Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
File:                     lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft (raw, json)
Hash identifier:          j24pmwMQOKgGa7G0sCq2YihjIqavWG6O03IH+tWh4lM=
Subject key identifier:   3B:E5:ED:42:61:80:57:CD:5D:43:20:88:AD:64:94:55:E1:D5:78:C9
Authority key identifier: 95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3
Certificate issuer:       /CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
Certificate serial:       019E1ED9EEFEA39B07F0A86D75AE630CB32D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
Manifest number:          1898
Signing time:             Wed 13 May 2026 01:00:59 +0000
Manifest this update:     Wed 13 May 2026 01:00:59 +0000
Manifest next update:     Thu 14 May 2026 01:00:59 +0000
Files and hashes:         1: Ma4-s3p8OYdm49PN9wCv4RVM25E.roa (hash: yb+AmQCW6F3wk6Dw7rJ8p1d4IUrMtPkPRMTUiBpQr9Q=)
                          2: lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl (hash: st16/ppx2JRkZ7DfjhS6fkyvNZxEdWdkh5xKVEfZ728=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:ee:fe:a3:9b:07:f0:a8:6d:75:ae:63:0c:b3:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
        Validity
            Not Before: May 13 01:00:59 2026 GMT
            Not After : May 14 01:00:59 2026 GMT
        Subject: CN=3be5ed42618057cd5d432088ad649455e1d578c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:81:9a:cc:ea:07:c2:1f:f6:5e:ec:05:ca:43:
                    0b:cf:b7:24:b8:4c:0b:5f:d1:1d:6e:15:03:db:de:
                    29:8d:3e:c4:f5:16:27:b6:6b:cf:e9:60:74:e3:1e:
                    9f:ed:cb:07:8c:67:a9:60:a0:68:3c:8b:56:c8:ff:
                    ba:66:57:5c:cb:c7:89:e2:11:01:1e:63:85:9b:19:
                    26:b0:35:37:b6:a7:75:02:90:51:0b:39:6b:b9:2a:
                    f5:fe:94:2c:53:ca:cf:00:b1:8c:ca:4d:04:88:03:
                    e9:3a:93:59:8b:a2:3e:1e:71:47:e6:67:e6:b9:fb:
                    38:43:30:2b:e4:3f:0c:01:a7:81:83:98:c8:e9:51:
                    8b:f8:77:3c:95:a4:56:79:18:4d:31:73:fe:cf:47:
                    87:c2:a1:bc:57:ca:6d:82:62:49:20:21:ac:c2:54:
                    8f:cf:a8:7d:73:d7:5d:bd:83:0c:2d:c8:fc:1c:0b:
                    12:04:16:ee:a2:2a:d9:30:a3:33:b7:c0:4a:7b:c2:
                    7b:12:34:94:ca:7a:0f:2a:64:ca:90:fe:f0:e3:0b:
                    ed:6a:19:33:61:06:ee:09:cc:cd:cf:17:07:76:89:
                    61:54:fb:b7:61:77:36:bc:2d:54:d3:1c:79:25:30:
                    ad:ce:30:d4:ea:4f:6b:c5:23:98:3d:cc:c3:ed:29:
                    21:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E5:ED:42:61:80:57:CD:5D:43:20:88:AD:64:94:55:E1:D5:78:C9
            X509v3 Authority Key Identifier:
                keyid:95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:91:1b:f8:61:fd:ec:2f:65:b8:40:8b:a6:2d:1a:49:7e:8a:
         d4:a8:fc:63:4b:ed:8f:ee:85:cf:36:3d:0c:3a:80:64:2d:77:
         82:4a:35:97:2e:20:44:5e:5f:72:27:fe:41:ac:8e:3a:cb:eb:
         af:55:44:83:c1:cc:d5:30:ca:78:d8:dd:d5:6b:1e:e2:d1:5c:
         36:6f:be:67:47:b4:e6:32:45:3e:d6:04:71:4a:b0:cb:90:47:
         d2:bb:8e:9e:14:52:c9:2e:b7:60:b6:2b:64:ce:03:7d:12:17:
         6e:af:9b:b5:22:ac:e7:34:fd:86:f0:46:b6:02:47:22:43:ef:
         65:48:ed:d9:af:6c:e9:a9:d6:f1:0b:d6:75:7d:9a:25:3b:e9:
         d8:41:9e:27:cd:c8:7b:64:4e:2a:9d:6c:9b:08:60:80:cf:e1:
         12:03:a1:7f:40:51:0f:72:d4:4e:32:24:33:5d:b6:de:88:c6:
         6f:c2:1c:87:27:86:63:fa:86:21:91:df:63:9f:c3:43:98:5e:
         de:f7:f9:a8:d1:48:7c:ad:1a:a3:42:e9:45:29:ed:3e:37:56:
         2d:9c:53:44:05:80:5b:e5:fa:ea:5e:49:86:bb:85:50:32:36:
         4e:d3:2f:b5:6b:17:37:40:69:59:27:11:b6:f4:b7:5c:6b:b5:
         ce:12:7a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:12:26 2026 by rpki-client