Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft
File:                     p0j74dfTpqpHTeQ_qIXOLQkcUps.mft (raw, json)
Hash identifier:          XCresaJvuL1TlqIGQf1sW0yjxQbFB9j1wNCReDfFS3M=
Subject key identifier:   61:9C:40:17:02:77:85:9B:8F:4C:1F:87:77:91:6C:92:41:15:B1:AB
Authority key identifier: A7:48:FB:E1:D7:D3:A6:AA:47:4D:E4:3F:A8:85:CE:2D:09:1C:52:9B
Certificate issuer:       /CN=a748fbe1d7d3a6aa474de43fa885ce2d091c529b
Certificate serial:       019E1DFEB5D22AE327311DBE67D1EE186E1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft
Manifest number:          1658
Signing time:             Tue 12 May 2026 21:01:32 +0000
Manifest this update:     Tue 12 May 2026 21:01:32 +0000
Manifest next update:     Wed 13 May 2026 21:01:32 +0000
Files and hashes:         1: X2Acde_AXJbiIzf4WSQxKTMikWM.roa (hash: BQtrWQacm7ByC/7TCno2qFJsSN/6VxyfhO1qrX07bW4=)
                          2: p0j74dfTpqpHTeQ_qIXOLQkcUps.crl (hash: wmIdm3bxFMRVJAY5/tIM7aZHg3vlIp1TRoBQ+4351Sg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:b5:d2:2a:e3:27:31:1d:be:67:d1:ee:18:6e:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a748fbe1d7d3a6aa474de43fa885ce2d091c529b
        Validity
            Not Before: May 12 21:01:32 2026 GMT
            Not After : May 13 21:01:32 2026 GMT
        Subject: CN=619c40170277859b8f4c1f8777916c924115b1ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ee:ba:ef:5c:cd:db:e5:f6:fc:cb:45:c1:e6:
                    2e:1c:05:0b:3e:0b:e2:0c:c0:e1:bb:5e:d6:48:18:
                    68:a0:95:33:fc:ab:4b:77:cf:17:4c:0a:d2:25:44:
                    c3:43:14:4b:1b:6c:bc:2a:ea:e9:21:43:90:0e:24:
                    51:f3:b3:79:7a:fd:1f:2c:08:38:34:2d:c9:ed:01:
                    80:e2:1a:2c:a2:be:3d:67:2a:9a:fc:50:29:1a:62:
                    11:a4:36:fb:30:bd:d5:47:a1:55:3e:39:79:be:c8:
                    25:d0:38:4c:76:34:db:9f:d3:90:bf:c6:de:93:4c:
                    28:39:58:cf:49:fc:c9:ea:03:9c:e7:b9:76:5a:f8:
                    dc:71:62:16:b2:c0:43:c1:68:55:7b:24:f6:fb:9a:
                    e0:1e:b8:21:f5:12:63:61:3e:ac:c1:d6:90:1b:b1:
                    1b:57:f3:96:8e:87:b4:93:3f:60:6d:fa:e3:94:ea:
                    08:66:ed:a8:88:1b:e4:8c:62:86:c7:3e:49:4c:23:
                    3a:fb:8a:02:44:f7:84:b8:54:7c:fe:f2:58:aa:72:
                    32:b2:c4:a2:72:e7:54:91:17:73:8f:dd:b6:62:e3:
                    d6:11:e6:a0:67:96:a0:28:37:b1:e2:09:01:49:4a:
                    8f:c5:35:3c:4e:87:c0:95:c9:6f:e9:dc:fd:2d:c2:
                    fd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:9C:40:17:02:77:85:9B:8F:4C:1F:87:77:91:6C:92:41:15:B1:AB
            X509v3 Authority Key Identifier:
                keyid:A7:48:FB:E1:D7:D3:A6:AA:47:4D:E4:3F:A8:85:CE:2D:09:1C:52:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:02:2c:85:0a:68:e4:de:ea:36:f5:01:12:78:68:71:b4:a4:
         c8:46:03:c3:fd:07:99:41:4d:12:01:e0:de:0b:d6:a3:8e:49:
         bc:cb:55:49:e8:69:12:3f:f4:e2:76:75:5a:60:57:77:8d:9c:
         3b:3d:41:13:6c:ef:7f:3c:97:90:00:12:f5:90:d9:0c:69:bf:
         77:b6:dc:f1:4d:00:43:7d:db:67:74:a7:29:69:2f:e5:f1:99:
         76:e3:ff:09:f1:ec:b9:00:f4:c6:54:e9:42:1d:7d:21:f9:7e:
         1f:50:1b:26:1b:b1:12:53:dc:c3:87:ed:69:d5:e6:ff:1b:03:
         95:f9:d5:72:ba:a7:c8:d0:07:54:88:f1:d6:cf:e9:81:b3:81:
         86:8c:f7:f8:13:5e:f1:95:7d:51:7e:a2:78:0e:53:c8:35:0b:
         12:48:19:0c:81:09:37:64:55:c1:58:e2:89:4c:6d:26:5a:e4:
         0a:cb:38:60:da:92:1e:5f:94:af:c0:c6:84:ba:47:3c:30:fe:
         98:d4:fe:40:f3:1b:a9:23:f6:55:51:4d:af:0c:79:7e:2e:ea:
         54:05:a5:9f:9f:cc:2f:0a:ea:bc:19:e5:bc:8b:ff:ec:1e:03:
         1b:7c:26:de:80:27:1d:6d:6f:b3:66:76:3e:75:70:b5:0b:5b:
         ce:16:be:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:44:56 2026 by rpki-client