Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
File:                     tjC3O1HLxTgN1K2z1ar_TXozTF4.mft (raw, json)
Hash identifier:          RrrKIHKwLc8SbKKvDhlIE9wrRCo8uW5spMLk0rpXa0k=
Subject key identifier:   79:3A:20:AA:66:9F:C5:57:54:9F:E8:16:33:BD:6F:31:FA:8B:47:CA
Authority key identifier: B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
Certificate issuer:       /CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Certificate serial:       019E1D5947E7E249E8A5C8F70BADFF5B7E83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
Manifest number:          1917
Signing time:             Tue 12 May 2026 18:00:50 +0000
Manifest this update:     Tue 12 May 2026 18:00:50 +0000
Manifest next update:     Wed 13 May 2026 18:00:50 +0000
Files and hashes:         1: 74QuZrGQeetigRkMq6uGFupi0HE.roa (hash: EQQ+vYhOzg8Yfql8iW0iHtQKpQRx8+F1DuJOIRGQ9KA=)
                          2: dfSHgrd5C6hUKxMq0PSCmRKJm9I.roa (hash: W8W0n8nFNFor8/swBReYXbRZIyqMzRCTk+zhUXiNuJc=)
                          3: tjC3O1HLxTgN1K2z1ar_TXozTF4.crl (hash: 0SH0xXZq1zgCwRnKL/9gJB63CfR5MRm8lMAkESO7qWI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:47:e7:e2:49:e8:a5:c8:f7:0b:ad:ff:5b:7e:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
        Validity
            Not Before: May 12 18:00:50 2026 GMT
            Not After : May 13 18:00:50 2026 GMT
        Subject: CN=793a20aa669fc557549fe81633bd6f31fa8b47ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4d:ae:61:cd:78:39:e8:b9:f9:b1:41:c0:bd:
                    d1:bd:0c:3c:c4:c0:27:c1:99:b4:c1:d4:50:cc:71:
                    0c:3d:26:a9:2b:af:57:ea:31:c7:85:9f:24:78:66:
                    97:4c:a9:8a:d8:34:46:ae:2b:e0:a6:77:07:08:60:
                    8b:28:d1:c1:af:5f:85:b9:42:20:1b:3b:45:3d:76:
                    95:6f:1f:e4:44:c6:c5:7a:b3:15:68:36:cd:e9:b4:
                    e3:43:a5:23:d4:25:26:21:88:2c:70:20:68:ef:16:
                    b3:5f:8f:e9:d4:3a:1c:ca:6a:c6:bc:58:83:6d:e0:
                    06:53:cf:d4:6d:e3:f5:af:8b:b1:52:6b:d9:18:41:
                    6b:46:8e:fa:1e:71:4d:36:f1:ad:eb:80:23:bc:c6:
                    ff:97:9e:25:d4:47:af:d0:ca:8a:e9:08:a1:1a:46:
                    d7:62:32:cc:20:f1:24:67:de:8e:48:dd:5b:00:fd:
                    f4:a7:7f:9a:8e:43:37:98:50:7b:ac:f5:e0:08:1a:
                    6f:12:90:d4:e3:21:2e:5b:57:53:9f:5d:22:2b:0c:
                    44:6e:27:91:65:a2:b1:50:df:1c:06:83:c4:67:7d:
                    bf:6c:cc:e5:ee:5f:9e:5d:41:5e:0d:f3:23:14:f5:
                    fd:ab:75:83:81:d6:cb:b6:52:a3:87:3e:ea:ea:26:
                    b3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:3A:20:AA:66:9F:C5:57:54:9F:E8:16:33:BD:6F:31:FA:8B:47:CA
            X509v3 Authority Key Identifier:
                keyid:B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:68:ed:09:6a:e1:22:d1:20:79:75:5f:cf:b1:dc:65:80:34:
         73:25:9a:2a:3e:6b:77:21:f2:66:3b:9f:cb:1a:c3:d9:da:ac:
         7d:e8:de:43:8b:5f:5d:aa:6d:b4:83:a2:c9:15:90:0d:73:b4:
         98:45:87:32:83:65:a0:ab:b4:3e:74:32:3d:83:e6:b9:67:92:
         46:76:f8:de:4c:7d:be:c9:75:14:e9:fa:d7:65:a9:9e:9b:48:
         17:df:ad:63:fe:0d:93:35:0a:09:90:db:1f:9a:8c:78:0f:33:
         39:eb:0d:d3:e8:5f:de:52:d4:b3:93:ce:f7:f8:1b:3f:d2:e7:
         e7:fa:85:2a:f2:84:98:50:35:d8:10:e5:6c:74:65:0f:61:7f:
         ac:c0:2e:43:55:b8:5a:8e:76:f4:29:2c:4c:af:91:b0:2a:fb:
         1c:75:29:fe:15:86:00:c8:e1:58:d1:af:ad:da:64:c0:b9:bc:
         34:b8:23:49:f6:7f:f0:8a:d3:0d:f4:96:ed:1f:6c:95:69:31:
         dd:c0:b7:6a:df:58:37:42:6f:e7:8f:08:c2:76:52:34:e7:4c:
         26:25:b0:a8:07:80:2f:38:90:97:0d:3a:40:8b:12:0a:1b:52:
         c7:6e:21:0d:f2:7d:e0:8e:c7:dc:f1:ca:f3:3a:61:98:b9:41:
         70:2b:61:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:21:32 2026 by rpki-client