Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
File:                     r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft (raw, json)
Hash identifier:          HLHWCpk1EbD3QZGPkQNOdz2ADMQ9FPjTgXPl9jH6zkI=
Subject key identifier:   68:3C:F8:4A:1C:6E:C5:C9:75:2F:6D:89:55:A0:D0:2B:9F:92:BF:40
Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
Certificate issuer:       /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Certificate serial:       019E1F47D774F762ED4F2A044FD8CEC0A21E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
Manifest number:          12E2
Signing time:             Wed 13 May 2026 03:01:02 +0000
Manifest this update:     Wed 13 May 2026 03:01:02 +0000
Manifest next update:     Thu 14 May 2026 03:01:02 +0000
Files and hashes:         1: 1-IJx4nelfGjFuMYLqOK7id9irxU.roa (hash: b5aVl1cJIc1BC2UfHdl9ea+y66xvZtqK+4BK5mmAqH4=)
                          2: CnxrWW9MQbA3OxKH-Q8jpaMZj0Q.roa (hash: I2lPd7hD8IUUjVTMDWiwz4fKXB1nPb5e6pLyv73hBK8=)
                          3: Lkpu54v6ux0vfrMmr2dvF4EUmIY.roa (hash: 2lIxKAyj2wAnIHlH+oCwYSCBBNm4zlmBFuipn6Ti/Cc=)
                          4: N_Jp-G27wqAqsqkajDg53k_oUEE.roa (hash: NpaEZ0EEykOhPXCywjsGGExbKvpF7O0B2ojyn6pZCPc=)
                          5: NlmgJH7T2Nyh5LwtrU7zGve9sZA.roa (hash: 3Wjbtflt/jjOunqkUKEb+3Cki8OMoGu4zLrIQR/qwZo=)
                          6: cUb3XTogvovrYjpVGeHi0SpRJUA.roa (hash: LdHfjZ1stTUnmvHrBTIHeQNXmr3GpKVFfzvqxr7MXf8=)
                          7: hVE5Yop4VxbvBIWpUfceFvrMB2g.roa (hash: 8ClHdxsk9TEH5ulm4Fgh/I2Ueg7yI7/7dLDb3VHPBxY=)
                          8: r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl (hash: KT4JlApU4eZFw1z83udxhm8W4ql9lWpM9kTHBTZli44=)
                          9: w83Lz7bG7qWOCKPvzC-7J-e6eIQ.roa (hash: K0HhmDqy6GK1v3887SfyLFxrwfrFJjolkhIBVfrw66c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:d7:74:f7:62:ed:4f:2a:04:4f:d8:ce:c0:a2:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
        Validity
            Not Before: May 13 03:01:02 2026 GMT
            Not After : May 14 03:01:02 2026 GMT
        Subject: CN=683cf84a1c6ec5c9752f6d8955a0d02b9f92bf40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0d:03:eb:c6:2e:08:3d:72:07:fb:d7:92:8a:
                    f5:d6:5e:8e:4f:78:96:76:cd:d1:dd:6b:a1:39:8e:
                    50:6a:1a:d9:f6:c1:8c:31:76:44:78:73:68:ce:64:
                    0d:44:67:81:9b:e1:21:05:8c:2e:ea:93:3c:4f:5e:
                    f4:28:52:05:02:93:9a:63:bc:d3:aa:5f:1d:a5:e9:
                    9d:70:58:2e:9d:dd:f8:c8:11:11:b2:6c:48:8b:51:
                    f3:4c:96:47:82:56:66:d3:82:45:69:73:33:75:b2:
                    27:e9:85:52:f0:f8:e4:e9:08:1d:60:fc:8d:44:0c:
                    8f:fe:4c:a4:29:35:bc:4b:1c:78:9b:8c:bb:e6:0d:
                    15:0c:42:52:1c:db:4c:85:76:74:fc:60:b2:e9:9b:
                    d5:95:25:94:29:25:b0:29:1f:24:9d:b8:b9:f0:be:
                    75:6e:bd:fe:1f:a7:da:f8:d5:7c:c2:cd:94:4c:85:
                    aa:41:7a:5f:5e:aa:c6:11:0a:a3:2a:57:a2:42:01:
                    57:fd:6c:fd:11:77:fa:66:f5:1a:bb:d9:7b:37:5b:
                    95:12:a0:ff:bc:a4:93:06:6d:8b:d0:65:fe:2c:ef:
                    18:1e:44:09:e2:cd:d3:9d:95:3a:d2:3c:c8:03:0e:
                    b2:5b:71:69:af:80:b1:2c:90:dd:01:35:dd:00:c1:
                    26:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3C:F8:4A:1C:6E:C5:C9:75:2F:6D:89:55:A0:D0:2B:9F:92:BF:40
            X509v3 Authority Key Identifier:
                keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:e4:ab:36:7f:59:43:f4:73:2c:28:89:4c:64:4c:cd:66:ab:
         28:32:75:45:e6:73:fe:db:bf:39:c1:87:b0:0b:d4:05:ea:c9:
         23:29:86:4d:bd:8b:51:09:ff:06:a0:d5:ef:76:3e:22:32:8a:
         0e:52:dc:d7:d5:2b:b5:e7:42:cc:aa:bb:e4:7f:1f:8a:2d:78:
         6e:aa:06:88:1c:39:0f:a0:f8:c1:8d:88:1d:dd:38:9c:8f:88:
         70:af:02:1a:fe:e1:77:f7:07:47:de:d9:5b:0c:d4:43:28:a0:
         2c:20:0b:48:2d:ae:02:89:9a:99:21:f2:be:a0:5b:81:33:43:
         de:94:9c:0c:31:21:47:d0:48:f2:21:a7:95:d6:87:5d:78:ad:
         74:a0:f7:76:70:e7:90:07:d2:58:de:fe:7b:e6:4e:5d:b6:07:
         40:68:11:6c:9a:9d:d0:ba:d7:ca:74:4f:d6:bc:9f:ab:b4:a5:
         d1:62:68:2c:24:50:f4:e9:aa:14:cc:5b:77:87:e4:b2:84:95:
         98:3a:f3:10:61:4c:50:70:64:88:ba:ce:8e:be:49:b9:90:90:
         3d:2c:6a:41:b8:06:cb:8c:75:86:47:9d:71:dd:31:e5:ce:dc:
         2b:b0:79:89:8e:0d:bc:78:0c:7e:10:b5:1a:2e:2c:42:fb:73:
         5c:fd:08:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:52:22 2026 by rpki-client