Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft
File:                     5PKoZiAvS4y8MzgtboLYHYlkyA4.mft (raw, json)
Hash identifier:          OwrgbQyodj6NsPLz3AeT7aOPxpn4LJUSbRaoPieE2mo=
Subject key identifier:   6D:07:38:B3:EA:07:A1:D4:63:1B:1A:B0:F7:BA:5A:30:64:A4:07:0B
Authority key identifier: E4:F2:A8:66:20:2F:4B:8C:BC:33:38:2D:6E:82:D8:1D:89:64:C8:0E
Certificate issuer:       /CN=e4f2a866202f4b8cbc33382d6e82d81d8964c80e
Certificate serial:       019E1C7DC9C0709F16051B43EC52F5BD6C1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5PKoZiAvS4y8MzgtboLYHYlkyA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft
Manifest number:          190D
Signing time:             Tue 12 May 2026 14:01:06 +0000
Manifest this update:     Tue 12 May 2026 14:01:06 +0000
Manifest next update:     Wed 13 May 2026 14:01:06 +0000
Files and hashes:         1: 0_tFJYeiflxsIJ9bhjlTeIiAEJc.roa (hash: USV70Tn6bwMKjWSZ09NQefEfFL6vsHQ3fPX3IL9JI1s=)
                          2: 5PKoZiAvS4y8MzgtboLYHYlkyA4.crl (hash: qsyy5qv2vkz2PZS5ocRMvatKsbxW9uyEvwwZgJPRDys=)
                          3: av_HZf6EAwlDsvNiqOK233RQvoM.roa (hash: GY5qM+O2sWQRx1EcDLewr4LGFVQxjYE9jkUci4HJmic=)
                          4: ullWMQMNWNs2m-qavM2ZaH0wLLY.asa (hash: Hs+EUjaBHhmBRRhyoMI5LyzKTqwRJd2HGRT6RAN80K8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5PKoZiAvS4y8MzgtboLYHYlkyA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:7d:c9:c0:70:9f:16:05:1b:43:ec:52:f5:bd:6c:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4f2a866202f4b8cbc33382d6e82d81d8964c80e
        Validity
            Not Before: May 12 14:01:06 2026 GMT
            Not After : May 13 14:01:06 2026 GMT
        Subject: CN=6d0738b3ea07a1d4631b1ab0f7ba5a3064a4070b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4a:7e:09:47:29:e5:90:7e:28:51:37:5b:bf:
                    3c:6f:57:7a:3c:6c:b5:da:ef:40:56:0a:c2:bc:4f:
                    a7:81:dd:d8:98:96:3d:3b:16:44:86:7c:3c:7d:10:
                    b8:c1:a5:f9:9b:f2:84:4e:5c:cd:8d:d9:19:95:4b:
                    66:b7:91:06:eb:cc:7d:a5:6d:2c:d8:a7:54:25:f7:
                    e3:8c:18:61:cf:9f:54:71:50:e7:70:29:d7:8f:b9:
                    13:c7:97:2b:60:22:b6:04:09:55:b8:26:41:55:3e:
                    e2:ad:cf:36:45:05:04:dc:78:33:4a:e6:98:82:db:
                    2e:79:00:21:bc:2d:60:d6:c0:dd:3f:16:c1:84:6c:
                    bc:27:65:a7:e2:4a:fe:d3:51:ce:c3:aa:0e:67:d6:
                    f1:c6:e9:9b:2a:29:c1:e5:56:35:2e:a7:88:05:8b:
                    ab:62:ed:d7:2f:b2:e9:c5:a0:d7:c1:f8:45:fc:3f:
                    ef:71:bb:79:63:88:fc:67:40:a9:bf:99:ef:03:44:
                    6d:60:50:66:f4:75:b5:f6:36:24:f6:9f:ee:c7:27:
                    9e:03:53:22:48:9e:26:9b:12:ce:82:a3:4c:d6:8d:
                    4a:1c:9f:4b:f8:cf:68:4a:95:2f:18:f3:f0:f3:d7:
                    64:d3:74:da:17:e0:03:46:16:33:9d:f6:9d:31:ea:
                    44:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:07:38:B3:EA:07:A1:D4:63:1B:1A:B0:F7:BA:5A:30:64:A4:07:0B
            X509v3 Authority Key Identifier:
                keyid:E4:F2:A8:66:20:2F:4B:8C:BC:33:38:2D:6E:82:D8:1D:89:64:C8:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PKoZiAvS4y8MzgtboLYHYlkyA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:f2:c0:46:6d:84:e0:9f:db:c5:9e:9a:85:60:a5:91:80:f7:
         f6:cd:58:ad:de:24:b8:2b:35:d9:d5:e3:60:e0:85:91:cb:14:
         ed:9f:28:3a:0b:8c:cc:44:36:76:5a:7c:9b:0e:58:18:9f:ca:
         b1:de:82:c4:fe:3c:84:9a:57:4e:f7:d2:d1:1f:34:33:5d:a6:
         f9:5c:e3:6f:a5:f2:8f:1c:fb:73:b2:a8:f8:0f:dd:89:d9:fe:
         a2:bf:4f:8c:49:8c:0e:bf:f0:2a:bb:67:d3:5b:9c:0e:dd:39:
         da:10:c7:02:fd:07:cf:31:08:cc:70:c1:44:ed:ca:f8:45:92:
         ae:f7:6f:84:1e:1c:9c:e4:9b:5d:95:3e:a9:96:01:c0:f5:8d:
         a4:a8:b7:2c:73:40:7a:cd:fc:e4:6b:00:f2:99:92:14:a6:f2:
         dd:12:92:da:ba:8b:6a:5b:c9:9a:de:35:7e:a7:c9:7c:86:06:
         45:2b:c7:08:ed:a2:a7:d8:be:62:f4:a4:7c:79:e0:09:7e:2e:
         fc:59:3c:c3:ee:21:80:f7:ad:60:ae:e2:23:ff:b0:74:13:fa:
         a9:88:36:28:f1:3c:08:1b:2b:a1:4d:a0:a0:c2:e6:5a:11:4a:
         68:5b:57:05:bf:ea:1a:18:3f:99:28:84:21:95:0c:c7:9e:dd:
         68:1f:24:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:31:10 2026 by rpki-client