Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
File:                     xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft (raw, json)
Hash identifier:          DLRxYRzjtY1uI5wfWW+huEwnPw1z2y+tFTdBX+gDP5s=
Subject key identifier:   CA:B0:B6:54:E5:66:AA:C8:AF:D1:DA:55:90:B1:0F:45:18:C2:20:C6
Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
Certificate issuer:       /CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Certificate serial:       019E1E6C816314DC2C96086908B51EC18BAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
Manifest number:          1919
Signing time:             Tue 12 May 2026 23:01:27 +0000
Manifest this update:     Tue 12 May 2026 23:01:27 +0000
Manifest next update:     Wed 13 May 2026 23:01:27 +0000
Files and hashes:         1: 5nzdgTkkHsT4RLbgZ2GRcxsXvB4.roa (hash: qdwMngtFVt4ZyT/UodrlBdn1CZ1QUvtY6m9NXbdSStU=)
                          2: DYkV04gki79D3asculnZRcHU37Q.roa (hash: qlIkHsV6HBqGkc4tTxIBB1jTZcTStbiHUpGcVOphuGk=)
                          3: X-ehgfatBtOAnRXcz6-5Jx0F8B4.asa (hash: /YVTHqMQAjpDaMD8b9BYDBTtlnwA4KQTEd5uL4RrvtQ=)
                          4: wQTE-RQ3gReLtYxe4QY_Q7yg75Y.roa (hash: xzHJiZgBxtEtCYr9MbTY6G8tT0OCniElkcH6xF7+Cv8=)
                          5: xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl (hash: HBt3aOfPmXIbeRJtxekiZowDVtbc9phtboyzLiytD/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:81:63:14:dc:2c:96:08:69:08:b5:1e:c1:8b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e
        Validity
            Not Before: May 12 23:01:27 2026 GMT
            Not After : May 13 23:01:27 2026 GMT
        Subject: CN=cab0b654e566aac8afd1da5590b10f4518c220c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f2:03:9d:98:7d:91:d5:f9:75:88:9a:a8:4f:
                    3f:60:6b:5e:39:4b:ce:e2:aa:6f:89:43:f0:a6:94:
                    2a:9e:ac:0d:2f:b6:cb:9f:d8:33:4c:21:03:3e:19:
                    56:ef:67:48:81:bd:52:43:2c:f3:de:e3:79:b9:0d:
                    45:a0:e1:f4:86:4d:85:e2:06:82:84:a0:66:65:27:
                    7c:63:d7:12:1a:6d:75:36:fe:9a:4e:c0:25:24:eb:
                    f7:24:cf:8f:50:01:c3:13:a4:c2:7a:be:ae:90:6e:
                    e9:47:ca:8d:3c:8f:e2:3a:b7:3b:75:32:b7:63:d7:
                    03:4b:9a:96:b1:fa:0b:d4:44:87:cc:0f:ce:2d:a5:
                    47:cc:e4:4f:9f:b3:b8:61:61:ca:d2:77:3a:bf:c1:
                    39:f0:56:ce:87:e1:2f:9e:6f:c1:35:4b:6c:f3:ab:
                    bb:d6:19:a1:40:2b:47:21:d0:3f:d8:7a:01:e0:43:
                    68:26:aa:10:eb:34:39:a4:54:63:8d:08:58:c0:40:
                    3a:5b:bc:30:9b:ca:ff:31:93:4d:ff:ed:35:62:8e:
                    84:7f:f7:13:d1:d3:31:aa:73:0d:42:d5:33:05:02:
                    4a:92:96:49:95:29:a6:29:d2:44:b8:2c:8d:bf:4b:
                    90:ce:d1:0b:fa:47:ba:6d:34:ff:bd:9e:74:a0:4a:
                    77:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B0:B6:54:E5:66:AA:C8:AF:D1:DA:55:90:B1:0F:45:18:C2:20:C6
            X509v3 Authority Key Identifier:
                keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:69:d8:e7:b2:f3:47:38:4e:a8:b8:66:ba:4d:e9:6f:e8:55:
         b0:96:69:68:96:45:73:5d:dd:d6:58:7d:b7:ce:c2:57:26:37:
         49:20:49:ad:e0:67:3c:d8:68:2b:56:5f:a2:da:fb:b3:1a:07:
         bd:12:3b:64:4d:41:80:1e:a2:e7:bc:b4:8e:3a:56:5a:42:a7:
         60:77:89:39:12:3f:b3:ed:52:5f:e5:0f:30:5b:5b:ce:af:24:
         9e:0c:ba:f0:72:c7:36:69:6c:1d:33:a9:bd:7d:ae:75:e4:02:
         a0:d5:41:b7:be:b4:cd:04:05:39:95:2d:df:7d:d5:be:37:a1:
         4c:06:e5:5f:42:51:5b:37:94:e1:2c:19:b1:d3:d0:af:fe:56:
         4f:c7:d5:67:a4:71:5a:d6:c9:37:22:47:b6:f3:c0:76:44:07:
         7c:78:0a:cc:9b:29:fb:72:9b:7e:6f:91:06:62:46:aa:ca:9e:
         86:76:e3:97:17:07:28:03:85:87:a6:57:49:80:38:70:3a:2a:
         87:9f:66:c1:f5:51:13:54:f7:1e:fd:aa:09:76:67:ca:bb:97:
         6f:d7:02:21:f6:d7:1f:2f:db:90:a8:11:12:ae:6e:f3:65:85:
         a0:41:16:fa:91:f6:ad:f2:89:44:8c:86:78:6c:59:a2:7f:a1:
         6b:59:6e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:52:32 2026 by rpki-client