Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft
File:                     t5msmJxEsuHNq8JY6WypPKrUvWQ.mft (raw, json)
Hash identifier:          X4+s9Aae/tvJq1VOAFEmJZIQNFO2vTtWIr9fd3qRhnw=
Subject key identifier:   62:62:BC:4D:D1:09:70:39:05:7B:83:16:8A:B2:09:FB:B7:C3:59:42
Authority key identifier: B7:99:AC:98:9C:44:B2:E1:CD:AB:C2:58:E9:6C:A9:3C:AA:D4:BD:64
Certificate issuer:       /CN=b799ac989c44b2e1cdabc258e96ca93caad4bd64
Certificate serial:       019E205A3C1BB1820323F0179C8DF6349E3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft
Manifest number:          0CAA
Signing time:             Wed 13 May 2026 08:00:44 +0000
Manifest this update:     Wed 13 May 2026 08:00:44 +0000
Manifest next update:     Thu 14 May 2026 08:00:44 +0000
Files and hashes:         1: 05V7aSJJ1574Uj3BMJbyX1CU_Ks.roa (hash: W1ncaFZ2XrRWuQQ6O9v0I+g6Zq1amGJBP+gX3AlUnTA=)
                          2: qBJbZnYV1KV7wH9ev9pGNSEQh6E.roa (hash: VGKLyWCJAQaeOmHD9SkgJRFIt3cHdxbsxgp1SXLcvmY=)
                          3: t5msmJxEsuHNq8JY6WypPKrUvWQ.crl (hash: WT8vfgs6Zm/PKQqxji8e9BhGR2k6qkCVu67lZOiIZRs=)
                          4: wr64Qkyhhg94kKtHi11AmFA9j-0.roa (hash: Mf2dT8r50MOCzgq5UCOMg4z4yEZJfDirWvZn2rKZ9bM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:5a:3c:1b:b1:82:03:23:f0:17:9c:8d:f6:34:9e:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b799ac989c44b2e1cdabc258e96ca93caad4bd64
        Validity
            Not Before: May 13 08:00:44 2026 GMT
            Not After : May 14 08:00:44 2026 GMT
        Subject: CN=6262bc4dd1097039057b83168ab209fbb7c35942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4e:a2:a4:dd:40:2a:ad:cc:fb:4e:de:8e:6c:
                    6e:a2:f7:cb:eb:a7:5b:6b:c7:f2:fc:97:63:36:a6:
                    54:32:e9:2c:73:ee:24:e1:b3:85:72:8a:4a:e6:bc:
                    9d:2a:e9:e9:bc:9f:5e:26:c1:a9:9d:3f:1b:54:36:
                    30:2e:40:12:3b:8f:8b:1a:a2:88:c5:e8:75:77:7c:
                    37:d1:65:b9:be:2e:6f:0b:5d:67:1b:6e:ef:37:cb:
                    a6:24:09:ce:c8:4f:0d:03:14:66:82:40:c6:ed:5a:
                    cc:5d:97:86:cc:50:ef:ac:32:af:79:08:24:d7:37:
                    d1:53:e7:71:61:c1:32:86:fc:ec:a1:8f:60:87:45:
                    91:38:0a:d4:a7:cd:e8:b6:de:af:78:2f:68:e1:3d:
                    ca:a8:37:8d:fa:b7:3b:b7:db:6b:8b:68:99:45:37:
                    d6:fa:f8:71:52:43:8a:80:18:60:67:eb:d7:79:98:
                    76:ea:3b:d6:f4:3f:95:18:9f:25:08:8b:29:79:9e:
                    81:1d:ef:fe:e9:fb:4e:26:39:aa:7a:c7:09:15:3a:
                    d0:9f:67:e1:04:bb:ec:d9:7b:42:ad:51:40:5f:3c:
                    e0:f0:c1:8c:36:00:ae:5e:96:e4:90:25:18:00:ef:
                    cb:d8:66:02:52:df:48:0a:93:02:c0:75:ec:f2:b9:
                    de:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:62:BC:4D:D1:09:70:39:05:7B:83:16:8A:B2:09:FB:B7:C3:59:42
            X509v3 Authority Key Identifier:
                keyid:B7:99:AC:98:9C:44:B2:E1:CD:AB:C2:58:E9:6C:A9:3C:AA:D4:BD:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:2f:9f:ec:df:eb:33:73:90:46:04:38:ae:f7:8e:dc:ce:db:
         5f:61:66:53:5b:80:f8:62:f7:1c:cb:85:7c:b5:53:84:92:20:
         24:70:fd:b0:a6:80:f6:70:62:01:e4:ec:64:cc:78:4a:c0:cd:
         04:87:fc:e7:66:97:ee:a2:34:97:01:fa:50:36:7e:86:86:56:
         0a:39:1e:17:80:cf:49:b0:e6:d5:e7:3d:36:cd:bd:b6:f1:42:
         92:07:94:f5:85:db:8a:1a:60:2d:82:a8:85:36:7d:3a:2b:e3:
         9b:d6:52:1b:74:df:ed:32:49:87:9f:4c:dc:90:3a:30:c2:dc:
         6e:0b:df:35:cf:94:48:8c:ae:91:0a:dc:31:ed:09:ab:e8:f0:
         5d:33:e0:f6:eb:1d:f9:2b:f4:37:cb:9e:15:6e:41:bc:ac:48:
         f2:dd:a4:34:81:85:a9:0e:de:c0:33:c1:50:cd:86:2d:6a:cd:
         08:d4:6d:9b:0c:e8:d3:84:26:18:27:63:63:a8:e7:b6:5d:ea:
         ee:8d:20:75:ef:97:c4:84:0a:12:b4:5d:fb:b6:1c:fb:5c:89:
         89:77:9f:d6:19:c9:03:b0:d9:8e:3f:78:3a:f4:e5:b3:4f:80:
         cb:ca:1e:2c:a8:d1:93:c6:99:ef:d1:8a:e3:45:c6:27:59:7f:
         98:08:0a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:39:02 2026 by rpki-client