Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
File:                     fZ4KWRzFKRTMcA44de11qR7JjCg.mft (raw, json)
Hash identifier:          caIUytAKee6LTTzdZTWqY9hbaWePlrJA96J8xcbwg7w=
Subject key identifier:   12:A5:A2:AE:2E:1C:73:E9:4D:1F:CB:ED:25:CA:B1:14:9B:21:F0:7A
Authority key identifier: 7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28
Certificate issuer:       /CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28
Certificate serial:       019E1DFEAA6B50CEDC10FBCAC07F85D2BAEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
Manifest number:          190D
Signing time:             Tue 12 May 2026 21:01:29 +0000
Manifest this update:     Tue 12 May 2026 21:01:29 +0000
Manifest next update:     Wed 13 May 2026 21:01:29 +0000
Files and hashes:         1: WVSje2-V9hlvx2DHrLYafa4VndI.asa (hash: HgSXxrRDl778gx/DZsMfwInNr0fsVx40+FI5RHCVI9I=)
                          2: fZ4KWRzFKRTMcA44de11qR7JjCg.crl (hash: LMQPRYYFbgL76otKcmWgLlcensO5GUGqJ9NhWVUNUwI=)
                          3: yaf29NVIhqCdkvttoww7qyjFE_A.roa (hash: irGoc61alZ1PWSj6VyeZR9D2OQ0SUu0n7A530YUuqMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:aa:6b:50:ce:dc:10:fb:ca:c0:7f:85:d2:ba:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28
        Validity
            Not Before: May 12 21:01:29 2026 GMT
            Not After : May 13 21:01:29 2026 GMT
        Subject: CN=12a5a2ae2e1c73e94d1fcbed25cab1149b21f07a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2a:a4:e1:84:52:6f:31:24:a7:41:77:86:13:
                    b2:2d:93:76:33:9c:4f:bf:51:58:c1:2d:e7:b0:d8:
                    69:e0:de:b4:bb:46:57:4e:bd:b7:ad:fd:3e:2c:41:
                    2c:be:12:c5:95:9e:8e:8d:25:f3:1e:09:c8:6a:1d:
                    cf:51:1b:3c:f3:09:a4:22:6e:f2:d5:85:13:7a:28:
                    cc:40:21:f2:f8:35:e9:7b:e4:46:b8:0a:32:f6:9e:
                    75:c3:90:06:7e:ff:6a:e4:d2:3f:d7:be:67:ce:15:
                    3a:51:ec:79:f9:b6:f2:a7:d2:08:0d:3f:40:f7:8f:
                    94:70:a8:54:47:c1:e0:b3:90:ba:1e:15:0d:f4:3b:
                    96:e5:3b:98:5d:bd:20:69:92:88:0a:3c:26:84:5a:
                    42:3c:60:69:a3:6e:c3:58:b0:00:9d:5b:62:a7:55:
                    35:ea:dc:06:37:6a:a0:43:20:c9:11:be:09:83:97:
                    b9:9c:d9:e3:8a:54:4c:2c:37:c9:b5:6e:58:a0:9f:
                    82:0f:83:4f:68:a2:c3:ea:b4:ff:b5:37:f7:13:db:
                    ec:0a:b9:bc:6a:76:44:be:1f:ea:79:fc:04:f7:b6:
                    a5:65:8b:70:8f:c1:cd:f2:f8:c3:25:25:94:a1:e3:
                    8d:57:b9:bb:d2:14:95:b2:d0:31:2f:af:ac:a2:de:
                    fc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A5:A2:AE:2E:1C:73:E9:4D:1F:CB:ED:25:CA:B1:14:9B:21:F0:7A
            X509v3 Authority Key Identifier:
                keyid:7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:81:70:27:08:3b:a6:bf:c9:13:48:98:28:63:2b:3b:fd:ae:
         2e:8f:9b:42:74:aa:5c:68:b3:9b:a8:88:28:cb:ed:3d:fc:7a:
         1e:af:e8:c3:03:4a:55:fc:08:aa:b2:a5:4d:ed:c9:1d:55:ff:
         33:47:3c:6d:f9:60:38:1a:4a:89:51:81:fa:e5:d4:b0:c3:8f:
         26:dd:0c:01:09:9c:7d:c5:c3:d9:3f:cb:82:c3:36:33:21:ec:
         6d:17:b9:1f:f4:fe:81:2a:d9:99:41:89:0d:36:0a:15:b3:2d:
         b5:32:9e:a9:32:af:05:f7:ca:1c:1e:71:96:76:bd:96:48:f3:
         89:4c:30:f7:f0:53:58:34:6f:cd:08:bb:5b:28:cc:6d:82:78:
         8a:6d:5e:bd:75:a4:dc:2f:b4:9c:ca:0c:56:c9:18:3a:7e:ac:
         f7:c8:74:2d:2a:dc:40:54:3b:0a:d2:73:31:6f:1a:a1:26:38:
         ed:35:72:02:00:dc:f7:c3:c1:8d:e4:bd:b4:a0:05:6d:e2:b2:
         21:51:1c:ef:0f:16:77:ad:93:51:ac:75:38:12:1c:72:c3:39:
         d6:06:ea:3e:b7:f1:f3:0b:5b:c8:10:84:02:a1:fe:b5:93:a9:
         90:e6:8d:c9:11:c2:ab:47:37:97:15:28:12:25:f9:f6:3e:b8:
         09:2c:e9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:41:58 2026 by rpki-client