Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
File:                     k7dqyfeoSteQrVfIgLyfhirUyec.mft (raw, json)
Hash identifier:          vXRhXF0xcF7kLSjfnakbqVshTiv5C+Qxc/xJKQnrDo8=
Subject key identifier:   40:1D:85:95:6B:20:1C:91:1D:A8:E5:6F:B6:F1:30:29:2B:1E:5C:00
Authority key identifier: 93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7
Certificate issuer:       /CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
Certificate serial:       019E1E35D5DDC1F1FC23C80298015883514E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
Manifest number:          192C
Signing time:             Tue 12 May 2026 22:01:44 +0000
Manifest this update:     Tue 12 May 2026 22:01:44 +0000
Manifest next update:     Wed 13 May 2026 22:01:44 +0000
Files and hashes:         1: 1-w6BP38irc8ikwIFmua621R4fsA.roa (hash: 04Xau+nR8LEsBKrsIDus90F9cPwGPKiZEygv3ls7WwU=)
                          2: BpdGbagGv2_-Y3TyelIg9iJMEKo.roa (hash: l3T/M5x9/uGHTqM8Mx88SLVI1m/1mGk3r20lwOBjOe8=)
                          3: GAlMaF2krkYTpwYbE6TqEx_Tu_4.roa (hash: YXF5F3qEn+V3ifxgp0F6hZNsJB3RMIymnp6Om4JHbgY=)
                          4: VlwwTSoRiE5X0lO1YkSOmqRJH_8.roa (hash: tELQUfXy5jxakYPvXfDeQLNFwxD9VNjFTkL9svhczLc=)
                          5: k7dqyfeoSteQrVfIgLyfhirUyec.crl (hash: eWQy8kogsvLucotrT/ezt/Xq5rwvwNCe/se/+JRAZa4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:d5:dd:c1:f1:fc:23:c8:02:98:01:58:83:51:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
        Validity
            Not Before: May 12 22:01:44 2026 GMT
            Not After : May 13 22:01:44 2026 GMT
        Subject: CN=401d85956b201c911da8e56fb6f130292b1e5c00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ea:b4:5c:7e:ba:5c:c5:54:3f:7d:b5:6b:17:
                    21:08:ce:5f:1b:dd:28:e4:82:cf:9c:0d:f6:55:d2:
                    34:96:87:8f:49:de:92:e0:ec:86:f3:2d:db:42:5f:
                    07:3b:3e:5c:99:04:c9:cb:84:8b:63:5b:e4:0c:93:
                    3a:36:b6:2e:46:3f:aa:de:04:0f:97:97:c9:4a:67:
                    97:48:0f:74:f6:e8:c8:53:45:c9:57:a7:c6:21:fe:
                    4e:b9:e8:ea:b6:88:71:64:73:81:14:76:c3:ed:e9:
                    c5:fe:97:25:dc:01:76:8b:1f:9d:42:3e:99:79:3d:
                    70:5e:fa:49:fe:68:10:4c:71:fb:02:85:21:ae:9b:
                    2f:7e:79:d8:19:c1:9a:a6:7e:42:89:63:34:cd:f9:
                    65:0f:f9:14:4e:ea:14:d1:f5:92:d7:f6:1b:de:14:
                    62:8a:e9:ac:ea:6c:9d:1b:c8:5c:62:5e:d9:5b:36:
                    b4:bb:16:f0:87:f6:83:08:86:8a:c0:c8:90:ff:0f:
                    77:d7:2b:b3:68:8d:59:c7:64:d5:c8:77:35:76:ee:
                    e0:d0:52:09:1a:98:cd:82:90:6a:43:d1:5e:18:49:
                    8b:36:df:5b:3f:ff:50:a4:dd:a9:8c:f7:d5:87:43:
                    2e:de:50:bd:aa:3d:cf:94:f5:c9:55:ff:8c:60:ae:
                    67:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:1D:85:95:6B:20:1C:91:1D:A8:E5:6F:B6:F1:30:29:2B:1E:5C:00
            X509v3 Authority Key Identifier:
                keyid:93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:84:29:f2:8b:39:d3:a4:6c:d9:73:ad:d7:07:aa:78:1f:1d:
         1f:85:f5:f8:5e:15:4c:b9:7f:c6:82:44:e6:1f:29:e3:eb:ae:
         97:99:a8:f5:ab:e8:f6:59:97:1a:35:b4:78:4a:12:dc:d5:0b:
         dc:9d:40:cd:6c:e3:f7:bf:4e:7c:50:6b:61:b0:8b:06:86:36:
         03:8a:e9:64:5c:e6:9a:ec:f2:11:f0:4c:0b:3d:d7:ff:72:a0:
         e0:f1:f2:17:7d:f1:9f:10:30:b7:49:7e:a5:ac:91:1a:b1:0a:
         15:8d:8f:3a:77:d5:36:9a:ed:d8:dc:e7:77:56:30:57:19:c5:
         90:27:e4:75:7d:a9:34:99:8b:20:9b:f1:74:02:b7:8c:b6:6b:
         43:d9:10:63:98:3c:80:1d:78:83:ec:da:42:c8:82:63:67:d1:
         21:f8:7d:c2:2a:d6:d1:1b:83:98:84:79:fe:88:f2:e0:7a:34:
         e9:69:b5:fd:dd:96:2d:21:3b:9f:30:de:d9:06:3b:8f:69:ea:
         64:19:b6:b1:35:c5:51:74:32:36:08:79:c1:f7:22:3d:a2:2b:
         a5:b1:f2:2f:84:86:40:d3:7d:82:4e:66:aa:fe:25:3b:67:c7:
         f4:4f:0e:af:c0:e0:00:5c:11:b1:3d:20:ef:7d:db:76:57:1f:
         3e:10:3f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:45:28 2026 by rpki-client