Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
File:                     TJMhPYj6h060Rg4sXPG7GpHakHg.mft (raw, json)
Hash identifier:          n7OF06YrTPqLIcQ5DHVEtv8nA4laO61TxwvXj72pKes=
Subject key identifier:   8E:58:22:C0:11:57:44:0A:F2:D5:C3:29:F5:92:03:39:81:F7:38:F6
Authority key identifier: 4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78
Certificate issuer:       /CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
Certificate serial:       019E1DFE8C9B94D7C16226900D62A3E0D17E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
Manifest number:          1908
Signing time:             Tue 12 May 2026 21:01:21 +0000
Manifest this update:     Tue 12 May 2026 21:01:21 +0000
Manifest next update:     Wed 13 May 2026 21:01:21 +0000
Files and hashes:         1: 1SMtyrFP6eFZxMb7PZMbKYGMJi8.roa (hash: XxgHh0JzLHhNi3/TyAFFwO5EFUtAwR/nBi3ICijq0Hg=)
                          2: TJMhPYj6h060Rg4sXPG7GpHakHg.crl (hash: UIhYu7vV36/hRHkxpTqsZC1ru83GhI12rjbX26X5lt8=)
                          3: Xb_xBMYO16QsavZuo57UMH_pTFY.asa (hash: pTF5yNZXnsPsUoT0zDPJu+l24+9PSGN9YfP8M+7/BDA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:8c:9b:94:d7:c1:62:26:90:0d:62:a3:e0:d1:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
        Validity
            Not Before: May 12 21:01:21 2026 GMT
            Not After : May 13 21:01:21 2026 GMT
        Subject: CN=8e5822c01157440af2d5c329f592033981f738f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7c:d9:79:68:87:43:b9:94:c8:dd:2a:e7:e3:
                    ca:cc:f8:f3:eb:77:cb:aa:a1:93:cc:df:44:18:4c:
                    d2:39:93:58:b5:f7:df:fe:d1:4e:6f:fc:7d:1d:88:
                    ea:1c:10:59:3c:db:ae:c8:de:f9:2e:5a:85:78:72:
                    46:90:46:ec:55:5b:94:ba:f9:e3:e2:2d:43:ae:f3:
                    a1:ac:3c:93:6c:30:f4:49:dc:da:6c:a4:b2:75:0f:
                    19:1f:ca:3f:85:b0:15:9d:87:91:ef:dc:13:26:09:
                    10:e4:70:4e:90:b2:16:6b:de:1d:f7:b9:a1:00:e6:
                    db:0c:79:53:32:f4:d8:27:13:cc:e3:e6:eb:95:66:
                    8e:19:54:c9:7f:47:bc:aa:37:74:9e:08:46:7e:87:
                    b8:6f:02:5c:25:69:33:19:b0:91:fc:3c:3e:a7:fa:
                    ac:f9:fd:f9:92:a0:25:55:07:40:c3:b3:dd:66:89:
                    2c:87:e6:df:83:ef:28:ea:f5:c1:b6:b4:59:63:a6:
                    f0:bd:31:ac:eb:c8:33:3f:5b:94:29:35:9e:69:84:
                    6c:74:3f:24:d1:82:e4:be:ee:49:79:2e:d5:fa:d2:
                    30:4f:92:02:2c:e0:db:bb:f3:3a:ff:23:e5:00:e4:
                    ea:28:d0:38:f3:59:8d:92:2d:a3:15:6b:2c:e8:91:
                    92:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:58:22:C0:11:57:44:0A:F2:D5:C3:29:F5:92:03:39:81:F7:38:F6
            X509v3 Authority Key Identifier:
                keyid:4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:6a:35:4c:05:01:cb:db:5c:55:9d:20:56:c6:77:93:61:91:
         5d:0d:67:4e:78:69:38:1f:bd:3f:8a:de:db:0e:cb:df:ba:e0:
         64:b9:27:78:aa:55:64:15:1e:47:91:ea:cf:60:73:20:c6:55:
         33:ba:fb:15:80:3a:c5:e8:9a:04:63:ee:9c:99:c0:88:52:b8:
         a0:31:5a:55:56:0f:1e:a9:10:6b:26:d2:c5:6c:08:26:d3:2e:
         b2:a5:e6:5a:ba:ec:df:ab:fb:4e:f1:aa:dd:80:f2:5b:c5:68:
         a0:cf:25:37:49:b9:40:db:94:3b:7c:a1:9a:fb:5b:11:b1:6c:
         36:f7:d8:f4:0c:66:25:fb:13:98:3f:d0:fa:67:5b:d2:39:4e:
         53:c1:e8:4c:7b:88:bd:02:59:05:10:26:e0:91:cd:ef:b8:4b:
         7f:b3:50:7e:9e:96:09:99:af:7b:1b:02:0c:1c:b1:a3:b5:43:
         9d:19:bc:b6:5a:ec:d0:a9:1f:68:14:c4:d4:9a:58:73:69:cc:
         44:a7:ce:1e:bf:3d:95:43:86:e8:18:b7:81:e1:93:b4:c1:c3:
         a7:41:24:2c:77:9d:29:e2:9a:52:ad:bb:41:03:4b:5a:49:a5:
         10:de:5e:ea:8e:99:52:ed:e3:c3:e5:2f:8b:05:4a:de:a6:8d:
         09:41:55:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:51:52 2026 by rpki-client