Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
File:                     AxRRSJegqj_79FtIYGEkYn8V5QY.mft (raw, json)
Hash identifier:          h6IT1cccbmDwq/bl8M/H3OapP4wQZ7rF5wiptYX5ydI=
Subject key identifier:   8D:37:4E:93:F1:98:54:89:53:07:57:2D:25:68:F9:18:85:FF:69:7E
Authority key identifier: 03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06
Certificate issuer:       /CN=0314514897a0aa3ffbf45b48606124627f15e506
Certificate serial:       019E1EA3BD9B1E52A1D539EF0B4997223BB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
Manifest number:          1288
Signing time:             Wed 13 May 2026 00:01:47 +0000
Manifest this update:     Wed 13 May 2026 00:01:47 +0000
Manifest next update:     Thu 14 May 2026 00:01:47 +0000
Files and hashes:         1: 1zy72V2wriaSR0HKRS6NKVr6ReM.roa (hash: 2UDDjiSozqkjCpyeYUYKzzS2k3igXU0suU9TIqRl8BM=)
                          2: 2A0tOUxx1jRAdQbbBEQYCyO6q2A.roa (hash: /b2wneTZen/fW0tEw9EyQoVhwLVdm5eunsXsaX5W9vg=)
                          3: AxRRSJegqj_79FtIYGEkYn8V5QY.crl (hash: RXDUldTUWYRXdQ9d6KW7czxWfLZ7luB6cGYjaYZ83d8=)
                          4: wC7Btg2M06QDjiihU8mKSzWp5h8.roa (hash: kuu4Nks2Rjh8eFlTc82CmwEI6yyNJcnC/Z9zLfsyT1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:bd:9b:1e:52:a1:d5:39:ef:0b:49:97:22:3b:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0314514897a0aa3ffbf45b48606124627f15e506
        Validity
            Not Before: May 13 00:01:47 2026 GMT
            Not After : May 14 00:01:47 2026 GMT
        Subject: CN=8d374e93f19854895307572d2568f91885ff697e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a2:b8:52:59:12:2e:03:fe:9f:9d:78:5e:38:
                    c5:4a:c5:ef:74:a7:8e:d3:bf:91:a3:f3:92:e5:8e:
                    39:0e:3f:20:d7:05:1b:8d:64:1c:ea:fe:f1:ec:40:
                    71:65:77:7b:a6:62:23:e7:16:c8:17:25:bc:6a:e1:
                    1f:bf:4c:61:92:86:48:26:92:8d:fc:44:60:6a:68:
                    b7:5e:96:c5:1f:43:0d:31:ec:9a:3d:9c:a1:c0:51:
                    20:6c:df:74:94:29:d7:cb:94:22:3e:d2:60:10:6f:
                    6d:23:c1:5f:02:b4:4d:df:52:41:0e:d9:96:5a:84:
                    15:27:e1:18:b6:09:00:33:35:b7:a8:90:73:78:b1:
                    6e:85:81:a9:e6:ac:1f:81:65:0e:a1:a5:2d:bb:79:
                    db:7f:a8:68:80:7f:33:f3:bf:2b:2d:be:56:47:a2:
                    a6:7b:b4:71:17:67:0f:1e:83:08:3c:3d:7e:99:cf:
                    0c:9f:eb:92:39:05:4c:e4:a2:eb:6c:90:20:b5:21:
                    29:35:9c:74:53:fd:4b:0a:db:e2:90:45:74:e5:97:
                    1c:77:8d:c7:0d:6e:a5:ce:3f:04:1a:6e:42:34:ad:
                    22:f9:e8:28:56:d3:b8:0d:be:82:c5:fe:4b:b8:f7:
                    33:b9:c2:1c:d6:46:87:d2:33:59:0f:cd:41:e5:80:
                    70:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:37:4E:93:F1:98:54:89:53:07:57:2D:25:68:F9:18:85:FF:69:7E
            X509v3 Authority Key Identifier:
                keyid:03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:2c:ba:ae:f9:e4:59:7f:db:bb:f9:c0:0b:9a:e0:30:da:25:
         0a:80:1b:0d:44:19:41:bf:8c:6d:9c:03:3a:ee:1e:c0:9a:b7:
         10:dc:6c:92:bc:30:9f:e3:e9:ce:d6:30:7c:d6:77:7e:d1:b5:
         51:0a:8f:36:bf:a2:87:65:b4:2d:b3:ee:40:1d:ba:dd:1b:45:
         90:96:dd:e5:48:2d:07:02:8f:92:83:b3:25:75:04:57:34:f2:
         6f:5d:1f:6c:48:d3:eb:d9:7c:eb:e8:e5:b8:dd:09:07:5d:1d:
         91:01:81:4c:3a:d3:d2:6a:9b:8f:b0:4e:3f:ea:24:e4:68:90:
         8e:67:9a:1e:b5:3e:21:1c:b1:2b:54:c7:9a:5b:fd:7e:22:eb:
         b9:81:97:a4:2a:24:9c:4b:e6:bf:52:ba:49:73:23:2a:dd:a9:
         5a:10:3d:18:42:05:c2:f4:ab:33:30:be:a7:c4:4c:67:8a:99:
         1f:19:2c:65:1a:10:83:7d:dd:4a:67:3c:0a:4c:f7:35:ec:5d:
         7a:b2:1a:d4:a7:11:53:b8:f9:0b:75:2e:b4:2e:da:af:aa:41:
         a9:a7:3d:97:6b:58:62:83:9b:e5:82:ee:38:6f:2a:5d:7e:24:
         84:fb:60:82:a3:8b:b3:68:72:e2:fa:fc:b3:44:73:db:93:4f:
         a7:77:99:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:24:02 2026 by rpki-client