Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft
File:                     tPtrTEeRZokREVxp4mlk89XsovQ.mft (raw, json)
Hash identifier:          u6oyD4KY9Kj5uTCLDhP2YwXYLAqrEXwv8iGtnANX9W8=
Subject key identifier:   1C:F1:C3:63:53:06:32:67:4D:FE:CB:62:40:98:54:B4:E1:FA:BE:A0
Authority key identifier: B4:FB:6B:4C:47:91:66:89:11:11:5C:69:E2:69:64:F3:D5:EC:A2:F4
Certificate issuer:       /CN=b4fb6b4c4791668911115c69e26964f3d5eca2f4
Certificate serial:       019E1E6C626729B826B329B59E0BA1D55A6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft
Manifest number:          0661
Signing time:             Tue 12 May 2026 23:01:19 +0000
Manifest this update:     Tue 12 May 2026 23:01:19 +0000
Manifest next update:     Wed 13 May 2026 23:01:19 +0000
Files and hashes:         1: Cu5RcCDiT9wnSYDAXin97C5_ar4.roa (hash: mZ2GDzOYBdCLGqwEYWo/X2TbRkRCTGHd2uJn3YPq5Hs=)
                          2: tPtrTEeRZokREVxp4mlk89XsovQ.crl (hash: 1Go0p38AaztzExPtYUWu0Fp3KjxX+IfGH4s4kJRNCTM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:62:67:29:b8:26:b3:29:b5:9e:0b:a1:d5:5a:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4fb6b4c4791668911115c69e26964f3d5eca2f4
        Validity
            Not Before: May 12 23:01:19 2026 GMT
            Not After : May 13 23:01:19 2026 GMT
        Subject: CN=1cf1c363530632674dfecb62409854b4e1fabea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4f:d0:aa:1b:9a:09:cd:25:5b:f0:de:80:72:
                    99:3f:c5:2d:a6:69:32:65:3b:5a:10:73:5e:e8:12:
                    71:26:ad:38:a4:06:3c:a8:59:70:1e:16:e1:cc:ee:
                    52:cf:65:5e:ab:f4:c8:49:3a:a0:a0:6a:c1:a3:df:
                    2e:a0:80:38:0c:b1:80:44:54:a9:dd:a5:b0:a3:50:
                    fb:9f:8d:db:2e:ae:c1:93:9d:e5:62:08:9a:8d:35:
                    21:a6:a7:8c:f2:9d:2d:0d:a5:44:95:aa:a3:5c:c3:
                    ac:c1:be:35:1f:b4:a4:e6:9f:12:fe:15:a8:4a:67:
                    9e:ee:26:8d:44:8a:a4:cb:d7:69:ab:46:ce:99:ff:
                    ae:4a:59:0f:26:af:87:2c:0d:ff:18:44:be:ec:92:
                    02:18:f7:d9:86:0d:88:c0:87:a8:b9:7f:ac:3d:14:
                    35:ad:34:40:47:f9:00:2d:b3:37:17:b5:8e:bd:4e:
                    1f:43:b9:c6:a2:da:4b:dc:5c:42:d5:c7:c8:64:b1:
                    28:bf:ef:58:93:a2:2f:69:b2:db:1b:39:46:30:1f:
                    5c:21:97:3a:f7:3d:3b:2f:1b:8b:5c:d9:1d:06:55:
                    54:a4:50:9e:5e:a4:07:86:08:3e:99:0f:ea:f4:a4:
                    81:f0:cd:10:b8:2b:c6:c0:6c:35:72:8c:e0:21:9a:
                    9e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F1:C3:63:53:06:32:67:4D:FE:CB:62:40:98:54:B4:E1:FA:BE:A0
            X509v3 Authority Key Identifier:
                keyid:B4:FB:6B:4C:47:91:66:89:11:11:5C:69:E2:69:64:F3:D5:EC:A2:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:9a:2c:7d:e1:36:cb:3a:b1:6b:35:d2:ee:d1:0e:3c:44:c6:
         fd:72:b7:31:71:0f:7a:a5:68:d0:30:b4:35:23:a8:59:74:86:
         03:e1:be:8a:22:2f:88:0a:d2:00:0c:97:ab:14:85:f6:74:54:
         66:6a:c3:49:5e:bd:56:b1:50:0f:92:40:d5:17:e4:75:97:05:
         fe:a7:f9:6b:fc:76:6b:02:12:7c:aa:96:09:d6:b1:ac:bd:52:
         d6:57:63:8b:d3:ec:e1:76:af:f7:9b:f8:3c:18:4f:55:32:84:
         a5:0a:38:5d:61:50:1b:71:d2:d1:f4:2b:1a:a8:a2:fd:e7:c0:
         64:c3:69:cc:5a:cc:83:e3:9e:6c:c5:9f:41:f3:3c:50:e4:0f:
         82:fe:dc:d2:f7:50:a6:9b:89:cc:14:05:55:fe:26:8d:8e:c5:
         01:b0:5d:fe:d5:07:6c:3f:77:38:2a:d6:65:77:22:98:48:ef:
         1d:49:46:3d:3c:51:ff:0b:c8:29:84:04:97:db:25:70:a1:ce:
         d5:a1:9c:e8:26:1e:e9:15:27:28:9a:a4:b5:5c:03:2c:09:35:
         d4:0a:6b:b3:7b:d7:17:16:9b:44:13:bb:68:34:23:04:3e:0e:
         d9:93:69:ae:29:43:12:4d:4e:13:91:3c:38:fb:f8:51:06:5a:
         a4:30:f5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:44:46 2026 by rpki-client