Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft
File:                     a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft (raw, json)
Hash identifier:          J3E8n5lm2nPicC0Xnu3W1ahO1pmpa/EXhTcax9pXx9k=
Subject key identifier:   65:50:59:DB:6F:BF:99:C2:19:50:B4:59:AB:E5:D0:A8:79:87:F2:5C
Authority key identifier: 6B:7D:01:DD:E3:C2:AB:7F:A7:B5:88:EC:AD:4D:1C:D3:13:97:BD:84
Certificate issuer:       /CN=6b7d01dde3c2ab7fa7b588ecad4d1cd31397bd84
Certificate serial:       019E1F7F8D732A9442E8B4B78579A016EA7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a30B3ePCq3-ntYjsrU0c0xOXvYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft
Manifest number:          0185
Signing time:             Wed 13 May 2026 04:01:53 +0000
Manifest this update:     Wed 13 May 2026 04:01:53 +0000
Manifest next update:     Thu 14 May 2026 04:01:53 +0000
Files and hashes:         1: T__G1Ca-eMsMLPhR2fqq6jZzabE.roa (hash: /YNdonFxgiuSJ7bSBLLw5KHpjMZ1mWh/QAHnXBlZOVY=)
                          2: a30B3ePCq3-ntYjsrU0c0xOXvYQ.crl (hash: vavA+3q2fnUK8eCuqDJOgSKGuCMx3S67zpXaZHKOLCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a30B3ePCq3-ntYjsrU0c0xOXvYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7f:8d:73:2a:94:42:e8:b4:b7:85:79:a0:16:ea:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b7d01dde3c2ab7fa7b588ecad4d1cd31397bd84
        Validity
            Not Before: May 13 04:01:53 2026 GMT
            Not After : May 14 04:01:53 2026 GMT
        Subject: CN=655059db6fbf99c21950b459abe5d0a87987f25c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d0:6c:20:47:49:5c:da:02:5d:57:6e:3b:b6:
                    4a:be:03:f8:06:d6:c2:28:ed:dc:6a:e2:02:56:71:
                    1e:e0:87:87:f4:2b:01:30:e9:d8:fa:7b:27:a4:e5:
                    b5:4a:68:89:b5:3b:c6:5d:0d:ea:10:14:8a:e4:17:
                    3b:3e:84:29:2f:cb:d0:77:13:a5:23:b6:a2:f4:79:
                    02:35:9d:db:c5:aa:50:c0:23:8a:6d:87:13:bc:04:
                    6b:8a:8b:02:7b:62:37:4a:bc:4b:08:bd:88:db:fb:
                    6c:df:8e:b7:95:e3:22:d6:d6:ed:70:e1:93:0c:a6:
                    48:c1:81:4b:8b:df:14:3c:84:bc:1f:cf:bc:88:70:
                    32:9f:7f:17:5c:fd:15:b4:74:51:ee:03:e3:fd:e4:
                    8d:58:38:fb:0a:dd:eb:d3:be:6c:56:b4:06:b4:ac:
                    c2:29:ad:22:66:ed:fa:48:be:39:3b:28:10:6a:be:
                    30:66:28:45:e6:06:8c:60:4e:c9:40:da:c0:9f:04:
                    61:28:d3:4d:b6:61:4f:91:7d:33:a3:e0:1e:36:3f:
                    32:6e:28:39:4a:57:70:d3:71:af:29:a5:f5:66:d4:
                    52:e5:e0:92:73:e0:28:bd:5a:e9:5b:24:74:5c:7a:
                    1b:99:d0:8c:b6:66:b1:b0:69:2d:9e:c5:2e:9e:dc:
                    80:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:50:59:DB:6F:BF:99:C2:19:50:B4:59:AB:E5:D0:A8:79:87:F2:5C
            X509v3 Authority Key Identifier:
                keyid:6B:7D:01:DD:E3:C2:AB:7F:A7:B5:88:EC:AD:4D:1C:D3:13:97:BD:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30B3ePCq3-ntYjsrU0c0xOXvYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:02:c7:13:97:f4:45:c7:41:7b:7a:44:d2:07:2f:1a:17:db:
         d8:9a:f8:1f:e6:82:92:2f:a8:21:de:43:67:01:ac:c1:9a:be:
         30:02:a8:96:e6:a0:56:43:98:c5:9a:4c:1a:9d:1a:d1:d1:36:
         e6:1b:28:53:e8:79:13:4a:4e:40:2c:42:ab:38:e1:c5:26:0a:
         a9:55:ad:e8:c6:ce:7b:c9:9f:00:7b:d7:65:cd:e6:e4:cd:25:
         2f:62:7c:eb:58:76:83:40:50:43:63:fc:88:e8:0c:01:88:1a:
         a4:76:64:9b:a5:c3:f7:0d:76:8e:83:23:87:38:a9:1e:ff:4c:
         0f:56:2d:af:f0:6a:ab:72:28:26:6b:e2:64:4d:5f:fc:8c:22:
         be:39:4b:bb:f6:e9:ab:53:f4:64:25:92:82:dd:a4:0c:35:59:
         93:d5:34:71:3c:75:ed:0d:14:e1:ae:40:c0:70:77:bc:01:a7:
         3f:6d:2c:1c:0f:6e:34:15:e7:26:a9:d7:60:49:ef:b6:a7:11:
         1f:51:7d:3b:58:ad:17:53:98:45:b6:62:08:50:13:0d:fd:cf:
         40:84:9d:2b:b8:fb:f5:13:e7:ce:8e:41:15:9d:bc:f9:52:f5:
         57:12:ad:05:50:e2:71:5f:54:04:9d:6d:e4:50:0f:d9:b4:91:
         91:74:88:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:07:00 2026 by rpki-client