Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
File:                     TjwBugxcvyCuPpPKPTeeYt9clZo.mft (raw, json)
Hash identifier:          2LXzQ8MgnWMBPoNXQ5jHj6UJfEm4rtmDZSJRHnZHKAQ=
Subject key identifier:   DA:CC:A2:66:5E:04:B8:DD:06:54:D0:81:64:52:18:53:F7:9B:26:7B
Authority key identifier: 4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A
Certificate issuer:       /CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a
Certificate serial:       019E1EDA7765FFF4BACDDA639C47410E4928
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 01:01:34 +0000
Manifest this update:     Wed 13 May 2026 01:01:34 +0000
Manifest next update:     Thu 14 May 2026 01:01:34 +0000
Files and hashes:         1: FjQD5obfjitF4TyVNiOnrUuu6ko.roa (hash: 4qN5nXtzPSFJUF4nfX9RAWVMRw9xA5tlQvP0vuood6U=)
                          2: TjwBugxcvyCuPpPKPTeeYt9clZo.crl (hash: 5rSr+uuY9LEj3clKaj0ReyWfqgnugiqwVW/ulYSfs5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:77:65:ff:f4:ba:cd:da:63:9c:47:41:0e:49:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a
        Validity
            Not Before: May 13 01:01:34 2026 GMT
            Not After : May 14 01:01:34 2026 GMT
        Subject: CN=dacca2665e04b8dd0654d08164521853f79b267b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:50:79:a9:e3:09:4e:6a:73:0a:9d:d7:af:3d:
                    4e:e4:79:ba:d6:df:09:b9:77:ca:61:ea:ce:2b:72:
                    7e:08:9e:5a:cb:d4:1e:87:fd:be:23:c1:e6:65:cf:
                    0b:07:09:c7:07:da:48:97:55:ba:ec:e0:5a:8f:a5:
                    b7:75:52:70:19:57:9a:6e:c0:bf:da:f9:a5:15:8d:
                    cc:ac:4a:cd:cf:1b:c1:33:96:9e:73:c8:57:9a:f6:
                    55:e2:29:38:41:f5:c8:4d:6e:5b:fa:8a:f5:ec:ad:
                    aa:11:f6:43:c5:a7:19:66:a0:39:4e:64:33:7a:4c:
                    f8:2f:8a:5e:60:2c:7b:cc:d5:32:d4:b1:21:32:8c:
                    b2:ad:f7:c6:2a:d0:48:ff:9a:57:3f:c1:57:31:03:
                    e9:c0:64:46:f8:bc:38:76:a5:a3:88:85:e0:94:73:
                    7a:a0:4b:8d:07:55:85:16:fc:e3:25:a2:fc:e0:d2:
                    54:13:e2:78:1d:c6:90:7e:76:76:3b:87:0b:4b:c1:
                    f8:d1:e4:d2:77:ec:a5:b4:92:a9:4c:db:5b:a0:e3:
                    b5:76:c8:11:e4:40:25:5f:4a:c9:fb:68:69:eb:fc:
                    26:b7:5c:7d:99:48:de:d5:04:c2:b9:e0:a6:86:87:
                    22:b8:6b:38:67:c5:fa:9e:da:fa:6b:d7:3b:ec:a6:
                    b0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:CC:A2:66:5E:04:B8:DD:06:54:D0:81:64:52:18:53:F7:9B:26:7B
            X509v3 Authority Key Identifier:
                keyid:4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:e4:b0:bd:c5:d1:a1:fb:a5:1e:5b:93:04:11:a5:aa:dd:ff:
         28:6c:1e:94:82:37:59:f1:5f:2d:e1:4c:d7:f5:b0:9e:98:9f:
         25:e4:1a:19:66:66:e9:dd:61:1e:cc:4b:4b:aa:35:f7:35:de:
         53:24:ce:da:0a:2f:7a:a7:98:e0:cd:48:59:18:97:35:a3:a4:
         08:da:95:bd:5f:89:1a:79:ec:cf:ac:dc:62:c3:98:0f:0b:58:
         42:79:a3:ed:ed:81:19:4f:05:06:65:d4:a8:b0:2d:a0:66:42:
         de:7b:f3:3c:07:7a:54:44:da:c8:84:8a:21:35:75:77:d4:91:
         c7:77:d9:7c:ee:6a:ff:be:49:0d:55:3d:2e:84:7e:43:b7:e8:
         98:12:71:e6:1f:eb:f2:d9:bb:b9:50:ad:e8:56:50:8c:52:d9:
         8e:c3:20:65:b2:85:0e:45:2c:46:14:2d:ba:74:96:db:dc:85:
         32:4d:03:3c:aa:f9:0f:de:93:9d:1a:99:02:56:9f:91:2d:c3:
         60:f2:6e:99:88:1e:98:f7:90:85:d3:24:2a:94:fa:f5:1d:35:
         57:3f:ea:52:ee:4a:41:77:9e:8b:fd:dc:a8:e2:3a:eb:d3:5b:
         c5:3c:93:11:46:26:6b:6a:11:5e:08:74:d0:df:40:f6:f6:75:
         31:7d:21:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:44:08 2026 by rpki-client