Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft
File:                     tOgroXFdaurlsBAnJf_gyDRzXX0.mft (raw, json)
Hash identifier:          k8aHAZgF8VdOprv0rnKjm0qYX2Tn8Udhw+uCYc4eIJk=
Subject key identifier:   2E:09:A2:8C:E5:51:BB:E6:67:5D:31:7D:35:83:F0:62:A8:8F:5F:18
Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
Certificate issuer:       /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Certificate serial:       019E1F7F2BB0462F05DA204E45DBA9A569D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft
Manifest number:          10FF
Signing time:             Wed 13 May 2026 04:01:28 +0000
Manifest this update:     Wed 13 May 2026 04:01:28 +0000
Manifest next update:     Thu 14 May 2026 04:01:28 +0000
Files and hashes:         1: 1-qgyilt4mW5S7R3DpKdq7Oz7i3g.roa (hash: p4IRMRrJZgnKi2WdlcOaJkOpKGoVzi49HMW6WN0NrJ8=)
                          2: 8lzOqg36QfNkeg8Q6Az_2mhb-pY.roa (hash: W0oPaRSAv7Mlqt/bxzWLXb0GBYOFj3ar/XeEXfhCbx8=)
                          3: QViCpxHL7TeWgNCiZk4rKUO-8KU.roa (hash: lHQxRnJhPCjs1WHfqXj6jxi3Fa+6Jf53oEHyU2j2aik=)
                          4: iy1Tvz9vWB_OyKw6kX0SPKuwaMg.roa (hash: f91SOkfNEhx8xn/tAVUdyzoJrhGRQTUbnnTsdxKuQ64=)
                          5: qI_-6h3iudeXwj_KCEW7jVNBeSs.roa (hash: VCf8NA7/YCd9pNMoP3NeZ5lHDYrKSJzJ143pwqaxHAQ=)
                          6: t636B7CqAadftoFod7ybUNJhQPo.roa (hash: 181NFYC4u/sBirqlh2IrjbcRctznL7BS4orIUETkT5g=)
                          7: tOgroXFdaurlsBAnJf_gyDRzXX0.crl (hash: RQA3UvGUzGezpEcqJOWyBhEbhEYaUQKbFhs+qnRmNcY=)
                          8: ws_lvviOWiUn6-n1_mvWXNHp31I.roa (hash: 3Nbd+pvEno+PaE0bZIzANyUWQU5DEYEW5i11jMtE2XI=)
                          9: x8JpwXfRjntSd4pmuLKwDDhw_i4.roa (hash: OFNInH/Vi9/sinG5vzHXVvidAVrgK9tFLxn9nt+UYfE=)
                          10: z-6izIL2te2yW3BZT-W-LC6HIiI.roa (hash: g0guTuEhCvQ3u37wIf97G7PMhPvKG3UAOrfC4DGjbl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7f:2b:b0:46:2f:05:da:20:4e:45:db:a9:a5:69:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
        Validity
            Not Before: May 13 04:01:28 2026 GMT
            Not After : May 14 04:01:28 2026 GMT
        Subject: CN=2e09a28ce551bbe6675d317d3583f062a88f5f18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:66:81:e6:ad:84:d4:ba:57:0f:7a:56:19:d8:
                    6e:f8:dd:9d:92:ce:89:8c:c2:13:59:21:b5:f7:9b:
                    b1:89:a7:b0:5c:8a:58:e0:33:e6:f7:11:dd:fa:7a:
                    cc:54:19:58:18:e5:e2:15:22:0f:3d:44:fb:5a:08:
                    de:85:8b:b4:27:d6:a7:d9:c4:03:4a:73:b8:04:a8:
                    8e:2f:aa:e7:55:8b:f0:03:af:0e:a9:e8:c8:34:36:
                    a5:47:6b:ea:a5:ae:ba:f2:a9:db:24:b1:1b:46:c2:
                    9d:63:ce:b1:b2:f2:5b:00:f6:7b:12:bb:ba:82:e0:
                    bd:be:cf:84:88:c6:27:fd:18:36:e0:8e:19:2d:e2:
                    08:57:0e:0b:6e:a5:21:b3:65:a8:65:14:62:a7:fb:
                    d6:8f:08:af:54:fe:58:b0:c7:6f:93:4d:0a:56:03:
                    c7:fb:91:56:76:a3:23:3f:f6:3a:60:90:4b:f6:6d:
                    a8:e6:85:10:2c:18:b1:65:b4:53:e6:d1:88:7a:c6:
                    d9:80:25:6d:63:75:0f:32:8a:97:70:73:92:d3:11:
                    6f:a0:79:a0:c6:a3:ca:e7:4f:14:4e:6e:c8:af:4d:
                    ad:b4:f6:e3:1d:c0:a8:eb:46:d5:4b:f7:88:1e:d2:
                    d1:8f:01:c5:bf:13:a3:8b:95:89:ef:b8:cd:dd:ea:
                    a0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:09:A2:8C:E5:51:BB:E6:67:5D:31:7D:35:83:F0:62:A8:8F:5F:18
            X509v3 Authority Key Identifier:
                keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:f1:b1:1c:a1:25:eb:ff:2f:fe:d8:72:6e:3a:b5:ca:b9:7e:
         ec:52:06:56:b0:3f:e9:d5:eb:3b:2b:fd:4e:bc:13:6d:ee:89:
         f6:b5:ed:aa:24:3c:25:8a:6f:df:1b:d8:3f:28:9c:14:7b:80:
         03:83:5d:91:2b:23:b6:0d:54:d2:8c:20:da:6a:83:0d:e5:30:
         a3:29:41:9b:af:53:9d:73:9b:c3:58:85:d7:dc:00:43:bc:ec:
         26:96:61:d9:60:66:01:db:3e:e6:33:72:9f:ee:e9:12:dc:1f:
         89:fe:b7:9b:42:6f:a5:38:39:79:49:d8:42:39:24:d0:13:4a:
         8b:91:88:76:c3:27:db:db:2e:39:3b:e6:e8:a1:6e:f9:79:05:
         77:5f:60:e0:b3:25:4f:84:56:88:16:b1:a3:6c:6f:af:b8:2d:
         77:01:18:60:1b:60:35:81:a1:cf:eb:f5:6e:d9:cd:63:c5:ad:
         f6:8a:af:d7:ac:fd:15:3c:0f:ec:a1:3d:95:31:58:58:70:14:
         19:7a:34:5d:c0:b4:b9:d2:52:db:53:cb:7f:59:33:5f:fc:4d:
         a1:01:a2:34:36:45:d5:e8:ab:f1:fd:f4:50:10:60:8c:50:23:
         31:41:40:8d:94:aa:86:ac:12:2f:3d:74:bf:cc:9b:f6:0a:9d:
         e9:19:51:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:52:21 2026 by rpki-client