Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
File:                     rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft (raw, json)
Hash identifier:          V/Bdt7DSMBmOJomgx5Gq5e9WIJgj7jUius39lP5ypBM=
Subject key identifier:   A6:5A:B9:F4:FC:FA:EE:68:D7:A1:6A:9A:EC:DB:34:71:FF:AB:22:E3
Authority key identifier: AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
Certificate issuer:       /CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Certificate serial:       019E1DFE5813521772A48F16FB1FE136896B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
Manifest number:          1928
Signing time:             Tue 12 May 2026 21:01:08 +0000
Manifest this update:     Tue 12 May 2026 21:01:08 +0000
Manifest next update:     Wed 13 May 2026 21:01:08 +0000
Files and hashes:         1: 16oj0KN5oVRu5RHVQyd660OcQhs.roa (hash: TLQlSbdPdjZyztttOHY25ysKwRVnJ6KupToVN+WGfno=)
                          2: 3vf-Yp-2fomUCGxxsuFuZBkPGGQ.roa (hash: LZ4veM7bkOEXkp7bq57kS6QDZIvIWlhUv4Gp6OCzQzs=)
                          3: YbRyztzAYyU1EQ0U7vEJD7T7-GQ.roa (hash: lc8H8Or878nYqwgvLpQaR10DBBjaXOJCSgikSKNMpVE=)
                          4: rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl (hash: Lx/t3aiYC9IhFhla2vboR2sro7VtfQhf7IdACAmhO5k=)
                          5: z-6NzODp7V-uHJv_U1uqHFUWgdY.roa (hash: Wpr01XsM6HL09hxowv58BJM3hnt+sJz/9fzPyIg61hU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:58:13:52:17:72:a4:8f:16:fb:1f:e1:36:89:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
        Validity
            Not Before: May 12 21:01:08 2026 GMT
            Not After : May 13 21:01:08 2026 GMT
        Subject: CN=a65ab9f4fcfaee68d7a16a9aecdb3471ffab22e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6e:f1:7e:23:83:e1:97:a8:fa:3b:38:a7:de:
                    71:d0:6d:0b:67:a7:ca:04:cd:cc:c7:47:f4:89:28:
                    98:12:1e:0f:82:35:49:58:df:8c:9e:c0:43:4e:2c:
                    5d:ef:86:fb:05:88:3c:14:8f:35:60:39:2e:2d:1b:
                    85:18:a6:0b:12:ae:98:e1:da:f4:95:a5:37:c0:2b:
                    32:48:b6:70:46:84:22:d0:79:fd:ea:ba:04:ac:1b:
                    f4:13:e4:2b:d1:55:b3:27:02:f7:f2:a8:4f:8a:b1:
                    cb:1f:b6:13:26:8b:94:f3:b7:02:de:ad:cd:ca:0a:
                    26:1a:93:fd:a7:09:26:64:b7:b5:22:99:0e:80:a3:
                    f6:58:1e:26:52:42:03:a8:25:f6:64:3a:9f:53:a0:
                    0b:0b:88:87:39:90:b5:98:32:24:6a:11:df:c1:c6:
                    2f:53:57:6d:b7:d5:c8:85:d8:ab:3a:96:7e:d8:c1:
                    41:da:a4:80:a4:c9:7d:16:41:d4:6c:fe:1c:bd:8a:
                    42:0c:8b:9b:80:c2:a4:31:8e:5d:ed:d0:d6:6d:e4:
                    40:00:46:78:84:01:39:21:9c:5d:75:63:71:c9:09:
                    7d:e2:81:3d:48:0e:90:63:12:cb:a7:9a:90:2f:9b:
                    3e:51:e7:7f:07:5d:1a:e0:7f:5e:13:6d:dd:94:50:
                    81:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:5A:B9:F4:FC:FA:EE:68:D7:A1:6A:9A:EC:DB:34:71:FF:AB:22:E3
            X509v3 Authority Key Identifier:
                keyid:AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:a2:92:ba:b2:dd:87:bd:cc:93:fe:99:03:54:a2:d5:94:90:
         4b:21:a4:5a:e9:85:67:40:4b:ff:19:52:6a:6d:09:e0:47:0e:
         98:16:2c:d1:6e:be:89:5f:ed:2f:4f:09:39:55:a3:75:62:55:
         05:2c:b7:50:6e:e5:88:1c:9c:d9:2f:d7:78:55:c3:4f:52:3d:
         30:5e:37:1d:a4:3b:b0:36:0a:78:d2:9a:c6:6b:85:48:c9:6f:
         04:18:79:44:40:5d:16:c0:ff:e7:f5:2a:f0:ef:1c:ed:74:93:
         2c:4b:44:3a:02:9f:f7:13:be:c2:49:94:e5:31:3b:ed:ae:58:
         91:e1:1f:dd:f6:2d:47:0e:e5:c0:38:b4:66:f1:95:5c:8a:86:
         57:c5:5b:ec:12:1d:d5:8e:ea:54:2a:04:7a:92:c8:c1:fa:0e:
         48:44:34:a4:70:78:b6:98:08:64:e3:16:1f:27:b5:c7:4c:40:
         68:ab:5d:e3:34:89:c9:90:54:9f:5f:22:24:18:d4:f6:12:7a:
         d5:b4:e4:5a:70:ae:37:3b:56:d6:5e:f0:d7:05:a9:2b:c9:6e:
         27:49:08:b0:76:0b:48:a6:be:13:4c:32:05:9d:72:68:a1:64:
         13:d4:3f:d0:d2:04:e4:26:0b:25:0f:30:8b:05:18:6d:ce:12:
         b2:53:a4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:48:26 2026 by rpki-client