Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
File:                     tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft (raw, json)
Hash identifier:          T4rswrsfCTZPzsKl4OTSqTWfMpa+ZPSc4VTmaBCvMuw=
Subject key identifier:   1D:0D:BD:76:18:96:21:35:CA:57:0E:A0:22:D2:F9:73:93:3A:A5:7B
Authority key identifier: B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
Certificate issuer:       /CN=b573d2dda93e420409163da59e7414ee91a2eef2
Certificate serial:       019E1EA3BE8078493E2093E1DE5E84C40BA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
Manifest number:          03A4
Signing time:             Wed 13 May 2026 00:01:48 +0000
Manifest this update:     Wed 13 May 2026 00:01:48 +0000
Manifest next update:     Thu 14 May 2026 00:01:48 +0000
Files and hashes:         1: 0mP1ztpahebUSVqYXstfQVo6lU8.roa (hash: ROTZ3HoBIhGjMRa1VghM4xscpCElB4RFAaHFDBzcBcc=)
                          2: tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl (hash: E4LQMKLMYee3hooXwx+aFKtxwug/Y8EZah6eMRgwwkE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:be:80:78:49:3e:20:93:e1:de:5e:84:c4:0b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b573d2dda93e420409163da59e7414ee91a2eef2
        Validity
            Not Before: May 13 00:01:48 2026 GMT
            Not After : May 14 00:01:48 2026 GMT
        Subject: CN=1d0dbd7618962135ca570ea022d2f973933aa57b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a6:9e:4b:52:ac:42:4e:c0:a3:cf:2b:fb:90:
                    56:5e:a0:df:7d:b6:53:9b:5b:69:4e:25:a7:68:ed:
                    d3:65:77:21:fc:11:fb:b5:81:06:30:99:2b:3d:79:
                    e2:fe:fd:8a:9d:11:8b:c7:a2:1c:df:82:95:02:6b:
                    e1:31:3a:1d:ee:94:90:ee:39:91:e2:d1:ad:69:39:
                    41:c3:b9:53:83:15:ba:e6:22:48:d1:5f:c3:13:62:
                    b6:03:01:c5:78:ee:08:79:d4:17:c3:a0:80:86:5e:
                    2f:4b:16:99:1d:4d:c2:b5:72:80:cd:e0:f4:19:41:
                    f3:62:7f:ac:ce:64:7d:98:ca:b8:0e:de:09:61:51:
                    01:8c:23:7c:a8:d7:06:7f:fd:c0:23:fe:11:fc:d3:
                    f9:1a:73:d8:96:16:fc:8d:53:22:ff:02:ca:f8:6d:
                    d5:2e:ae:bd:f0:b4:ab:a9:df:ac:1a:03:6e:9d:ca:
                    87:3c:41:2a:33:bc:d4:a7:d0:af:49:d1:8e:01:71:
                    50:9a:56:c1:97:64:70:9e:a5:d2:b7:27:1b:be:b5:
                    bf:67:70:14:72:3b:22:fc:fb:9f:a7:91:76:5b:bf:
                    87:c7:7e:27:9c:98:7c:af:be:8f:17:1b:c4:ee:ca:
                    1a:11:1a:36:c0:20:cd:92:62:d6:02:fb:a8:68:e3:
                    e3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0D:BD:76:18:96:21:35:CA:57:0E:A0:22:D2:F9:73:93:3A:A5:7B
            X509v3 Authority Key Identifier:
                keyid:B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:b8:13:45:7e:23:72:ef:68:7e:90:fc:68:40:15:2a:fb:0b:
         ca:03:d4:f5:13:9b:16:8d:21:79:5c:ec:08:5e:18:c1:0b:ce:
         a6:8a:61:de:95:a1:db:07:97:f0:a6:d6:ea:96:87:2b:1b:a3:
         11:53:07:8b:98:00:ba:65:ba:9a:83:14:fb:60:a9:e1:d2:c1:
         8d:c0:9f:3d:bb:b5:91:7a:81:ad:7d:3a:1d:ca:af:cb:8a:71:
         20:66:5c:a9:c0:a0:fe:1a:c1:3e:13:f9:10:0c:ac:dd:1f:44:
         bf:35:37:a8:49:95:ed:16:d0:8e:99:4f:c4:69:3c:58:c5:a9:
         a1:e3:ba:2a:c8:8b:bb:28:22:f8:31:e2:cc:a5:6b:e7:f1:d5:
         8a:4b:65:40:50:8d:88:f1:1b:82:37:b7:39:89:c0:5f:bb:a9:
         87:0d:13:01:d5:82:a9:62:57:90:ae:be:4a:18:1d:e0:22:d2:
         5d:5c:5a:48:fb:02:64:50:0d:0e:a7:71:d8:ed:38:c7:05:0e:
         e9:f7:50:2f:30:06:cd:db:a3:bb:d3:e9:9a:54:10:55:9b:d7:
         79:6f:b9:a2:25:0c:7a:bb:54:3e:bb:fd:71:32:d1:94:25:2d:
         20:c3:b4:8c:71:f9:64:c9:c7:27:8e:cc:bd:b6:e7:a9:e0:3f:
         98:4f:ef:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:29:44 2026 by rpki-client