Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
File:                     POdWa7WxnnAPSOJeB1BsLyIt84Q.mft (raw, json)
Hash identifier:          wmhEOwbZdVdmo4VnAM730Xaiyg5w953E10MYwPR11aI=
Subject key identifier:   28:6B:0F:98:39:1F:86:31:AF:5A:00:CB:C8:79:A1:30:EB:6D:26:A2
Authority key identifier: 3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
Certificate issuer:       /CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Certificate serial:       019E1E6C39E66B2CE254F5B0EE2DF243F85D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
Manifest number:          1162
Signing time:             Tue 12 May 2026 23:01:09 +0000
Manifest this update:     Tue 12 May 2026 23:01:09 +0000
Manifest next update:     Wed 13 May 2026 23:01:09 +0000
Files and hashes:         1: 59JIOcrvwaeo-sYFo7t-MHws0gw.roa (hash: 4M2J02zr2QMxD8HQmUQji1N30RyT0kcqU00uheMc840=)
                          2: IKe3Kuub0SpVVP2Gnq1T557gDgk.roa (hash: ci82OhcD+rqbU1y8ZlxW++hpafTX5Z7/Pm7iV79c95E=)
                          3: POdWa7WxnnAPSOJeB1BsLyIt84Q.crl (hash: 1p4LJQovrWz5ojWC2yE5hkNSoWJcpnU7RT2XcZXZBjc=)
                          4: g0yPFaUHY-D6DoLmNBezdgok6L4.roa (hash: tF2Yfxepm6QgVMGCXK7Mb8KH/TWmlDjJHDygGKLmNLo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:39:e6:6b:2c:e2:54:f5:b0:ee:2d:f2:43:f8:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ce7566bb5b19e700f48e25e07506c2f222df384
        Validity
            Not Before: May 12 23:01:09 2026 GMT
            Not After : May 13 23:01:09 2026 GMT
        Subject: CN=286b0f98391f8631af5a00cbc879a130eb6d26a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:13:33:25:d6:68:50:0a:15:b5:fe:ca:f8:fc:
                    b3:85:3c:58:f5:a1:61:fb:d1:db:2b:0c:77:de:a2:
                    b0:d4:99:62:0e:35:d1:89:6c:c3:75:a1:df:9c:10:
                    b7:61:3e:04:fe:ab:23:b6:85:c9:47:ef:54:26:58:
                    eb:88:91:82:0c:6e:6e:91:e9:4c:41:6d:67:96:e4:
                    76:bd:bb:02:26:73:c4:fa:85:08:40:7e:12:0b:47:
                    10:e2:45:2f:86:5a:63:6d:d6:7a:67:0e:0e:47:b7:
                    4c:90:ea:d6:22:2f:04:d1:ee:78:9a:ed:de:ab:37:
                    d8:61:8a:42:fe:40:42:1f:fd:b4:67:69:2d:17:1a:
                    66:79:3f:35:7d:93:d9:57:f5:86:9e:7d:57:8b:89:
                    ab:76:f0:f5:62:4a:2e:e3:29:5e:a0:69:a1:d5:7c:
                    bc:ae:8b:70:c5:ca:d0:d9:e2:cc:3a:2b:e0:1e:a9:
                    2b:f0:78:df:62:0d:01:25:dd:a4:27:9f:8f:07:3f:
                    6c:38:6f:83:5b:a3:f7:ed:ae:c2:2f:25:27:d8:39:
                    1e:cc:29:ca:6e:58:61:23:de:ae:ec:83:97:ad:13:
                    9c:a5:f2:67:a7:3e:89:f1:e1:87:0a:a9:f4:56:38:
                    c4:17:6b:c3:ef:2c:94:0c:26:0a:22:bd:27:fd:ed:
                    c5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:6B:0F:98:39:1F:86:31:AF:5A:00:CB:C8:79:A1:30:EB:6D:26:A2
            X509v3 Authority Key Identifier:
                keyid:3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:a5:65:f8:cc:cf:e5:90:18:ea:ca:d5:0f:ef:16:49:66:e3:
         3a:1d:bd:b4:75:7a:16:48:e1:3a:81:33:ee:93:f5:a5:24:60:
         2e:76:95:67:e0:33:19:35:ea:7f:c1:1d:e1:37:a5:f9:f5:e9:
         bb:6d:52:d1:2f:b4:6b:bf:aa:37:3f:7a:43:89:13:88:cb:25:
         10:0d:ae:de:ce:b5:c8:1e:f9:15:b9:10:37:f2:d4:7e:0d:9b:
         65:5d:14:f9:45:9d:27:83:d1:0c:c6:86:7d:72:17:ed:8c:e6:
         9a:ba:f2:91:27:70:36:ac:09:5d:0e:8f:a1:89:33:95:54:5f:
         ce:f3:e7:82:a3:ab:83:f7:dc:6b:58:19:ff:5a:6c:52:16:6d:
         aa:9e:dc:03:ad:93:7a:59:c5:8e:a1:aa:fc:77:4b:17:17:2f:
         fb:4d:cd:3e:c4:0d:09:5b:1b:f7:d4:e9:e7:08:85:9c:17:bc:
         d0:0a:88:a6:b8:09:eb:a8:ad:f8:32:32:9f:f3:0d:8f:27:d7:
         26:79:56:98:90:5c:53:80:d9:f8:45:a5:aa:e8:c7:c3:9d:0e:
         e9:3b:dc:81:4a:32:bd:84:34:86:b4:7f:7a:79:f8:27:50:b6:
         80:78:ad:60:b4:90:19:dd:94:67:6a:55:f3:ca:5e:09:3d:0f:
         e4:5a:8d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:41:05 2026 by rpki-client