Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
File:                     X75lriPyB_ppUlX1WpB6wWCL4JQ.mft (raw, json)
Hash identifier:          uTBpe045GZebGN9i8DtRUY0twYe5VNbsIfRDGZGbrcs=
Subject key identifier:   7F:E3:9F:3A:1E:2A:41:F6:1F:F2:FA:D7:A5:5B:E1:1C:30:69:2C:42
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Certificate issuer:       /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial:       019E1FEC8DF2CC3355A38DD25189A251E6F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
Manifest number:          1937
Signing time:             Wed 13 May 2026 06:00:56 +0000
Manifest this update:     Wed 13 May 2026 06:00:56 +0000
Manifest next update:     Thu 14 May 2026 06:00:56 +0000
Files and hashes:         1: 1-BEhUmO0ut6OA3qSvrHuFMRpZQE.roa (hash: yam/iELTfsrH6RDASPXjvZYKSY1utqMhfRTVx8Az1Po=)
                          2: 37mxkZixR_bwnbeVwhCjBHW6d8E.roa (hash: 3NewfDqufhLhgHHEAwQ2xRkvSJQXOzdt7yeorX7tt1E=)
                          3: 9D820He12zEiGHJY2yEp95HuOYo.roa (hash: JgNweIsliEaUH1GQxpLBgGrSQ23iPTPHkKTdFr797ts=)
                          4: P-jvPlaLL6rr2ui5e9D6YWxhu9w.roa (hash: DDSuenDK/kT9T6J/tQTGQwxbDy3mpq7Bc6isbXiDO5I=)
                          5: TieuC1DoyThjRQq3uG3ihjLScTo.roa (hash: vC9rnpVx2T8cbVOPfkfZTZYOxBuzPINUpSnwkUZDkSE=)
                          6: X75lriPyB_ppUlX1WpB6wWCL4JQ.crl (hash: 3laweuXZnlZto7LZQfAkcNsFqL0NEe2VvrFTrAGVTP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:8d:f2:cc:33:55:a3:8d:d2:51:89:a2:51:e6:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
        Validity
            Not Before: May 13 06:00:56 2026 GMT
            Not After : May 14 06:00:56 2026 GMT
        Subject: CN=7fe39f3a1e2a41f61ff2fad7a55be11c30692c42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9e:93:aa:19:a5:cf:a3:85:cb:20:ce:54:ca:
                    eb:74:fb:a3:23:c9:1f:a4:68:7f:77:5b:b3:ab:65:
                    d8:c9:4c:ab:d6:9e:c3:f2:f3:ef:80:8d:c7:22:93:
                    b3:b4:36:50:2d:7c:fa:6a:51:7d:d6:ca:ec:82:15:
                    21:02:b0:06:e3:65:4c:17:aa:e9:b5:3b:d1:8e:dd:
                    eb:2a:9d:0d:2c:02:93:e7:ee:ba:a1:68:36:f8:48:
                    83:12:51:0c:3b:65:38:83:1c:a8:d5:17:5d:ce:ab:
                    17:8c:a8:e5:20:fe:f5:39:89:f2:d1:64:df:b7:aa:
                    a0:b5:35:de:9b:38:23:20:36:9a:bc:13:e9:61:82:
                    cb:82:99:2b:a2:8e:a5:c4:e0:e7:d4:27:16:31:40:
                    4a:b5:c0:0e:91:54:3c:3f:08:52:0c:da:31:ac:ae:
                    0e:54:16:f5:bb:0d:57:12:dc:94:a6:65:3e:bb:a0:
                    b9:c8:4f:d0:1c:b9:83:0d:35:07:6e:bf:fc:60:24:
                    8b:42:e9:a7:29:e4:b6:a4:d7:7a:08:96:3f:4b:e9:
                    70:d3:b1:87:fa:1a:51:10:1c:60:28:a0:a6:ee:d6:
                    44:7e:f9:dc:25:b8:ff:d2:13:4d:b5:65:b7:b5:9e:
                    c5:49:3c:64:08:e1:9e:84:c6:03:0d:c5:c1:24:d1:
                    05:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E3:9F:3A:1E:2A:41:F6:1F:F2:FA:D7:A5:5B:E1:1C:30:69:2C:42
            X509v3 Authority Key Identifier:
                keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:6d:36:f1:e1:3e:eb:0b:28:bc:92:1e:14:44:d7:e4:ce:a0:
         4a:75:6a:c6:a4:66:66:81:25:9e:12:fa:35:2d:ef:8a:c0:6d:
         c6:d5:20:38:59:81:8a:54:06:6a:81:2b:e3:82:2a:ca:71:a7:
         5f:5f:00:89:31:8a:7a:be:35:69:ec:4f:cc:0c:ee:ad:42:fa:
         ef:ac:bb:ea:d5:bc:a0:de:33:c6:86:a9:69:aa:ae:db:1c:19:
         8f:e8:9e:61:b7:c3:6b:ff:19:96:3e:57:25:9b:44:85:3a:68:
         0b:25:c5:42:bf:49:36:d9:be:be:b7:9a:ce:2b:30:a1:5e:35:
         f6:dd:9a:2f:89:2f:a6:ba:80:dc:5b:7d:de:24:45:3f:87:47:
         b3:45:4f:5c:4b:09:11:50:72:18:04:a9:a6:fa:cb:fa:cb:ee:
         01:ab:16:da:3b:7d:6a:84:0b:a9:6b:7d:8f:a3:de:de:34:b3:
         55:29:53:94:c0:6a:c8:7d:83:43:bc:df:2e:9d:c1:e6:cd:b6:
         44:92:48:2f:90:f0:d9:3c:64:17:a9:32:d9:8e:93:f3:ef:47:
         a8:3e:34:c6:eb:44:74:d5:d2:e5:d8:4a:24:c9:95:05:73:df:
         2d:cb:00:d0:bb:bc:bd:44:66:89:f2:09:d7:65:a6:4f:15:c0:
         fb:94:3b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:32:04 2026 by rpki-client