Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
File:                     s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft (raw, json)
Hash identifier:          OCioo1IAZOSgBMkl5UuHep9iyf9Nio21LoeEOU9o3S8=
Subject key identifier:   EB:04:CE:E1:40:B4:29:1C:47:B8:A6:16:00:B5:44:54:BE:F7:8E:93
Authority key identifier: B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06
Certificate issuer:       /CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
Certificate serial:       019E1FECBE0F1397A91492ADD2B2F86589F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
Manifest number:          1912
Signing time:             Wed 13 May 2026 06:01:09 +0000
Manifest this update:     Wed 13 May 2026 06:01:09 +0000
Manifest next update:     Thu 14 May 2026 06:01:09 +0000
Files and hashes:         1: KvgeqJVMtBERBgaWeQ7l2q_TyyI.roa (hash: NJUE6bdAubYbnAUIE6s0c5Wi5PY+ros78NmtfNQmGAk=)
                          2: Of_F0nZx4uUMsyu_MFlv9vqYM6A.roa (hash: V1xfi16Y3WhXqWRGet3YcxqXtnKz/3AWs7HoDzA48YM=)
                          3: _VVNfxdA5_FHj05YYq547OSKmlQ.roa (hash: 13IEzG/o1pmkzrgbkejU8IZuzD7A6Ft+aR2tUe+BCq8=)
                          4: bnU5Q0FeKCXPHTgsxSNx9kV93d4.roa (hash: jfuS4WANPOwG9IyimGe8aZrpP9Pv78GN//1LDqZ2n2k=)
                          5: ck22982XPjtgcPjy954uVGCKcK0.roa (hash: xSnMILKaL4KrwNXzralU8vyZN836vuMs+IKmeHjf9vw=)
                          6: s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl (hash: 8KMMYVfD0nIp6Vsrzqmi6qK+/TK7blm3gJqBb9b2udE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:be:0f:13:97:a9:14:92:ad:d2:b2:f8:65:89:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
        Validity
            Not Before: May 13 06:01:09 2026 GMT
            Not After : May 14 06:01:09 2026 GMT
        Subject: CN=eb04cee140b4291c47b8a61600b54454bef78e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:10:61:e4:f0:94:3e:e7:8e:13:d8:59:8f:2d:
                    78:23:f5:3a:55:7c:c6:89:da:c0:db:a1:f2:72:bb:
                    14:99:43:2f:e8:2c:12:b0:cb:d5:6a:02:e8:4f:9a:
                    c2:91:01:52:50:a2:12:9c:3e:01:0d:ab:de:19:f0:
                    5e:59:34:36:78:c7:7c:2d:91:c1:28:64:86:1f:15:
                    80:70:46:59:96:c1:61:bb:86:d4:62:20:e6:68:8a:
                    0f:37:0e:9c:a5:8b:d6:cd:44:84:23:a5:c2:47:5a:
                    34:98:d2:6b:96:22:70:23:42:59:33:6a:84:b2:e4:
                    77:9e:7c:b1:71:55:1c:4e:b3:02:db:93:f2:8f:15:
                    a0:3a:b4:57:66:22:f2:ce:f5:be:3f:ff:36:38:68:
                    d6:c8:f5:8c:eb:49:a9:4c:47:72:1b:55:f3:de:16:
                    68:4b:67:e4:9e:c2:2f:f4:13:77:e5:51:ea:ad:03:
                    69:0b:ab:44:99:33:cd:43:ed:eb:68:f7:5f:87:76:
                    f0:89:c3:17:db:19:7f:e7:9b:22:84:2b:68:4e:f8:
                    7c:19:d3:df:f6:c6:94:d9:2e:aa:5d:59:7f:ac:2a:
                    93:83:45:91:c9:d4:7f:77:b5:9d:f5:90:00:2a:0d:
                    16:2a:3c:cc:2a:d1:46:23:a4:49:bd:70:a4:c7:72:
                    58:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:04:CE:E1:40:B4:29:1C:47:B8:A6:16:00:B5:44:54:BE:F7:8E:93
            X509v3 Authority Key Identifier:
                keyid:B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:d7:37:89:63:ba:73:2e:6d:2f:48:f1:cf:02:70:82:50:2c:
         33:d6:6c:9c:dd:09:22:73:80:3d:08:c6:d6:ff:f5:41:9b:b7:
         50:bc:0b:68:1d:e8:a6:82:fd:e6:93:cb:db:94:38:45:df:37:
         5f:4c:b3:fe:a1:a2:d3:e8:01:6b:4d:1e:19:5b:51:b3:bd:e5:
         a4:07:0d:5a:0e:db:cd:41:70:88:8d:e0:aa:f1:2f:40:67:0d:
         be:35:be:c0:db:91:07:7c:45:4f:a9:59:c3:46:33:89:78:c2:
         a0:a0:ce:7d:13:59:b4:31:b4:9a:f5:3d:80:18:44:f9:2c:2f:
         91:06:c8:4a:91:78:75:a6:e7:80:d8:1e:19:0f:91:d8:b5:52:
         41:7a:16:be:b5:03:e0:21:66:9a:b4:6c:d4:da:0f:45:9c:c2:
         d5:44:ef:32:68:ba:8d:3c:dd:4b:16:e8:97:79:dc:82:2f:e0:
         51:f9:66:8c:9e:16:d4:e5:35:56:45:44:18:18:7e:e6:57:fb:
         7c:50:37:f9:61:84:e6:a1:b0:0d:e1:bb:fe:c2:ac:67:c3:95:
         b7:fe:a7:60:9d:78:28:2a:58:6e:50:c1:9a:14:e5:6a:1d:fc:
         4e:44:49:a2:77:e7:43:64:dc:87:cc:3b:2a:f7:c2:cc:f8:14:
         ab:ce:5e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:53:11 2026 by rpki-client