Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
File:                     CWv35rMqViP1S7nHN9uPgU6TrTk.mft (raw, json)
Hash identifier:          8QbyVQ5YNJfPS+AxMBZfsebInx55R4U4MSIX2rVIB4w=
Subject key identifier:   47:5E:41:60:E1:FC:0A:B3:97:95:D0:2D:28:A5:C0:FE:EB:B5:FC:A7
Authority key identifier: 09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39
Certificate issuer:       /CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39
Certificate serial:       019E1E351F7CA7C918AF6EBADBFDA82D1C54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
Manifest number:          142E
Signing time:             Tue 12 May 2026 22:00:58 +0000
Manifest this update:     Tue 12 May 2026 22:00:58 +0000
Manifest next update:     Wed 13 May 2026 22:00:58 +0000
Files and hashes:         1: 55XgO8_Vwqnh0dBKWvVkuxHs6Ww.roa (hash: Y8RrsYQy5lHgQUMkKZpotYnnwjRaHtFf6Zo8BbV2RP4=)
                          2: CWv35rMqViP1S7nHN9uPgU6TrTk.crl (hash: ifzG18jGxVtr36RcpkUYjT+0rcPE0R8d/YgdcaG04qU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:1f:7c:a7:c9:18:af:6e:ba:db:fd:a8:2d:1c:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39
        Validity
            Not Before: May 12 22:00:58 2026 GMT
            Not After : May 13 22:00:58 2026 GMT
        Subject: CN=475e4160e1fc0ab39795d02d28a5c0feebb5fca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:29:a8:b9:58:8b:77:f6:88:9d:ef:d7:6c:8d:
                    63:d7:48:86:20:bd:40:d3:b0:54:b1:a2:02:86:33:
                    24:f2:fe:8e:14:9a:48:04:f7:8b:19:27:b1:c0:f8:
                    c8:4d:51:21:bf:4d:00:34:05:e7:c7:66:fe:fc:da:
                    3f:15:16:8b:0b:b8:d2:50:53:b8:d3:37:69:07:8f:
                    46:6e:d4:a0:9b:d6:c4:48:3e:16:e0:24:92:77:c1:
                    57:1b:d8:65:c0:54:3a:89:95:36:00:42:48:90:38:
                    0a:af:13:19:fb:ed:27:59:61:29:24:bf:24:db:d3:
                    21:7a:4d:49:c8:e7:e2:96:68:48:77:55:6e:f0:19:
                    87:cf:2a:c5:52:f0:83:d2:43:62:bc:bd:28:3a:8d:
                    7a:9c:8b:41:46:d0:a7:0f:fe:d5:ca:c4:91:54:a9:
                    79:b8:7b:23:a7:98:f6:9c:95:24:ca:8a:ff:60:41:
                    0b:81:4d:71:22:ab:1d:4e:61:f2:59:88:26:9b:6e:
                    84:38:07:a4:6d:cf:59:10:d8:f5:f2:e8:29:60:cc:
                    f8:e6:a9:7f:44:34:6a:8a:f4:6b:4f:83:db:9c:03:
                    51:25:62:4c:be:e4:5e:13:e8:28:6b:39:29:b3:36:
                    8c:4a:56:58:e9:8c:c8:03:1f:9d:8c:e1:93:4b:d2:
                    4e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:5E:41:60:E1:FC:0A:B3:97:95:D0:2D:28:A5:C0:FE:EB:B5:FC:A7
            X509v3 Authority Key Identifier:
                keyid:09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:39:72:6c:76:95:d5:77:19:90:51:e2:e4:ab:bf:79:8e:0c:
         a8:1a:19:3d:a2:7a:57:ea:72:3b:62:01:9f:58:0a:0b:33:d2:
         62:9f:ba:66:e4:c6:93:82:91:2a:92:60:5a:11:13:0d:7b:97:
         86:79:af:d4:73:0b:7b:c8:f4:84:63:d4:31:04:92:2a:9e:54:
         9b:1b:eb:e3:31:9c:08:c6:14:2b:3b:d0:26:bb:9f:da:ba:8e:
         93:3c:40:57:e6:13:00:37:65:c1:14:51:b8:44:f7:b8:61:01:
         2c:70:88:0f:63:73:d4:6c:8d:d1:f2:68:a0:df:15:fb:12:bc:
         57:8c:92:b7:63:01:94:2c:d6:07:9d:35:ae:bd:8e:4b:c3:cb:
         04:69:16:8e:f3:ad:48:c4:a1:82:f3:1a:93:95:06:75:85:4e:
         56:b5:ea:3c:df:75:7f:d4:89:02:c4:2a:db:ed:a5:4b:18:65:
         3d:29:f0:11:e4:f0:ba:e4:ab:a4:80:c2:b0:03:d1:ca:3c:e9:
         2e:40:1a:58:47:99:c9:12:35:a4:4c:de:dc:57:50:58:f4:af:
         ca:20:60:61:a2:8b:f0:16:f3:cd:cf:31:4e:c5:93:6b:ee:c7:
         78:04:1b:20:78:a8:99:5a:73:3c:01:ef:58:32:8f:f5:a2:9e:
         9a:e8:93:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:30:31 2026 by rpki-client