Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
File:                     PiDHANmNdqnGQBc4ifk2faneiZc.mft (raw, json)
Hash identifier:          lqU/nxGlUL+MN2BlBRUB3Rz2Wjfu5ZNouiq5DjWmZBU=
Subject key identifier:   99:EB:AF:B4:5B:92:14:0C:62:32:42:EE:E7:CB:FF:4F:89:A8:EB:D9
Authority key identifier: 3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97
Certificate issuer:       /CN=3e20c700d98d76a9c640173889f9367da9de8997
Certificate serial:       019E1D90E2DBD473A5BC271BC4D998C705D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
Manifest number:          1910
Signing time:             Tue 12 May 2026 19:01:34 +0000
Manifest this update:     Tue 12 May 2026 19:01:34 +0000
Manifest next update:     Wed 13 May 2026 19:01:34 +0000
Files and hashes:         1: 3Y2bsvd6Ko2TakhACGAC13OxWgg.roa (hash: hop+YCd6wtmHiz87UpYcHYekpewszM4DMDY6Yajc55g=)
                          2: DEt4Y-_VZKpKHUQGndzBwGKa-hI.roa (hash: Pn+dJyctNTmeoTcdBPCYjrOipk+Ikj5vYjRfpzr/AfY=)
                          3: Fd0my4VD8yFhFNY23xVFQ5bNE7o.roa (hash: Xq0TLzzFqkURQ7QOU8lzKIy+PNOHeKXumeKowKwhe0E=)
                          4: PiDHANmNdqnGQBc4ifk2faneiZc.crl (hash: aoHvjLB9Mmjri8ta735RoPFBzjz/m9I/bIndKf525KE=)
                          5: XfL7J3_lKAhMT6FV_AAy67CADLI.roa (hash: Cja0K8hb1CFlq8SDbTIyn6C1tgY/4LTLk6lQT4K0o4Q=)
                          6: uekau7rSPung7Kbe6f858ZuB0t8.roa (hash: M2Y/E4DYJ0oSGWPcmXmrI0IqZMHXZ+8X2D2MD5VVJU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:e2:db:d4:73:a5:bc:27:1b:c4:d9:98:c7:05:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e20c700d98d76a9c640173889f9367da9de8997
        Validity
            Not Before: May 12 19:01:34 2026 GMT
            Not After : May 13 19:01:34 2026 GMT
        Subject: CN=99ebafb45b92140c623242eee7cbff4f89a8ebd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2b:97:83:88:ec:17:b0:ec:bc:e6:d0:71:02:
                    bc:24:42:41:36:dd:d1:b8:0d:51:11:74:94:18:cc:
                    97:92:13:17:40:3e:bb:81:46:8a:d9:66:47:17:4d:
                    33:37:ae:e8:ca:a7:5e:7d:45:c6:55:b2:34:41:99:
                    28:0c:96:8f:f7:fc:de:36:03:1e:51:b6:96:23:87:
                    48:32:bc:80:43:87:a9:ad:e1:5c:aa:bf:24:67:78:
                    b7:61:92:58:fd:5b:82:13:cf:1a:02:e4:71:90:ef:
                    df:2b:99:3d:e6:8e:ce:58:cc:27:db:3f:d6:df:39:
                    47:ce:5d:76:b6:d5:59:c3:66:5a:ba:27:66:a6:85:
                    04:49:0b:e4:dc:73:a4:02:10:cf:81:d3:39:f8:97:
                    b8:3e:b4:e8:64:ca:b8:2d:f8:71:b6:80:20:bb:bb:
                    92:ae:71:12:2e:a0:de:0f:63:90:b3:8b:48:09:04:
                    d2:d0:d4:c9:40:cd:68:a4:97:45:6b:3a:c5:69:35:
                    35:01:0a:36:c6:a7:16:b1:65:9e:2e:56:a9:bf:f6:
                    3b:e0:aa:36:02:89:6b:72:09:db:ff:36:3e:70:d9:
                    38:86:b6:b0:48:a6:12:0a:3a:c1:81:64:d7:ce:5f:
                    7c:8f:7c:53:67:c0:c2:f0:14:d7:1b:70:1b:e6:1c:
                    9e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EB:AF:B4:5B:92:14:0C:62:32:42:EE:E7:CB:FF:4F:89:A8:EB:D9
            X509v3 Authority Key Identifier:
                keyid:3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:77:03:8d:50:58:e4:e1:16:78:ba:6b:5e:81:0d:f1:53:43:
         e0:d8:e2:c3:f3:b8:88:94:90:a5:f2:9f:9e:42:b2:07:8f:c9:
         53:18:b1:f5:7f:b8:66:15:ac:7f:b2:3e:fd:79:6d:56:3f:66:
         2a:b3:5c:ef:a2:25:bc:56:0b:1a:2b:2e:a5:89:50:d9:59:7b:
         fd:db:a7:fb:1b:e0:4a:f4:e2:75:26:2e:c3:bb:8d:f2:b4:8d:
         1a:f5:bb:5b:3f:79:31:a3:8f:5e:16:7d:bf:37:4b:f3:7e:be:
         1a:93:68:dd:cf:13:f3:dd:47:55:a2:9b:64:84:aa:ca:df:fe:
         df:3d:08:f3:07:6b:d6:29:3f:55:0c:ad:8d:00:c6:78:83:d6:
         60:fd:ad:d9:cb:27:bc:f7:44:53:4a:93:b7:79:4d:b1:a0:3e:
         78:7e:96:0f:f3:a4:ad:5e:ff:e9:78:8f:54:17:cb:c6:0d:e7:
         9c:e4:b2:31:54:ec:8e:b0:e7:1f:92:24:e3:c6:80:9a:64:dc:
         ea:67:05:d8:c6:ca:d8:c0:60:af:1f:81:e0:7d:5f:95:18:13:
         fa:f4:ca:5c:c6:25:af:e6:c7:c0:45:83:be:76:3e:6e:c4:34:
         94:e4:e3:f5:db:eb:05:3a:3d:d2:a7:38:79:ee:cb:d3:7c:93:
         70:25:c2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:39:53 2026 by rpki-client