Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft
File:                     sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft (raw, json)
Hash identifier:          lOPPymp7L5unZLY7psI9NX+h7/sorso8/IuP+LNMGPk=
Subject key identifier:   FA:97:21:09:06:A1:6E:D3:AE:29:37:45:0F:89:A6:49:27:EC:AD:E2
Authority key identifier: B1:35:37:79:01:A7:87:1D:3B:FF:7A:70:27:7A:2F:4E:2F:C0:E2:77
Certificate issuer:       /CN=b135377901a7871d3bff7a70277a2f4e2fc0e277
Certificate serial:       019E20FFBD7E2FBC14C2553D26E73DEEB95D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft
Manifest number:          190B
Signing time:             Wed 13 May 2026 11:01:31 +0000
Manifest this update:     Wed 13 May 2026 11:01:31 +0000
Manifest next update:     Thu 14 May 2026 11:01:31 +0000
Files and hashes:         1: 3KMzftpbJOARIPFwkH4LCQGCFNw.roa (hash: kXGt4d9WD7X2Wn0o/hJTyXRdGjpQM8KJT8r0nz9hLnk=)
                          2: EvXM-b680z9EvOO26D18ZcZMtPQ.roa (hash: yR1psjcP7WJDLXrNWlxvJsBJL/7C/J53luvxS8fesS4=)
                          3: MbElJ8xEe4i1aAEcPWf9npQhsRQ.roa (hash: y0BpW+ED+DBGHKnzwkRr54CaMuONa/0J2GLDI7kjsb0=)
                          4: sTU3eQGnhx07_3pwJ3ovTi_A4nc.crl (hash: d21ZOvKU0rVkq5inVcYjGQNruFUg67qPDEJHwcT+gKk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:ff:bd:7e:2f:bc:14:c2:55:3d:26:e7:3d:ee:b9:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b135377901a7871d3bff7a70277a2f4e2fc0e277
        Validity
            Not Before: May 13 11:01:31 2026 GMT
            Not After : May 14 11:01:31 2026 GMT
        Subject: CN=fa97210906a16ed3ae2937450f89a64927ecade2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c0:8d:ec:e2:5c:e1:c1:d0:8f:c6:d7:d7:ef:
                    87:38:c8:97:96:0b:d7:f7:44:1f:29:cd:83:79:e6:
                    6c:c9:37:92:2f:a0:7c:f8:5c:34:24:90:75:78:94:
                    eb:2a:63:90:c6:5b:36:be:8f:9e:b4:0c:cd:80:b0:
                    7b:03:d9:07:b5:87:63:88:7f:2b:c3:2b:c3:af:c8:
                    4d:ad:ef:cc:15:62:e5:73:ee:74:38:04:1d:6c:ee:
                    ee:17:37:e4:41:fe:d1:68:d9:45:f5:87:16:bf:58:
                    50:4e:a7:a9:86:35:df:e2:85:28:d1:d0:df:be:2c:
                    8b:1b:78:4a:f4:65:22:91:c5:3e:06:77:d6:ce:ca:
                    78:53:61:98:be:40:85:66:bf:f7:bc:40:87:b1:88:
                    8b:a0:5d:f4:83:bd:fa:ee:1f:21:ed:c0:6e:b4:be:
                    3b:40:98:85:b9:54:75:67:9f:27:b7:01:34:dc:35:
                    d4:ff:55:61:68:1d:e0:d8:47:11:d8:8c:6f:55:80:
                    9f:07:f5:56:6c:d8:b0:81:a3:fc:da:79:a1:39:55:
                    08:89:2b:6b:03:7f:6b:77:28:8a:50:81:ac:37:fe:
                    e5:a9:87:72:45:57:78:6b:ac:a3:b4:9d:16:a8:b1:
                    85:e7:17:06:c0:22:79:01:5d:7d:78:bc:5f:30:17:
                    47:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:97:21:09:06:A1:6E:D3:AE:29:37:45:0F:89:A6:49:27:EC:AD:E2
            X509v3 Authority Key Identifier:
                keyid:B1:35:37:79:01:A7:87:1D:3B:FF:7A:70:27:7A:2F:4E:2F:C0:E2:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:42:81:d7:05:26:ad:f8:68:58:e2:3f:82:d4:fd:33:db:10:
         24:76:3c:df:24:3b:54:be:99:df:72:e2:21:ab:f5:69:b8:f6:
         33:eb:95:e2:6e:81:c8:27:62:19:f5:ff:db:d0:b7:92:5c:cc:
         39:ff:3e:c5:5a:b0:d7:7d:88:cd:7c:f9:7d:4f:70:ff:eb:0d:
         4d:99:2e:b5:f2:fd:b5:cd:93:62:21:c1:7e:4b:b3:b6:49:7a:
         9f:1f:d2:03:de:2c:8a:f5:20:1e:43:6f:29:a2:91:89:b6:d8:
         2e:64:39:ef:41:ea:a2:01:a6:8b:26:29:06:6f:7a:fd:82:ac:
         78:d4:38:d7:7b:d8:44:6d:d8:1c:bb:86:f5:67:e7:a4:38:ea:
         7c:e6:07:25:38:da:8d:31:87:c4:c6:5b:66:b9:00:b8:80:4d:
         1b:04:0d:72:cf:ad:f0:b0:26:ec:e5:8e:a1:45:11:11:9d:72:
         74:6a:91:bd:36:a6:8b:37:92:51:4d:55:bf:65:17:a9:aa:8f:
         53:3c:9c:2a:83:9b:e3:90:f0:0d:20:a3:4e:80:fb:7a:4b:e0:
         ab:e3:4a:d5:ae:b6:82:64:92:52:e0:56:57:cd:b7:eb:4a:aa:
         91:fe:00:6f:0f:8c:19:88:de:c6:ca:e7:9f:90:e7:4a:5d:3e:
         14:e5:c8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:16:58 2026 by rpki-client