Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
File:                     TS-f1cihTNyfMcRYXNYNtXz_tMI.mft (raw, json)
Hash identifier:          D/Bf8a54FIqQWZdw3EFTKGB26LqjW3YQJlco1tZNpkY=
Subject key identifier:   7F:26:29:AD:19:C4:8A:84:18:8B:87:4E:D8:A2:0D:56:C5:AD:D0:64
Authority key identifier: 4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2
Certificate issuer:       /CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
Certificate serial:       019E1EDA26D960305EFE8A8DA0555870C911
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
Manifest number:          0FCA
Signing time:             Wed 13 May 2026 01:01:13 +0000
Manifest this update:     Wed 13 May 2026 01:01:13 +0000
Manifest next update:     Thu 14 May 2026 01:01:13 +0000
Files and hashes:         1: 1-PcZA739O5jfsTyXtX2e6TIscS4.roa (hash: 8TW2rD12HBFWQAtxdbCJfapV59e5j+ulrB4BqMjg04I=)
                          2: 3bJDocgywntndtsfu_qK9cHpMt8.roa (hash: yNfaNNmmyD1SlEI3Ljm5OugJbl2m1Klcep+P5DT4G+s=)
                          3: O7SMXsiP2jcDC8ds3aHzihHcVV4.roa (hash: dRUITjUibnbbNquhA0z/5LyEKxqqyfiN2wuu/O3f8z4=)
                          4: TS-f1cihTNyfMcRYXNYNtXz_tMI.crl (hash: EqLijN4xcCBWKagK32WNkARMb/kqj8Uc0aZZPFUpLAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 01:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:26:d9:60:30:5e:fe:8a:8d:a0:55:58:70:c9:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
        Validity
            Not Before: May 13 01:01:13 2026 GMT
            Not After : May 14 01:01:13 2026 GMT
        Subject: CN=7f2629ad19c48a84188b874ed8a20d56c5add064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1c:fa:f9:7b:02:0b:67:7f:49:0b:64:cb:c1:
                    8e:cd:a1:a4:9f:d0:91:bb:e6:77:77:53:27:3d:e2:
                    79:e0:5d:1a:d8:f7:72:58:6c:20:b9:25:a7:a6:4b:
                    e9:31:81:38:27:b6:d6:78:7e:33:f6:00:59:d8:c8:
                    97:92:8e:89:9f:29:36:05:c5:c4:d5:ef:c6:fb:80:
                    86:45:90:f0:d0:d7:6e:68:32:cd:2a:06:49:33:1b:
                    23:64:11:66:71:93:96:51:17:84:f5:7f:8c:56:a6:
                    63:bd:46:ba:eb:54:44:fa:15:2c:6b:03:f4:fc:a4:
                    6e:61:11:f4:a6:6b:56:47:a0:77:c8:60:6d:a0:86:
                    a2:e1:88:6d:03:25:3f:6d:4a:a8:32:6a:44:3b:bf:
                    69:bf:30:a3:67:dd:0b:bd:7b:6f:35:30:1c:4a:69:
                    2a:ef:d7:49:90:c3:c5:a5:65:ab:be:61:1a:7c:a0:
                    bd:af:cd:12:12:4b:8e:41:9f:00:4f:65:0b:35:7e:
                    3c:b2:b4:fc:94:9c:00:4a:3a:aa:a8:ca:1d:00:3f:
                    aa:c0:aa:27:b2:e6:6f:a6:0e:8c:4d:67:bb:b4:7d:
                    b1:95:a5:73:cb:86:ff:61:04:07:22:ea:ec:6f:2d:
                    8a:37:a2:40:90:9d:78:ec:b8:88:f6:3a:f4:98:ad:
                    ef:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:26:29:AD:19:C4:8A:84:18:8B:87:4E:D8:A2:0D:56:C5:AD:D0:64
            X509v3 Authority Key Identifier:
                keyid:4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:e4:8f:7f:82:ce:22:fb:8c:da:b1:52:bf:15:e8:73:c8:0b:
         e6:09:f3:bf:5a:57:06:7b:73:be:15:97:4f:2e:7a:be:d3:7e:
         38:fe:39:16:33:8a:db:9a:8e:74:18:35:a3:95:78:dc:63:55:
         1d:6b:4e:b6:12:8a:6c:ef:3b:54:84:c6:9b:ad:a5:84:ec:46:
         45:d9:aa:cc:3c:9a:aa:2b:cf:2f:c6:38:c5:13:1c:62:36:de:
         21:5c:cb:3c:07:7f:9e:6c:e7:3b:fa:57:d8:48:16:62:0c:47:
         77:d9:51:90:d4:41:dd:5d:87:a4:eb:62:c7:7b:52:11:6c:b2:
         f7:7b:4a:56:bb:1b:66:f1:a6:ba:cc:0a:97:52:7b:21:30:62:
         81:16:8a:72:12:10:e0:ed:39:02:3d:cb:3c:9b:28:52:fb:de:
         b0:b5:d8:65:27:e3:8d:bd:0a:13:59:98:70:28:9d:a0:a5:2f:
         ae:1c:03:0b:72:02:f2:ef:5d:ab:06:74:88:c9:a7:1a:31:46:
         a6:35:7b:dd:d4:04:99:72:e6:61:01:b2:83:42:d5:80:2e:5f:
         ab:aa:36:7d:0b:c6:04:72:db:ca:e1:c5:42:98:d3:65:fb:df:
         ef:64:92:7f:a0:fe:59:8c:15:c9:81:71:0d:81:1b:1c:d5:ef:
         1c:17:ac:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:52:49 2026 by rpki-client