Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/czQP17PChWN63ADx5h4rjkAmWPM.mft
File:                     czQP17PChWN63ADx5h4rjkAmWPM.mft (raw, json)
Hash identifier:          N2z+sIDjZ59BWVHReFqd38pD/dUEJQzBZSehMwjB0WE=
Subject key identifier:   E5:C1:63:8B:01:B0:F0:D1:85:6D:47:8C:7A:6F:F7:1D:A2:1D:D0:2A
Authority key identifier: 73:34:0F:D7:B3:C2:85:63:7A:DC:00:F1:E6:1E:2B:8E:40:26:58:F3
Certificate issuer:       /CN=73340fd7b3c285637adc00f1e61e2b8e402658f3
Certificate serial:       019E1E6C7613D02B78506377D427FF8A12B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/czQP17PChWN63ADx5h4rjkAmWPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/czQP17PChWN63ADx5h4rjkAmWPM.mft
Manifest number:          1485
Signing time:             Tue 12 May 2026 23:01:24 +0000
Manifest this update:     Tue 12 May 2026 23:01:24 +0000
Manifest next update:     Wed 13 May 2026 23:01:24 +0000
Files and hashes:         1: a3EzX3WcmdhmQvwA-GnAI4JgEtw.roa (hash: C4cMB04OWyPRUy1OSkZ4yaaLwpazM0m/JqgEaW9Hrpg=)
                          2: czQP17PChWN63ADx5h4rjkAmWPM.crl (hash: MWwXsI4xwS5H7ug9jUhm6vYH/1Ls9RmUrmlxDOwgAH4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/czQP17PChWN63ADx5h4rjkAmWPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/czQP17PChWN63ADx5h4rjkAmWPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/czQP17PChWN63ADx5h4rjkAmWPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:76:13:d0:2b:78:50:63:77:d4:27:ff:8a:12:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73340fd7b3c285637adc00f1e61e2b8e402658f3
        Validity
            Not Before: May 12 23:01:24 2026 GMT
            Not After : May 13 23:01:24 2026 GMT
        Subject: CN=e5c1638b01b0f0d1856d478c7a6ff71da21dd02a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:77:2d:88:cd:66:91:63:35:31:a0:ae:a4:37:
                    9a:d9:c4:70:3b:8f:61:2e:56:18:7f:fa:1e:b2:98:
                    ba:3a:b7:57:42:6b:a8:1c:ec:a7:89:ce:f0:e3:89:
                    64:82:de:e6:60:b9:2b:d6:b3:7a:b4:c8:02:73:36:
                    1f:c5:a2:ff:4e:0b:b9:9e:e6:ac:0a:b5:43:5a:57:
                    65:2a:a9:0a:e2:f1:56:74:6a:2b:c3:a2:e5:6b:00:
                    b9:3a:7e:be:a1:4f:85:a5:80:92:13:0d:e1:84:8e:
                    66:ba:5d:52:56:8f:10:4f:7f:23:a5:e5:87:df:28:
                    fe:5f:87:27:ef:ba:e4:4a:36:2b:4c:7f:7f:17:e7:
                    49:bc:9e:ed:a8:5e:f0:ff:88:7f:70:74:c4:0f:8c:
                    f4:cd:e5:ef:76:2b:e2:32:e7:63:b3:e5:24:fc:22:
                    66:c4:27:9f:7a:03:45:f9:88:4e:1b:b8:0e:0a:95:
                    f4:1f:a7:ca:d2:35:af:fd:7f:35:f9:b5:ca:00:af:
                    c7:1b:fa:12:45:f5:49:6b:2e:6d:72:e6:fa:80:2e:
                    c9:ab:53:55:85:ed:17:0c:40:78:74:25:c7:07:49:
                    c8:bb:85:ad:7f:b7:07:df:1b:48:aa:40:1f:8e:68:
                    a2:da:e8:0a:ea:fd:38:46:ef:32:c3:60:ef:0f:b9:
                    3f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C1:63:8B:01:B0:F0:D1:85:6D:47:8C:7A:6F:F7:1D:A2:1D:D0:2A
            X509v3 Authority Key Identifier:
                keyid:73:34:0F:D7:B3:C2:85:63:7A:DC:00:F1:E6:1E:2B:8E:40:26:58:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czQP17PChWN63ADx5h4rjkAmWPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/czQP17PChWN63ADx5h4rjkAmWPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/czQP17PChWN63ADx5h4rjkAmWPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:92:0f:74:b5:b9:8e:1b:59:50:5b:9e:2b:77:80:4c:1b:87:
         b0:ba:61:e8:0c:13:a1:c5:5a:a6:f0:3c:a1:a4:c7:a1:08:e7:
         b9:4c:a7:28:ba:3c:b2:7e:27:af:e3:6c:63:a4:60:11:bb:cc:
         9c:d0:b6:7a:6c:4a:1a:52:bd:cf:aa:b8:d7:56:14:07:d0:bc:
         b8:c0:e1:a4:17:5c:eb:a3:d4:19:54:0c:80:3c:ad:ad:e6:4f:
         30:01:14:99:95:a1:8f:38:fa:0f:fc:3a:1b:91:8b:31:9a:3b:
         85:34:4f:11:d4:e9:ca:bf:61:45:a4:3c:7a:5d:22:de:25:c7:
         16:8c:47:44:3a:4d:d6:66:fb:07:04:d0:08:aa:ed:52:1c:66:
         16:a2:9b:07:b4:66:34:8d:0e:84:89:95:f2:c3:fd:9c:f5:59:
         f1:52:cc:f5:db:8f:72:d7:40:4e:77:fd:df:99:a3:b7:46:99:
         d9:ab:09:b4:5b:46:d3:65:26:cc:d0:75:7f:72:70:ef:46:9c:
         de:05:5b:75:76:2f:dd:04:d2:a9:dd:e4:6f:1b:7f:f6:6f:83:
         35:eb:d7:36:c2:e2:55:a2:3a:01:8b:28:1e:c6:39:87:b3:18:
         2f:41:39:0c:80:a1:fe:30:da:f4:13:4a:23:c6:ae:38:d3:07:
         81:bf:60:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:06:55 2026 by rpki-client