Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
File:                     rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft (raw, json)
Hash identifier:          ASt0ufk+llf1JP5MFyoQTXWu6LPTSDYfwwuWbhB0SiY=
Subject key identifier:   F8:4A:B7:EA:03:84:81:DE:31:C1:86:DA:75:90:EC:9C:3E:C6:A1:23
Authority key identifier: AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7
Certificate issuer:       /CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7
Certificate serial:       019E1F7F9A72956EFFA1BDDF3F77D042F4C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 04:01:56 +0000
Manifest this update:     Wed 13 May 2026 04:01:56 +0000
Manifest next update:     Thu 14 May 2026 04:01:56 +0000
Files and hashes:         1: Z12VW2Oj1RQBcgh65gRC_a1KwqE.roa (hash: /a7senBqK2MBRmr1Qn/8yhUtEA4NdcKwqwCyWHEGON0=)
                          2: p4p1Pk1qfU_SW9Ve8k8RIi63JWc.roa (hash: Wra3ytDrU1p2ihMOSoZL7h8AIxob8hYx1NIw6YWVOAs=)
                          3: rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl (hash: ky0zUb7+m3F7mFUgDpv1R88zhirMFcyMhe+ajgCLOWQ=)
                          4: vKrnz1PqS6qb2zcTLwUYNYqlKd4.roa (hash: 1IT80fZU/ax5KvjXCy5/nxPjuHIDLBfsXUQ0YfHBn7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7f:9a:72:95:6e:ff:a1:bd:df:3f:77:d0:42:f4:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7
        Validity
            Not Before: May 13 04:01:56 2026 GMT
            Not After : May 14 04:01:56 2026 GMT
        Subject: CN=f84ab7ea038481de31c186da7590ec9c3ec6a123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:44:0c:e0:ad:9f:ed:7b:38:c9:4d:d5:6a:dd:
                    d0:d5:73:40:97:13:80:34:3f:d7:4b:2f:2f:31:75:
                    f8:ee:46:6d:3f:37:74:91:a4:41:9b:7b:0b:21:4f:
                    38:f2:49:e1:cc:ce:98:9f:6c:41:d2:4d:94:a3:de:
                    0f:fa:44:00:34:4e:6b:90:d4:47:67:ba:d0:24:75:
                    11:43:60:8f:00:2a:b7:58:d0:bb:fd:e0:b7:7f:dc:
                    e2:d7:84:85:26:74:d6:db:30:f5:69:c1:2e:1b:ee:
                    04:ff:e9:89:5b:a8:8f:5c:e0:b5:88:08:d0:82:db:
                    59:89:bb:7e:19:30:8d:18:a9:5b:a7:0e:1d:dd:4f:
                    31:fd:69:65:d7:98:87:f1:92:43:a5:6a:34:72:2a:
                    b1:4e:40:a6:13:d8:d1:48:81:e1:97:48:0b:02:40:
                    77:a1:7b:cb:cd:e9:82:f1:6a:b3:bd:c6:c5:18:3c:
                    34:88:d4:3c:e7:a4:c3:83:91:cc:6a:34:d7:a6:f0:
                    ab:3e:bb:f3:c9:29:61:ec:b7:e5:e3:33:8a:49:9f:
                    ae:49:fb:19:09:db:1d:c6:cd:a2:95:23:67:d2:eb:
                    67:4a:6a:5e:6c:de:4a:67:24:c4:1d:fb:b0:24:ee:
                    92:b4:4c:54:01:b8:9d:73:0a:56:e1:8d:6a:7d:56:
                    f9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:4A:B7:EA:03:84:81:DE:31:C1:86:DA:75:90:EC:9C:3E:C6:A1:23
            X509v3 Authority Key Identifier:
                keyid:AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:c7:30:44:e6:97:ff:56:d9:8e:27:9d:06:60:5a:e4:90:4c:
         56:90:0d:22:a8:ab:b4:a6:c9:0e:5d:26:d9:6c:b0:54:38:66:
         30:80:50:71:f5:a4:7a:ce:ee:b8:0a:fb:2b:1b:bf:95:c4:aa:
         90:f4:fe:f1:21:6b:58:bc:33:17:91:41:2e:c8:c8:05:27:dd:
         15:4e:d7:66:86:e9:53:13:93:f3:be:dd:79:41:c4:86:85:27:
         c8:e1:46:0a:7f:76:31:02:9d:fe:09:5e:a9:8b:55:94:e9:c4:
         10:7a:6e:89:00:df:a9:f0:dd:b6:67:1d:38:9c:5b:b2:fe:15:
         e1:35:19:4c:f9:0a:89:53:56:12:ca:56:12:20:48:97:27:bf:
         e5:67:b3:de:bc:37:ff:f4:8f:be:0a:a4:d3:35:d9:60:d8:52:
         ce:79:ea:bb:a6:5e:df:89:15:18:2a:28:ea:a7:eb:51:65:e6:
         53:40:44:08:f8:07:0d:4a:e0:c8:bb:f2:a2:ed:7b:30:a3:ee:
         6d:73:40:a9:05:e7:7c:84:38:b0:bd:bb:6b:1b:2f:ef:a4:7c:
         dc:ad:67:99:5a:67:87:50:ed:eb:6c:69:10:01:51:f8:50:9e:
         6b:22:8a:a7:93:41:8c:4c:c7:11:d1:df:64:72:5b:bf:14:6a:
         da:92:41:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:58:43 2026 by rpki-client