Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
File:                     nWuXdMlIdsmDId4yAbEbdaE1jRk.mft (raw, json)
Hash identifier:          imyLrQf9EDvopoRKolQd7sq7Dpin9usqljILsTITkug=
Subject key identifier:   E8:05:C2:40:58:66:A9:A6:95:DC:C2:B9:F2:B5:7E:7B:3C:F2:11:31
Authority key identifier: 9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19
Certificate issuer:       /CN=9d6b9774c94876c98321de3201b11b75a1358d19
Certificate serial:       019E1ED9F481C382ABEAE2CAD63A14839014
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
Manifest number:          1437
Signing time:             Wed 13 May 2026 01:01:00 +0000
Manifest this update:     Wed 13 May 2026 01:01:00 +0000
Manifest next update:     Thu 14 May 2026 01:01:00 +0000
Files and hashes:         1: 62kCfgONuAvqW1NUbM9Iz08pfMI.roa (hash: fIRjeYSveZsnghNhWxl6roWSFefdl9H5Q1zHdhCDvwE=)
                          2: 6HVpZjDJK-JDd4JLU8A4rcuFHLs.roa (hash: kIuNG7jafmgHvYNR9Juw4bgFLOduPI1o7DgjWmXFliU=)
                          3: 9KvmlPKsY8w8aZTFNLv0zg38axY.roa (hash: E6UjIGV/KuRgFN4UQnHUeYYcpZAFdXo3JairE/1g8kE=)
                          4: CjfmvJ0XRpbO26T6Bc03a8Ne2C0.roa (hash: hbMTywJkxAoG5vlp7Fd9e3h3SO2hZD0EHWgX/IJxhMw=)
                          5: ELUa2vRm_h_Z93KcCk-HcWekDRU.roa (hash: ZBi1wRd/swMpVPnmEQ6bKzd+xCPdQKaLoo/Wn1BWpb8=)
                          6: J5ItodHrRCheXviqPMZtDDHgoRU.roa (hash: fl0j9Uu7JS7V1n5kkbcRFj/Trr5iL8zrAWPpKhN3sGg=)
                          7: nWuXdMlIdsmDId4yAbEbdaE1jRk.crl (hash: NifqJH07Y5hVsR9mZPrZyBzTMaKmVWTwooOYTG6RjIU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:f4:81:c3:82:ab:ea:e2:ca:d6:3a:14:83:90:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d6b9774c94876c98321de3201b11b75a1358d19
        Validity
            Not Before: May 13 01:01:00 2026 GMT
            Not After : May 14 01:01:00 2026 GMT
        Subject: CN=e805c2405866a9a695dcc2b9f2b57e7b3cf21131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e4:d1:e7:0c:60:da:b0:10:1d:0d:b2:0a:f7:
                    04:45:e7:02:75:34:49:f2:f1:49:da:66:6a:ba:48:
                    d3:f7:23:6b:0f:39:17:c9:84:c7:70:48:92:95:10:
                    77:49:0c:ad:cd:3b:05:20:c2:a1:bf:92:41:45:04:
                    f5:27:c8:ad:31:f1:9f:30:5d:ba:e0:da:de:19:05:
                    ee:69:16:41:48:67:dc:47:1c:07:ca:c7:e2:ab:22:
                    0b:e8:86:8e:b0:a9:5f:47:de:ab:c2:10:84:01:52:
                    e0:05:a2:86:5f:d1:e9:93:3d:7c:e2:c1:5c:fe:ce:
                    ed:1a:15:e6:ac:c6:83:1a:34:cf:e2:a3:3b:22:3f:
                    46:2b:28:e0:4a:6f:82:38:36:1d:9c:4e:f4:6f:3e:
                    49:07:9f:0f:fd:9e:90:92:b6:a2:26:c5:dc:18:d4:
                    e0:7e:4b:c7:3f:eb:17:a0:7c:6e:91:aa:f3:6c:39:
                    3a:f7:16:19:5e:ca:39:1a:c5:05:88:4d:0b:4a:19:
                    4e:17:99:00:7a:0b:68:d7:70:ad:ca:3b:2e:9d:f6:
                    fe:71:ec:63:63:39:25:4b:51:58:d7:0b:ae:54:c7:
                    60:19:3b:7d:8a:c3:4b:41:4b:d1:25:1a:ea:3d:3f:
                    a3:4e:62:ee:48:aa:ef:fc:d5:c9:c0:4b:5c:4a:78:
                    fa:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:05:C2:40:58:66:A9:A6:95:DC:C2:B9:F2:B5:7E:7B:3C:F2:11:31
            X509v3 Authority Key Identifier:
                keyid:9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:ae:62:87:b4:48:9f:54:02:05:5d:d1:2c:b7:43:99:85:50:
         0c:03:ce:dd:bf:e6:c7:9b:d7:57:ba:55:29:a2:a2:f1:58:d7:
         4f:cc:93:83:39:26:63:7e:74:16:6b:b4:05:99:12:51:97:33:
         47:57:c2:67:77:7e:d4:c8:dc:45:91:c6:d6:57:0b:61:10:1f:
         22:25:5a:0e:7d:12:02:09:83:b1:6b:cf:f6:b9:16:b6:c3:da:
         5d:21:5f:49:bc:21:c5:ef:43:29:79:51:7e:8d:b6:b0:7e:9e:
         43:0c:52:3d:63:4a:8f:c5:63:4d:39:d2:d4:12:d7:bf:4f:e2:
         99:8c:3f:93:15:9a:8b:45:6b:8d:72:b0:a3:68:83:41:bb:d0:
         0c:8d:aa:45:80:99:3e:5b:7c:8e:cb:43:e5:c7:1e:ea:15:e9:
         42:58:de:98:a8:b5:b1:c0:b1:1f:62:83:f1:25:e8:43:5c:98:
         38:56:0f:d4:ce:48:dc:c2:94:62:8c:a0:55:9d:8c:b1:0c:86:
         36:49:22:7d:9c:33:b9:b9:dc:07:f6:ed:18:10:90:eb:ad:ea:
         c9:2c:b9:92:7a:a6:90:04:41:d5:09:25:4f:c8:a6:81:3a:91:
         c3:9f:4c:5e:d0:f2:7e:ce:8c:10:13:e8:67:7a:0a:de:5d:11:
         86:54:dc:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:19:44 2026 by rpki-client