Before: May 13 00:01:47 2026 GMT
            Not After : May 14 00:01:47 2026 GMT
        Subject: CN=a2961702e20db1409ed7c75e26830c8456286afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:df:c9:cc:b8:e9:9c:ea:39:17:63:45:52:7c:
                    d5:fd:55:94:a6:e3:3b:9e:e1:7f:32:65:98:7c:01:
                    66:44:57:ca:08:a8:71:b7:81:ac:b8:c8:88:84:55:
                    09:04:9d:a6:bb:03:e5:34:7c:30:6a:61:db:8c:59:
                    c6:f0:1b:96:4f:f2:ff:ea:45:86:0e:e2:c3:1a:9f:
                    44:f3:72:8f:22:c5:f8:d8:20:90:25:1d:16:41:13:
                    21:9c:a7:6f:77:d5:ac:3a:4c:6a:c2:92:8a:b1:e9:
                    ce:fa:cb:43:b0:aa:1d:a2:69:cc:cc:2b:ef:74:69:
                    86:08:dd:e1:23:a8:45:25:4b:ae:fd:a1:91:da:99:
                    ba:67:54:5b:14:84:42:25:7c:31:01:08:62:32:4a:
                    91:2f:f9:ea:7e:4b:d9:2b:86:ad:82:f2:fd:49:94:
                    62:5b:cd:68:eb:0a:92:a9:46:e5:f0:a4:66:11:a3:
                    48:b7:4e:bd:11:f6:42:d6:4f:47:d0:e1:17:ec:6c:
                    6e:25:0a:75:3d:ad:11:b3:f5:40:23:23:e0:7a:d2:
                    1a:2c:c8:75:db:89:b6:36:fe:c3:07:a6:07:6a:4a:
                    a4:4e:c9:02:46:9d:b5:0c:4c:f8:e8:ca:86:e8:e6:
                    33:ef:95:0d:b1:34:b3:48:67:d8:1c:8e:8a:47:82:
                    f4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:96:17:02:E2:0D:B1:40:9E:D7:C7:5E:26:83:0C:84:56:28:6A:FE
            X509v3 Authority Key Identifier:
                keyid:E2:D7:B7:EB:8F:47:E5:27:79:12:FF:05:8C:FE:D7:D8:99:FC:69:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4te3649H5Sd5Ev8FjP7X2Jn8abk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:42:94:2d:bd:eb:2a:3d:7f:7b:21:99:07:10:cd:c7:0f:6c:
         10:71:dd:00:a6:73:87:39:e2:0b:eb:fc:24:3d:10:8a:b0:d8:
         40:75:03:47:6d:b5:9d:16:cc:ab:17:2c:31:9e:f0:92:d2:04:
         9f:7a:68:3d:d8:9c:ca:25:4c:f1:59:c7:10:a1:94:e9:b0:a4:
         f1:d9:be:fc:5c:96:ba:06:22:92:01:ae:b1:b0:9f:05:68:58:
         d8:dc:8c:e5:8e:34:57:22:b7:38:67:8b:fd:d7:49:72:8f:10:
         69:e2:43:70:3d:2e:db:64:cf:1a:9b:98:ec:ec:71:01:63:bc:
         54:b2:95:24:2e:06:fe:71:b9:f6:93:8e:af:31:9e:94:eb:78:
         88:50:0a:60:37:ea:4d:7f:09:a3:04:0d:0c:de:7c:f5:4f:46:
         c9:25:93:a1:97:ae:05:4a:ad:f7:c0:8c:d9:b2:08:1f:15:e0:
         f8:59:c3:d1:f2:eb:61:7e:22:de:c7:7c:09:5d:f4:b7:43:3d:
         f2:68:3d:3d:1a:60:43:14:aa:cc:6a:4d:3a:54:97:c6:fc:63:
         bd:35:7d:14:d5:f9:84:ec:83:8e:bf:a9:75:25:bd:6b:5c:98:
         e9:3e:5b:e2:ce:03:55:26:5a:15:ad:d9:07:89:a5:b7:a4:30:
         ed:31:a2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:38:24 2026 by rpki-client