Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
File:                     azeN8nvZJgx-sVJz6ZPjawmF2hA.mft (raw, json)
Hash identifier:          zsIJ9c9VO7uwTtNpbdYI9TnkPr63L/98HGflWG59CFA=
Subject key identifier:   56:41:CF:B7:93:D3:94:68:C1:83:15:0D:52:CD:4C:A0:CD:C1:B1:A4
Authority key identifier: 6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10
Certificate issuer:       /CN=6b378df27bd9260c7eb15273e993e36b0985da10
Certificate serial:       019E1F7F1F83CAA6BCE6DB015BA43BFCA8AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
Manifest number:          190D
Signing time:             Wed 13 May 2026 04:01:25 +0000
Manifest this update:     Wed 13 May 2026 04:01:25 +0000
Manifest next update:     Thu 14 May 2026 04:01:25 +0000
Files and hashes:         1: BhiORD-UuUDBrhyIYI_DoUYPlI8.roa (hash: JTlV8Y8e4tmlDr8mHk2b5u6aD2TaQXFvARgJc495HDg=)
                          2: azeN8nvZJgx-sVJz6ZPjawmF2hA.crl (hash: mNL4CaRFnplKeq9Wz1GZCOoM4UDeH+uaD1YUEgurPok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7f:1f:83:ca:a6:bc:e6:db:01:5b:a4:3b:fc:a8:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b378df27bd9260c7eb15273e993e36b0985da10
        Validity
            Not Before: May 13 04:01:25 2026 GMT
            Not After : May 14 04:01:25 2026 GMT
        Subject: CN=5641cfb793d39468c183150d52cd4ca0cdc1b1a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5d:60:91:29:a3:32:13:85:97:ec:c3:19:81:
                    14:70:02:98:61:80:4d:32:f8:02:d3:93:37:b7:a0:
                    01:1e:4e:62:4c:38:3f:42:f5:78:bb:f8:6e:bf:7c:
                    2f:78:53:38:6f:c4:9e:21:20:c2:ad:b9:a5:5c:40:
                    d0:6e:0c:57:5e:e4:b2:9f:77:d2:d8:a9:5a:3b:15:
                    dc:7d:1b:a2:dc:28:8f:2d:a4:55:aa:23:35:3e:30:
                    dc:02:c8:5e:d9:65:71:f0:10:4e:42:a8:10:8c:9d:
                    e8:ef:da:56:c7:ec:b6:18:93:15:76:54:c4:34:bc:
                    23:12:e3:0f:ac:51:db:e3:b9:c1:3e:89:9a:60:03:
                    51:19:df:9d:d5:63:63:61:10:0f:09:f8:c7:04:71:
                    14:4d:fd:a3:95:df:35:1b:8e:ed:d6:74:9b:06:5f:
                    47:5c:92:13:df:8c:91:ad:33:e6:8d:41:6a:99:b6:
                    f8:c4:46:1b:c2:84:86:28:6a:7f:4b:d9:68:34:33:
                    23:94:91:22:c7:82:99:0c:54:ca:73:2d:72:6a:af:
                    55:3e:1a:bd:01:1f:6f:37:77:23:b5:a2:cc:af:24:
                    55:df:95:4f:63:57:bb:04:a7:04:fd:f0:6d:2c:be:
                    21:bd:d5:1e:a7:3d:68:1a:a0:f1:84:63:71:90:b6:
                    df:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:41:CF:B7:93:D3:94:68:C1:83:15:0D:52:CD:4C:A0:CD:C1:B1:A4
            X509v3 Authority Key Identifier:
                keyid:6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:f9:40:18:50:c5:af:2c:54:8a:47:2b:ae:bd:aa:65:a3:75:
         3a:c0:5f:7a:e3:68:a3:d9:3a:34:c2:7b:e4:82:b0:3f:84:73:
         50:6a:12:65:4b:10:ee:31:0b:4f:86:ac:74:44:f3:31:9f:c3:
         80:81:08:6b:ab:5e:e3:13:b0:11:99:16:57:a1:3a:dd:83:c9:
         95:8c:de:14:04:a3:cd:33:ea:25:aa:5b:f7:65:bc:78:38:5a:
         d8:36:69:6a:6a:c4:62:c1:5f:b4:ae:7e:44:19:f6:72:70:87:
         50:a3:09:70:d4:d2:31:4c:82:7c:c2:9d:c1:1d:75:01:84:59:
         d2:6d:f8:61:28:55:40:44:0f:6a:bb:a1:0d:49:73:53:ab:ee:
         83:dd:45:86:98:cc:2f:87:a0:62:76:bf:c7:22:b6:e1:91:a4:
         cc:55:48:a6:8c:1e:19:8e:8e:d9:82:43:cd:5d:59:a8:73:5f:
         dd:9f:03:b4:a4:9c:99:55:b7:a7:90:64:2f:c2:21:db:6c:f8:
         fd:3a:46:72:27:57:29:b0:93:7e:6d:4d:3b:78:27:a5:dd:21:
         9c:53:5e:b5:89:a3:d6:33:fc:56:2e:6b:fe:28:8a:65:7e:86:
         52:de:e6:c1:b2:c1:a7:1d:0d:d0:13:7f:d1:d1:c6:28:26:fa:
         12:e4:76:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:12:54 2026 by rpki-client