Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft
File:                     pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft (raw, json)
Hash identifier:          uoWPEsjS4hEVEJlhk13fZhXKEXiG1zWWQZ9auoTMWEM=
Subject key identifier:   91:00:34:F6:24:F5:DE:FC:D6:45:02:A1:70:E4:37:DB:2D:15:79:DE
Authority key identifier: A4:76:7B:C5:FB:CB:CE:FB:1C:1C:74:7B:B0:EB:53:37:DA:B6:91:C0
Certificate issuer:       /CN=a4767bc5fbcbcefb1c1c747bb0eb5337dab691c0
Certificate serial:       019E1D908DE0C471E18FEA84EAF139404AD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pHZ7xfvLzvscHHR7sOtTN9q2kcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft
Manifest number:          1908
Signing time:             Tue 12 May 2026 19:01:13 +0000
Manifest this update:     Tue 12 May 2026 19:01:13 +0000
Manifest next update:     Wed 13 May 2026 19:01:13 +0000
Files and hashes:         1: 6OdumX9U3TNQ_BDfNTi9HAvC11E.roa (hash: 479EKbeun2aU00GF/z6lmnGk3H57D4kV5EAf3nlCMns=)
                          2: DlfCFhfqG3PINgL1jVCPcztdoAU.roa (hash: Lc7oVL7OUAbKr2SuVV49BF7ImGTSykw2iB7rEU3+4QU=)
                          3: fGSwmaJ6zM1DpnuBUiGrnAtIJmI.roa (hash: hb+BTTHKLxaTOIRsq5LjyfLTjd9bL73/5kVitKWagAI=)
                          4: pHZ7xfvLzvscHHR7sOtTN9q2kcA.crl (hash: tm5s2SX8oTNt1bz3d1KDmTcLhzelN30j0gBXDvbGBMw=)
                          5: vVdF_OjODbTzABBMrZJNL6HATG0.roa (hash: 6Xi4Si5ACt8P945uIvxhtizp837m5PqkOcKHPhoyDt8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pHZ7xfvLzvscHHR7sOtTN9q2kcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:8d:e0:c4:71:e1:8f:ea:84:ea:f1:39:40:4a:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4767bc5fbcbcefb1c1c747bb0eb5337dab691c0
        Validity
            Not Before: May 12 19:01:13 2026 GMT
            Not After : May 13 19:01:13 2026 GMT
        Subject: CN=910034f624f5defcd64502a170e437db2d1579de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f0:24:b0:51:73:45:fd:ca:bf:ed:ae:e6:7d:
                    93:de:93:81:dd:ee:2a:58:75:42:7c:37:78:bd:20:
                    ca:76:08:30:1c:1d:27:12:06:0d:7c:35:35:d9:8d:
                    e0:46:8b:8c:cd:fb:cf:5f:f1:fe:4f:f5:e2:08:67:
                    ce:18:ef:99:88:fc:27:cb:c5:00:e9:da:ba:f6:24:
                    7c:8e:78:a9:4c:b7:ec:42:83:a6:00:8d:49:ae:65:
                    2b:f0:a2:82:e7:76:ea:49:73:cd:a4:de:9f:b4:db:
                    3a:b3:68:9a:39:69:a1:14:6b:85:df:1d:22:53:62:
                    aa:e2:08:b3:ea:e7:87:d1:ba:4a:08:0e:b8:61:29:
                    69:d6:14:c4:80:27:a8:83:87:5b:61:9e:c5:ce:a1:
                    7c:1e:cd:13:43:c9:c3:a0:4f:8b:78:84:af:78:ee:
                    22:59:db:34:1d:09:7a:d1:fc:b4:89:fc:7f:1d:17:
                    5c:9d:a2:84:a1:19:b9:e7:56:b4:ba:f3:9a:d2:64:
                    a4:1f:ce:bd:13:bb:3c:2e:b3:64:49:b8:c3:44:89:
                    4d:69:36:39:6f:72:2c:44:6a:8b:0a:99:47:3a:58:
                    52:4b:0e:d5:12:92:00:89:c1:b9:32:b0:67:d6:fd:
                    71:a2:1c:b0:25:22:54:0e:8a:c4:df:12:e4:6f:e2:
                    9e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:00:34:F6:24:F5:DE:FC:D6:45:02:A1:70:E4:37:DB:2D:15:79:DE
            X509v3 Authority Key Identifier:
                keyid:A4:76:7B:C5:FB:CB:CE:FB:1C:1C:74:7B:B0:EB:53:37:DA:B6:91:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHZ7xfvLzvscHHR7sOtTN9q2kcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:01:61:f3:a2:3c:a2:93:98:d1:8b:08:b4:09:f0:a0:91:2e:
         7b:77:ad:db:37:23:1e:c5:2a:49:89:db:a8:d6:2e:49:f0:5e:
         f8:f2:08:28:3e:6e:ca:e0:e0:14:23:09:2a:25:69:d7:c3:77:
         f1:fa:74:83:91:85:ab:02:6f:f7:e3:78:10:3f:4b:0a:03:43:
         9f:99:24:89:f6:c1:64:b0:01:a7:fb:9c:04:59:99:4b:e5:82:
         45:4f:6f:f0:32:3b:11:0c:45:e7:f8:f2:98:9c:65:c8:4d:9e:
         fe:2b:53:00:25:db:d2:bf:ab:ea:24:43:30:28:e3:a5:b9:80:
         69:ba:9b:2c:57:4a:22:be:d1:89:83:ab:3a:cb:41:32:5c:fb:
         aa:9a:69:ca:b1:b1:15:79:05:91:c0:98:5c:83:b0:82:ae:57:
         a8:99:82:f2:0c:a8:0a:86:7a:b4:f9:3b:65:77:f0:65:e8:ad:
         18:4c:71:8d:15:c8:26:a3:01:a0:96:c8:62:12:1c:fe:cc:f9:
         5f:7a:8f:ae:1f:5e:68:85:32:ef:10:1a:b8:78:08:b1:4a:98:
         68:01:39:eb:e5:b7:47:06:79:99:11:73:fd:9d:df:24:d7:0b:
         b8:e7:a4:8c:fa:32:70:b7:50:35:0a:2d:a5:6d:dc:e4:4f:8c:
         76:eb:a6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:06:01 2026 by rpki-client