Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft
File:                     7094lHNBzlWIi36_NpAUOwy_89Y.mft (raw, json)
Hash identifier:          NnUXFGUjsDS+Vr8tSE1KBXgL4w8Kii3fTjpA5pT0VCQ=
Subject key identifier:   AF:4E:52:EF:EB:2F:FE:1B:FC:3F:20:68:F4:D7:AD:34:4C:59:2D:A8
Authority key identifier: EF:4F:78:94:73:41:CE:55:88:8B:7E:BF:36:90:14:3B:0C:BF:F3:D6
Certificate issuer:       /CN=ef4f78947341ce55888b7ebf3690143b0cbff3d6
Certificate serial:       019E205A969621087A1D64EB3EE4AC8F0375
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft
Manifest number:          191A
Signing time:             Wed 13 May 2026 08:01:08 +0000
Manifest this update:     Wed 13 May 2026 08:01:08 +0000
Manifest next update:     Thu 14 May 2026 08:01:08 +0000
Files and hashes:         1: 2oq5AJ8ZDvTFcN8oB9ZGGwsdj40.roa (hash: Wiz2ighDEoFn4OhV9qneE+0XWQZVHPj+hAbIfIbUN0g=)
                          2: 4bCgDxdDaKJgzA4h-Rx55rf85c8.roa (hash: pNURX3p9L1wk4RiWa90pndbKlQ0u4vCpDE0muKi8F30=)
                          3: 7094lHNBzlWIi36_NpAUOwy_89Y.crl (hash: mLXZLrqap2C72BlhbZ0Sua+Kdpb11rRDTRkjCVZJcic=)
                          4: L1-dY5IfJdZ5zkeF6wnlRVfcFg8.roa (hash: dFcPnovhPqX+I0cA7rgPPiD8o0Ghfz0dhmsmMJvSAmc=)
                          5: ymwq65dFLSRW1oFgWNSexktPNrw.roa (hash: rVpzH0+E2/XQlxkiDJfpz/vLZgr0hKXz0oMYUu0ZIig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:5a:96:96:21:08:7a:1d:64:eb:3e:e4:ac:8f:03:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef4f78947341ce55888b7ebf3690143b0cbff3d6
        Validity
            Not Before: May 13 08:01:08 2026 GMT
            Not After : May 14 08:01:08 2026 GMT
        Subject: CN=af4e52efeb2ffe1bfc3f2068f4d7ad344c592da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9f:b3:ef:04:fa:b1:2f:97:3f:31:60:28:81:
                    3b:0f:04:cb:22:7b:30:7a:a7:36:32:8e:6e:00:a1:
                    58:66:ef:d1:78:5b:bc:95:9b:67:b9:bd:73:a3:d0:
                    13:d3:17:a8:5a:16:ad:d8:ce:1c:14:1a:76:e7:5f:
                    0c:41:95:f9:e7:d5:b7:de:cf:e7:b6:45:a9:ae:a8:
                    0d:4a:29:95:02:8f:02:7a:e0:8a:d4:36:74:87:07:
                    98:04:61:85:68:2a:e8:92:ea:a3:f2:47:23:eb:cb:
                    3b:f1:75:fa:bf:84:44:46:bf:e5:1f:1f:5d:1c:63:
                    13:aa:f9:a3:6a:b3:7f:c8:60:91:ac:f9:85:ad:80:
                    9a:fd:73:35:f9:fd:4b:2b:34:9d:ae:f5:29:e1:69:
                    e7:64:92:70:34:b6:73:97:b2:88:de:8f:c0:2a:0d:
                    23:a6:b0:64:a3:ed:3e:2a:7e:ad:85:04:45:e6:07:
                    2d:cf:ac:e3:d6:d6:04:7c:0f:49:ee:96:73:d3:66:
                    7f:97:ce:8d:4e:47:48:a1:df:ea:19:28:a1:0f:c7:
                    5c:6d:d7:40:55:57:eb:cf:0e:d6:28:48:6a:3d:7b:
                    3d:74:b4:72:ba:01:8e:2b:52:9c:c2:a3:ce:df:aa:
                    ac:51:44:ef:cd:61:db:67:f0:3a:84:85:48:3d:98:
                    e1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4E:52:EF:EB:2F:FE:1B:FC:3F:20:68:F4:D7:AD:34:4C:59:2D:A8
            X509v3 Authority Key Identifier:
                keyid:EF:4F:78:94:73:41:CE:55:88:8B:7E:BF:36:90:14:3B:0C:BF:F3:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:1b:cf:b8:b1:6a:d8:0b:68:dc:16:dc:49:60:08:1d:03:96:
         16:e6:44:34:68:02:69:96:9f:39:67:07:75:d5:ad:65:f6:0e:
         8a:4d:05:18:eb:7d:31:17:a0:17:90:51:27:9b:f8:bc:74:89:
         a7:ab:fd:4a:8b:60:ef:cf:63:6c:20:21:18:89:67:5d:bd:3d:
         e0:0a:dc:37:72:ed:4a:73:f9:c4:e1:1c:97:ac:5d:47:de:ba:
         16:b5:96:28:2b:81:ea:7b:ba:c5:d8:40:c5:05:36:7a:01:b2:
         85:b6:28:38:46:ad:04:10:79:1d:60:ee:72:9c:8e:48:5b:69:
         79:f1:b3:5b:12:0c:af:61:9f:68:50:54:28:cd:69:be:ce:9d:
         c5:97:1b:33:4b:91:3e:39:6a:4d:c8:40:24:41:a8:55:08:37:
         73:98:4d:ec:f7:81:1b:38:2b:5e:a1:a4:18:dd:36:0e:7e:20:
         4b:09:59:ad:99:ff:b2:00:70:23:8b:23:77:cd:3a:f4:59:63:
         77:dd:da:90:24:ac:cf:72:15:42:08:93:65:91:d0:67:12:98:
         d6:1c:06:35:91:fa:51:cc:a9:29:a8:91:2f:8f:af:5e:69:0a:
         3c:4b:80:ee:e6:f2:24:c0:22:c7:89:6c:fa:cb:11:64:00:61:
         96:4a:75:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:57:05 2026 by rpki-client