Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
File:                     fsZaHc-CJefxC-IN3eHiFugAtnw.mft (raw, json)
Hash identifier:          dOhFGlIAwa9wV1r6roMoHJUAVqHvyaPofTmiV8HN610=
Subject key identifier:   AA:6E:54:29:87:CA:B8:CA:5E:4E:E2:B7:DA:A2:6F:76:A8:3E:F2:E6
Authority key identifier: 7E:C6:5A:1D:CF:82:25:E7:F1:0B:E2:0D:DD:E1:E2:16:E8:00:B6:7C
Certificate issuer:       /CN=7ec65a1dcf8225e7f10be20ddde1e216e800b67c
Certificate serial:       019E1E35604F37E5D29862077480419319A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
Manifest number:          1933
Signing time:             Tue 12 May 2026 22:01:14 +0000
Manifest this update:     Tue 12 May 2026 22:01:14 +0000
Manifest next update:     Wed 13 May 2026 22:01:14 +0000
Files and hashes:         1: Tu7_wN-hoL639ZmM1mROaye1HF0.roa (hash: +MWjx7lsKZkFpm2EQeqb1ROcTb3PacJ29qvo2SdqMKU=)
                          2: cA7qo8b7Nox5Eg3ETDI0GHB8bQo.roa (hash: hqs/XnPjGsbh3NQlfcv5MT/Lsf4omMXxdpDxcmlIJnY=)
                          3: fsZaHc-CJefxC-IN3eHiFugAtnw.crl (hash: b5HdSVO8bQOPjg/oYtHl+3VzIp+tR53GmVhyl0KgEjI=)
                          4: gPVJ3frT2a_JfPP9EGZIsKgy1a0.roa (hash: QLrbnotwwaeckUxd194yTQbnltlzcloRQasYTwXYSI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:60:4f:37:e5:d2:98:62:07:74:80:41:93:19:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ec65a1dcf8225e7f10be20ddde1e216e800b67c
        Validity
            Not Before: May 12 22:01:14 2026 GMT
            Not After : May 13 22:01:14 2026 GMT
        Subject: CN=aa6e542987cab8ca5e4ee2b7daa26f76a83ef2e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:10:6f:10:94:97:a2:74:d3:8e:ef:1e:27:13:
                    55:d4:8a:07:97:f3:e3:e5:2d:a3:b3:08:ff:60:8a:
                    74:cc:f6:7b:81:36:a3:09:2d:27:26:9f:61:f5:a3:
                    c2:4c:15:d2:e5:49:1b:41:59:9a:10:52:01:d9:1c:
                    8d:cc:3f:24:3a:ea:ea:0e:69:36:f8:53:96:89:20:
                    b1:2e:64:c2:a0:85:cf:c0:df:fd:e8:ff:54:09:ff:
                    81:e2:4b:2d:9b:75:54:2e:e0:b4:05:99:64:9b:37:
                    e3:00:6d:93:5e:45:b4:17:13:23:f4:79:45:12:d1:
                    6b:87:df:70:5b:d3:b4:56:13:66:22:ae:d6:90:f0:
                    77:1b:21:88:3b:0f:46:7f:ee:79:ae:8e:66:e8:ea:
                    a5:18:4e:e8:9c:e4:0c:80:0c:e4:1a:54:9d:40:29:
                    d2:d3:8b:d4:78:4e:9b:f6:40:5e:f2:22:c2:d1:7c:
                    1a:ed:20:70:88:1a:18:cd:34:fa:6b:8f:e5:5a:b8:
                    61:6c:3f:89:20:e8:b6:3d:94:5e:a0:8f:17:19:e2:
                    0f:2c:e6:f0:e1:ea:ad:93:e2:14:de:f2:e8:a1:59:
                    dc:74:22:3e:73:34:b8:68:3a:d1:10:5a:ad:9f:a7:
                    a9:64:22:8c:e8:0e:b2:43:ea:d5:ef:2d:40:77:81:
                    b9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6E:54:29:87:CA:B8:CA:5E:4E:E2:B7:DA:A2:6F:76:A8:3E:F2:E6
            X509v3 Authority Key Identifier:
                keyid:7E:C6:5A:1D:CF:82:25:E7:F1:0B:E2:0D:DD:E1:E2:16:E8:00:B6:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:99:e5:dd:f8:71:7d:d9:37:87:cd:40:f6:6a:ef:13:f9:84:
         44:a1:e8:43:bc:e7:14:40:d7:e4:f4:13:b1:5e:16:32:ae:b4:
         50:8d:da:6c:dd:23:f5:c3:a4:70:90:cc:45:f3:f6:a4:e7:1c:
         53:e6:39:f1:16:85:28:e9:3e:de:21:66:6d:e4:7d:d6:b7:33:
         f4:2a:69:e9:71:ad:cd:8f:02:ab:15:95:3b:2c:54:33:df:e0:
         18:81:50:a1:2f:1c:9f:46:62:48:97:41:0b:c3:e3:cb:60:b9:
         d6:0b:ca:6f:29:25:7b:5f:04:27:84:54:97:df:c1:ad:62:15:
         f7:3f:5c:63:82:57:d9:47:23:40:77:a8:e5:34:90:e6:20:bc:
         05:c8:44:d7:27:45:1b:cd:53:9c:3e:30:18:db:07:21:1a:18:
         22:74:da:87:95:4f:00:fc:ea:e0:07:a5:09:64:db:a3:72:2c:
         48:f2:2e:76:7a:45:ca:1f:6c:f6:a9:0e:25:b3:6d:54:85:17:
         5e:20:ea:22:15:51:67:a8:d6:3b:eb:1e:13:d8:ec:95:90:b9:
         de:20:a4:57:19:3c:49:44:ee:75:f8:ec:8c:ae:5e:63:98:a4:
         40:72:d4:0d:bb:9c:e1:98:50:51:10:a6:4b:ab:d4:d0:1f:e9:
         4f:cd:03:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:05:04 2026 by rpki-client