Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
File:                     kPwsEuoXAhuorOBiGJfwhW2sJVk.mft (raw, json)
Hash identifier:          uIc3nlwNt5g701SpGEX+UOm30mg3olSy7Ay+kp904zc=
Subject key identifier:   E9:CC:EF:8F:9E:C7:5A:40:5C:84:33:15:24:AB:3D:15:31:4F:D2:5B
Authority key identifier: 90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59
Certificate issuer:       /CN=90fc2c12ea17021ba8ace0621897f0856dac2559
Certificate serial:       019E1DC7B2F8B24AE5EEAE511A6310FDFAB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
Manifest number:          0880
Signing time:             Tue 12 May 2026 20:01:27 +0000
Manifest this update:     Tue 12 May 2026 20:01:27 +0000
Manifest next update:     Wed 13 May 2026 20:01:27 +0000
Files and hashes:         1: 41FDoFH6M2is1lsICkgfh5ITDqc.roa (hash: EewgyLxSVnO+QoRL7ntY20ccJSFgs1pW1bzWTclj1yE=)
                          2: BRDlyqeJrmrBAcGjXwsME96B8FA.roa (hash: jjDNz/Y1cZhGq2xfdDGq/oEMuXVbmPo8+lz5IqqCETc=)
                          3: kPwsEuoXAhuorOBiGJfwhW2sJVk.crl (hash: fsefoH/uUq0BriN47ipTg+h/mKAPE7w5/861jP7ocX4=)
                          4: nXsgPSU5eo-g-H5HVGkbUxzs-M0.roa (hash: bHUY+9ATlshHA4NGy9V8O1pXq9p6uilZoEQtRA9DmuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:b2:f8:b2:4a:e5:ee:ae:51:1a:63:10:fd:fa:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90fc2c12ea17021ba8ace0621897f0856dac2559
        Validity
            Not Before: May 12 20:01:27 2026 GMT
            Not After : May 13 20:01:27 2026 GMT
        Subject: CN=e9ccef8f9ec75a405c84331524ab3d15314fd25b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4f:2f:5f:da:1e:3e:41:4a:48:5f:77:8f:d1:
                    95:d2:d3:f0:07:17:50:a0:ac:99:ef:f0:69:f5:25:
                    a4:05:78:2d:2b:aa:f6:9a:47:f5:64:f0:e7:6f:dc:
                    65:21:a3:00:95:c9:ae:91:3f:d3:ba:8b:ab:97:db:
                    96:23:7f:05:0c:ad:2e:c5:a0:20:de:50:32:e7:73:
                    54:53:8b:10:b0:cc:37:99:1a:93:1f:d5:2c:e0:02:
                    8a:e2:a6:91:30:5d:01:e1:05:6d:ca:b1:6d:79:ea:
                    91:c4:96:f2:1e:53:32:70:e5:ae:07:9c:cb:14:4b:
                    a2:03:43:c8:bc:bf:04:67:1d:97:0e:45:b3:d5:0a:
                    12:10:53:dd:01:29:fa:b7:b1:26:c1:42:b0:6e:2d:
                    7d:f6:88:fa:80:39:24:96:a5:92:75:4f:ab:4b:58:
                    15:16:ec:ce:f3:72:a1:bf:c8:1c:2f:f8:5a:26:d0:
                    8b:fb:fd:1d:0b:f7:32:f5:3d:6f:6f:ba:ba:9c:dc:
                    a6:bc:8a:1c:b4:bb:61:56:f9:84:12:75:c3:f3:d5:
                    b9:89:26:1f:bc:56:e4:08:33:5d:2b:fc:59:68:3e:
                    9c:fb:bf:3d:66:26:cd:dc:c5:39:2c:df:d7:db:ca:
                    61:26:f4:25:51:20:19:3b:0a:b8:75:54:0a:af:38:
                    6a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CC:EF:8F:9E:C7:5A:40:5C:84:33:15:24:AB:3D:15:31:4F:D2:5B
            X509v3 Authority Key Identifier:
                keyid:90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:30:cd:d0:46:e6:30:3c:5c:22:99:6c:09:92:29:26:e0:a7:
         ef:7b:d8:5c:f5:cc:d3:27:7f:f2:1b:2b:18:b5:de:16:7d:03:
         f3:55:90:5b:0d:02:2e:3d:7a:87:16:bd:e4:95:7b:dd:4d:a0:
         07:d5:69:91:37:bb:56:5a:64:52:90:22:f2:48:f9:01:bc:1a:
         91:d2:f8:98:cf:33:92:d2:28:82:58:19:b6:ce:a1:c8:55:74:
         3c:42:06:63:78:ed:2c:62:3b:72:24:6a:82:7d:00:7e:24:33:
         3c:04:cb:f0:36:b9:f7:1b:5a:b9:b8:56:61:23:84:a8:49:34:
         f4:92:86:d7:b6:ae:20:9d:8d:05:48:be:70:d6:f9:ef:41:aa:
         bb:1b:2f:5b:6a:53:fe:74:0e:d8:8b:9a:48:f3:e4:78:85:26:
         6c:f4:17:04:2e:30:f3:7b:74:f5:88:05:29:21:c3:5e:39:e9:
         c0:7e:c4:dd:70:ee:b2:6e:60:09:21:83:b0:ca:7e:8e:28:19:
         21:28:eb:b6:54:12:f8:d1:a1:db:68:79:28:24:f0:0c:0e:43:
         58:69:74:30:ff:4e:51:08:ef:5b:e0:1b:f7:d9:41:46:18:a2:
         4f:4d:f5:96:7d:a7:1c:7f:ed:5f:ab:e1:cc:3b:7d:64:be:70:
         5d:44:5b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:19:38 2026 by rpki-client