Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
File:                     TxUpALDTI9NtlFEKsLAck_RRfIk.mft (raw, json)
Hash identifier:          6lATGxAlDc7vLdoWcdAmoBJ3O8t4bSgPZObjUm75DZs=
Subject key identifier:   E2:CA:30:79:9E:D6:E1:3A:56:4F:20:D6:70:DC:AC:81:72:01:34:53
Authority key identifier: 4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89
Certificate issuer:       /CN=4f152900b0d323d36d94510ab0b01c93f4517c89
Certificate serial:       019E1D5933B607B8099883308B6C4369EFDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
Manifest number:          1906
Signing time:             Tue 12 May 2026 18:00:45 +0000
Manifest this update:     Tue 12 May 2026 18:00:45 +0000
Manifest next update:     Wed 13 May 2026 18:00:45 +0000
Files and hashes:         1: 3bsIQIUMB3wEM7UpYsUhEhh9TDM.roa (hash: JUK0LWzP12KIpgwQRI9/y3rNyJiup+Z+mcnNsCbamT4=)
                          2: TxUpALDTI9NtlFEKsLAck_RRfIk.crl (hash: f+Ehns4tTV0pY8hp0Q+qSrrscL667pwpeFEa9vL+FrE=)
                          3: UBcqPXEQnKrJnYhEGTvOR6j6EUo.roa (hash: wZthjYgNfjrS6L37NpRR1qXSrJcuxPFMsxRLKIg6JX8=)
                          4: Z0hS5fWo-y_SX9oUly3wZoFqg80.roa (hash: QItwS85WIhN170At5hmC7mNxoC4+AyHXJZmT2uZ7v2I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:33:b6:07:b8:09:98:83:30:8b:6c:43:69:ef:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f152900b0d323d36d94510ab0b01c93f4517c89
        Validity
            Not Before: May 12 18:00:45 2026 GMT
            Not After : May 13 18:00:45 2026 GMT
        Subject: CN=e2ca30799ed6e13a564f20d670dcac8172013453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f2:32:64:cb:2a:31:42:c4:ee:c2:c8:01:61:
                    de:9d:32:2d:a5:64:55:c7:f8:3d:5e:fa:56:02:37:
                    9a:e3:7e:61:98:4d:43:62:91:4c:75:07:1d:a8:30:
                    95:f2:55:ba:39:b8:da:51:92:9e:ee:c6:4d:f1:7b:
                    3f:53:bc:e5:a4:b4:3b:f1:87:91:2b:6d:f7:a7:2f:
                    2e:03:d0:0f:13:f3:86:8b:5f:e1:84:1a:93:31:4f:
                    04:74:47:01:07:cc:7c:02:53:a8:49:04:c4:e1:31:
                    57:76:a9:0c:0e:34:95:0d:b6:2b:80:df:db:6e:aa:
                    8f:88:f6:9c:7a:21:0d:6e:e2:3c:b2:91:71:43:c5:
                    83:58:46:f2:1b:12:d8:0e:04:83:2d:88:90:9b:5e:
                    16:83:94:2d:34:4f:d8:1b:3f:fa:ce:34:3e:76:51:
                    fb:19:5c:a3:1e:ed:88:02:6d:df:49:88:a4:4a:8b:
                    f8:8d:84:ee:3e:f2:36:82:f5:26:a8:70:59:8d:d7:
                    be:55:0e:51:aa:14:57:49:09:e8:fe:88:98:de:f4:
                    8d:22:91:cf:02:16:7e:3c:6e:35:67:f6:59:18:16:
                    98:93:79:36:a0:08:9a:9d:46:f0:1e:a1:59:f7:74:
                    0b:49:b0:2c:d5:40:e8:a6:5f:d0:ae:e7:c0:99:42:
                    42:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:CA:30:79:9E:D6:E1:3A:56:4F:20:D6:70:DC:AC:81:72:01:34:53
            X509v3 Authority Key Identifier:
                keyid:4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:ab:f5:48:bc:d3:d7:c9:46:f0:06:01:75:f8:90:d2:3f:ae:
         8b:88:04:88:6a:13:f6:b3:8d:0b:01:fd:ed:77:64:f7:1d:9a:
         5a:a0:c3:97:5c:69:1e:6b:03:ad:68:d7:0d:df:51:53:8a:c8:
         87:37:ef:b2:f0:1c:69:44:2e:5a:c6:a1:60:ca:7e:55:2c:64:
         a3:82:d7:9c:b8:37:e8:f2:96:22:43:33:49:64:7b:8e:ff:f7:
         c6:4e:16:be:e7:f3:8e:f5:ff:13:3a:b9:b4:a6:65:bf:dd:64:
         f8:1e:ec:25:9a:de:69:3c:8a:f3:c5:1e:cc:30:cc:fe:01:43:
         4f:7c:ee:44:ef:b3:5d:e1:4c:8f:df:3c:e3:ed:86:cc:4c:aa:
         8f:cc:b9:75:1f:cc:c0:03:ac:5a:78:32:e8:cb:d4:1d:19:0d:
         4a:4c:8a:c6:05:9e:32:38:f0:1f:0e:44:58:46:7b:66:e6:d6:
         1e:22:85:fb:1d:c2:70:0c:54:ea:59:9d:3d:0e:4f:27:ca:60:
         11:13:18:be:84:42:a6:1b:30:4b:1d:0b:c6:ac:98:1f:96:6a:
         e7:bd:34:a0:1e:eb:88:fa:b8:98:c7:9a:c7:74:cb:25:fe:ad:
         01:2b:29:f6:18:d9:56:3d:92:aa:47:bb:6a:5b:9d:09:ab:87:
         4d:59:55:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:32:47 2026 by rpki-client