Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
File:                     p_0_iTNdz4KGZrKPrYrpk71EiHg.mft (raw, json)
Hash identifier:          eSWYtqUS9U5cTt+NoJyLXblOPecugOV8H5PHNwBkZ90=
Subject key identifier:   D8:1B:30:AB:C5:95:1C:CF:13:61:C5:20:DB:D5:C7:BA:73:B7:EA:8D
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Certificate issuer:       /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial:       019E1F10B5F73930809BB5FF03A5965D6439
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
Manifest number:          1093
Signing time:             Wed 13 May 2026 02:00:49 +0000
Manifest this update:     Wed 13 May 2026 02:00:49 +0000
Manifest next update:     Thu 14 May 2026 02:00:49 +0000
Files and hashes:         1: Qth5F4Jxy_7Urd_QUYNqQ6dh3BE.roa (hash: 7J/t016OYUhUIcd/w4kqId0UMUV/HMGOup9T1dY8o6k=)
                          2: VMk_-ZVMzNsk1GgbJTfI9LE0DME.roa (hash: UfrV1/CMx2zPrF2PH/5Pf7VA8YMgyux3npUJflT4mLo=)
                          3: WMaXfRf-RFKZGI9jfe80US59tDA.roa (hash: oSG4X6QE7Zo0M5rFiT40os6MT1Li/W/ODtM/SHLn50w=)
                          4: WYINcTR5G8eWIm2nJo9-FZB9A-c.roa (hash: xbC6ZKVedTs8dgZW52hJX5QjfYmjqhQcuGp6AKEKmZI=)
                          5: XAZ6WKQwSbWuMdg-slN8CRUbp5I.roa (hash: B/BbMvrnmz3NQFSpm/6UYMAwSqXPT+vl+n1zXtv+BHo=)
                          6: a9JkWci0F3TTd0p2sBEzmiEjdq0.roa (hash: 5j0Wq9PZGQQ7JbTj7Kgmx1x+26TKEMnhbQ7aJjaYgsg=)
                          7: hCn3bIQg5VsX6NCOxM1ZQie7ZJ0.roa (hash: D+/5MAyrqx5oCLSLt+ymEIb8F3rOABO1+8Ywi8kb7lY=)
                          8: p_0_iTNdz4KGZrKPrYrpk71EiHg.crl (hash: YZcUJvca7nymg5f2XSCaSBOFpuFdz8JruydOBmJlKDk=)
                          9: quvibglo6Ez0p7GLGOPHRy9oRo0.roa (hash: PHUCyCkb1CzH3KiJNE2akCPX54R84dlZX7do54X1Jww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 02:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:b5:f7:39:30:80:9b:b5:ff:03:a5:96:5d:64:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
        Validity
            Not Before: May 13 02:00:49 2026 GMT
            Not After : May 14 02:00:49 2026 GMT
        Subject: CN=d81b30abc5951ccf1361c520dbd5c7ba73b7ea8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b2:65:f4:7d:41:c7:ab:f8:2a:68:14:7a:8a:
                    6f:cc:2e:fb:79:61:ff:0e:af:13:c8:e1:58:d7:eb:
                    f3:21:9f:f2:69:5f:37:6e:29:7e:20:72:ec:d2:8e:
                    5c:5f:73:0d:36:2d:bd:96:c1:e0:3f:24:be:0e:99:
                    9e:b8:16:63:ee:7e:97:45:2d:f8:fb:90:d3:00:fc:
                    23:73:1d:e3:0a:88:54:ca:fa:1b:f8:d1:08:8b:81:
                    79:a5:9b:84:ed:3a:c5:2a:49:08:01:d5:73:17:ed:
                    12:70:69:2e:87:e9:fb:af:33:0a:13:63:9d:18:42:
                    65:0b:bb:d9:1c:33:fb:39:99:a3:2d:2a:2d:11:93:
                    b8:81:84:e0:56:55:74:28:9f:19:79:19:b0:a0:7a:
                    8e:8f:c1:f1:0c:30:eb:34:20:7c:ff:56:62:91:ef:
                    8f:9b:c8:bf:c7:44:82:17:06:33:d7:54:67:bf:72:
                    b7:47:5a:89:68:3b:59:01:c6:f7:4d:c7:ec:8b:29:
                    d7:40:e4:e0:0a:47:99:00:0e:06:7b:9b:f1:26:5d:
                    04:2a:7f:49:f5:80:d7:ec:36:d5:7b:9a:05:96:65:
                    5a:9e:e6:8b:19:c8:82:8d:72:a8:f6:de:c7:b5:3e:
                    bb:e4:24:85:61:de:01:1f:d1:c8:ad:86:5f:6f:7c:
                    61:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:1B:30:AB:C5:95:1C:CF:13:61:C5:20:DB:D5:C7:BA:73:B7:EA:8D
            X509v3 Authority Key Identifier:
                keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:95:65:e3:69:1d:41:77:bc:3d:45:2b:80:01:66:21:10:3c:
         b8:c3:05:f7:f6:17:18:4c:1a:79:ee:29:ab:8f:5b:da:ae:88:
         87:02:97:e5:a5:70:ad:60:80:e6:88:8d:a2:53:d2:46:9b:63:
         c3:e4:2c:ce:d0:cf:a0:94:02:99:b4:29:46:e8:ec:51:58:c9:
         1b:88:1b:01:2b:b8:23:e3:f7:31:8a:d9:07:19:11:7a:b3:de:
         84:0a:74:38:4f:ce:17:23:a0:a5:f7:29:2f:6c:48:2c:a5:22:
         60:b1:bb:fd:ba:0d:4b:8c:a0:fc:12:6e:0d:83:52:e3:6c:cb:
         c5:db:7c:60:87:6a:59:6b:76:01:39:df:63:f2:14:19:94:72:
         f2:5d:d2:06:8f:51:82:62:de:2a:5b:06:87:e6:13:61:d3:31:
         42:fa:cd:5f:bc:e3:b5:3e:7b:a4:69:40:e5:7d:e8:29:1f:c0:
         4d:12:e4:c6:39:2b:ad:98:cd:82:aa:38:36:1b:d1:cc:95:cc:
         1b:fc:b8:81:45:30:ba:fe:d5:36:ee:72:ce:72:91:1a:ef:e4:
         5c:25:74:fe:5a:71:17:f0:6a:34:cd:74:b0:4e:5b:49:c3:05:
         2d:8d:18:9d:47:bd:35:71:1a:83:f2:02:85:ca:cb:c9:ea:50:
         d8:04:7c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:19:48 2026 by rpki-client