Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
File:                     pDtTIrjqOKegRNywZxp126EEPX4.mft (raw, json)
Hash identifier:          6jUBnAoFysx7Hq4Wh9wWFg0Eu36yh9cYqf4Ga//obM8=
Subject key identifier:   7A:B8:7B:50:78:3C:7D:4F:2C:8E:C3:2B:C1:EC:74:9F:C5:76:BA:CF
Authority key identifier: A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
Certificate issuer:       /CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Certificate serial:       019E1EA2EAC41BA08225B8FB131A4A05FA3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
Manifest number:          190F
Signing time:             Wed 13 May 2026 00:00:53 +0000
Manifest this update:     Wed 13 May 2026 00:00:53 +0000
Manifest next update:     Thu 14 May 2026 00:00:53 +0000
Files and hashes:         1: AREZ7-I4dY-lVbG1KNvmj3abde0.roa (hash: 5iBy3FivOVWf36BTRuKIxy1pHWbIkHkYDe7qIgLbr7U=)
                          2: pDtTIrjqOKegRNywZxp126EEPX4.crl (hash: xy6YU6JEb3L2oNeqik7QRsbLU/4Qwv5pR9vMH8v5M6Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 00:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:ea:c4:1b:a0:82:25:b8:fb:13:1a:4a:05:fa:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
        Validity
            Not Before: May 13 00:00:53 2026 GMT
            Not After : May 14 00:00:53 2026 GMT
        Subject: CN=7ab87b50783c7d4f2c8ec32bc1ec749fc576bacf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c8:d5:77:28:b1:40:1f:78:6b:50:bf:ec:0e:
                    61:a7:c4:2e:69:eb:24:7e:d0:dd:5a:37:02:bb:89:
                    78:ee:4b:b6:53:7b:11:e4:80:11:ae:51:de:63:14:
                    21:58:03:7c:94:00:8a:fa:c3:2c:28:a0:7a:b6:9a:
                    cc:95:12:e4:0c:76:25:88:6c:9e:1a:8a:90:e7:cf:
                    4f:23:a6:58:8e:63:8d:57:52:b8:f3:46:10:83:d5:
                    b3:ab:31:28:0e:0d:2f:4f:00:4d:63:7a:c7:a5:62:
                    65:06:5f:4a:21:4b:bc:d0:22:42:b2:7c:0b:2a:14:
                    58:f3:7f:20:50:27:49:e7:8f:ff:d6:12:9b:0d:c4:
                    7f:14:98:09:50:f0:19:a2:52:73:c1:d8:0b:e0:22:
                    f9:c0:66:f8:6e:20:6d:67:64:a0:3f:f9:30:d6:9c:
                    7a:18:d7:be:ca:f8:19:43:85:b3:93:55:61:42:92:
                    03:09:e9:35:89:46:de:1b:29:b8:e7:bb:84:a5:82:
                    e8:fe:67:f5:d5:15:a6:3c:bf:fd:4f:8f:05:fb:99:
                    18:e4:b2:a4:b3:65:64:0e:03:8e:7a:93:a5:f6:b7:
                    16:1f:5b:7e:8c:43:5f:cd:df:a9:bf:ec:2a:86:91:
                    e3:dc:a7:83:cf:d5:ba:1a:49:25:3a:9c:e7:4d:a4:
                    fb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B8:7B:50:78:3C:7D:4F:2C:8E:C3:2B:C1:EC:74:9F:C5:76:BA:CF
            X509v3 Authority Key Identifier:
                keyid:A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:a0:c7:36:41:5b:a3:5e:3f:16:2f:26:01:2a:fe:44:41:ac:
         9a:37:50:93:27:85:b2:3a:56:3e:be:a2:6a:cb:c4:a4:42:c5:
         12:0d:7d:e2:75:0b:c8:11:59:5f:39:28:4a:77:66:10:9d:44:
         9c:d9:fe:14:ba:31:47:8e:df:e0:12:c5:79:0c:44:2d:cb:fa:
         10:46:21:3e:37:8d:17:b2:92:7d:32:72:8c:fa:c0:b1:73:32:
         e2:57:a7:b5:72:b7:27:19:da:27:5a:a4:66:34:6f:df:a7:17:
         c4:f3:ef:e3:93:6d:14:18:8a:5b:00:0f:f8:a8:78:aa:9d:21:
         9a:da:7a:dc:63:42:2b:ff:60:85:22:17:cc:1a:d2:32:8d:09:
         cb:7e:68:fb:35:a8:db:0e:7c:75:be:0b:ed:6c:36:8c:ed:f7:
         5f:d4:51:cb:d8:45:a1:7f:9e:b0:70:5b:38:7d:6e:9d:fd:46:
         8c:fd:88:18:67:77:d5:d4:c1:1a:10:b2:ec:fe:56:01:f1:51:
         fe:14:47:03:78:85:5f:b3:ab:e6:fe:62:f1:46:2b:f3:2f:09:
         8f:7f:ab:bd:90:b3:ae:a3:61:03:ed:ec:ed:1a:1c:9e:04:bc:
         eb:0b:bc:38:b6:82:e6:20:35:2d:43:9f:12:33:68:a6:1b:79:
         62:ca:f9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:46:07 2026 by rpki-client