Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft
File:                     hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft (raw, json)
Hash identifier:          atNd485Xk55H6cQtDrDlwZj0ovD6P4TZuBpF+S0cjks=
Subject key identifier:   08:EA:89:6D:87:34:2F:77:44:9B:10:B2:6D:0F:4A:14:C1:75:1F:FE
Authority key identifier: 84:2E:15:83:C6:D2:B9:48:78:C5:A9:83:9E:F6:7F:56:14:4B:85:65
Certificate issuer:       /CN=842e1583c6d2b94878c5a9839ef67f56144b8565
Certificate serial:       019E1D90C6070245A63FB4EAF870A0080E76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft
Manifest number:          0237
Signing time:             Tue 12 May 2026 19:01:27 +0000
Manifest this update:     Tue 12 May 2026 19:01:27 +0000
Manifest next update:     Wed 13 May 2026 19:01:27 +0000
Files and hashes:         1: 82t5-hxlbBokWJ95cU6-iNwwzGE.roa (hash: /vM2wNO4llhGTKJMkB3GroMrqeVphHqzb5ESd4v5N4Q=)
                          2: ETMpToqTleOoqImfhhOrXw4lz3Q.asa (hash: CY0wY17SWUl1vZ+zGcUwbXDJHsRR/4ff/AIuJo1+GZo=)
                          3: hC4Vg8bSuUh4xamDnvZ_VhRLhWU.crl (hash: 1ikF2V35hs7wVb6qHvnMRkThkuC/Ci/rbEMRB46TJow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:c6:07:02:45:a6:3f:b4:ea:f8:70:a0:08:0e:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=842e1583c6d2b94878c5a9839ef67f56144b8565
        Validity
            Not Before: May 12 19:01:27 2026 GMT
            Not After : May 13 19:01:27 2026 GMT
        Subject: CN=08ea896d87342f77449b10b26d0f4a14c1751ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:18:13:34:42:85:b2:96:03:d5:2d:b0:d8:ec:
                    54:cf:cd:5d:c5:3f:87:0e:b8:f8:03:51:b0:2b:59:
                    0b:c4:00:2b:aa:5c:a7:5a:e4:a0:c8:46:9f:8e:e4:
                    09:85:68:71:5a:3c:fe:c0:1b:57:3c:ad:ed:ac:dc:
                    39:23:fa:61:ed:f7:75:d8:cf:ba:91:8d:bf:b5:a5:
                    b7:7a:e5:ca:77:61:51:e6:ca:56:86:83:3f:ed:63:
                    94:b3:a2:18:e0:13:c8:b4:9d:bf:a7:cb:cd:dd:28:
                    f8:b7:58:17:07:36:d3:41:c2:a4:03:e9:4c:66:3f:
                    34:c7:d2:6f:6a:03:1c:d9:68:b7:72:20:d3:42:75:
                    a2:34:eb:df:91:37:93:bf:3a:48:a6:6c:98:51:75:
                    5d:6a:ed:b8:a7:3b:ef:8e:57:e3:15:f3:46:4b:7b:
                    f9:4a:46:02:a8:fe:66:88:4e:e4:15:cb:bd:f7:ae:
                    fb:45:c1:26:8c:a1:26:2c:80:3a:64:79:b5:31:ab:
                    a0:28:75:2b:28:85:6f:8f:0c:8b:df:c5:1f:0b:20:
                    b6:50:8a:dd:67:a2:b9:b1:ee:e3:e1:0c:ba:0a:b5:
                    21:1f:dd:99:81:e5:11:77:d0:95:8e:5b:45:63:48:
                    19:8d:c6:c6:82:46:e0:29:f5:92:d3:60:cb:b4:70:
                    91:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:EA:89:6D:87:34:2F:77:44:9B:10:B2:6D:0F:4A:14:C1:75:1F:FE
            X509v3 Authority Key Identifier:
                keyid:84:2E:15:83:C6:D2:B9:48:78:C5:A9:83:9E:F6:7F:56:14:4B:85:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:2c:93:fe:a3:21:b1:cd:c5:e6:3b:ba:2f:81:2f:33:e3:f0:
         7f:eb:7c:43:be:6b:56:29:c6:09:b3:65:6e:b2:98:bb:41:5e:
         3e:59:34:62:61:5e:9f:1d:e3:df:26:8f:8f:b6:c4:96:a9:d7:
         92:d5:a8:ba:e0:f3:f3:70:ac:0b:8c:c0:0a:f7:d6:31:98:a1:
         b9:01:c6:c9:da:83:4d:b9:48:13:38:45:c0:d5:a8:25:5d:6a:
         00:fd:2e:ec:0a:88:72:b1:a4:2d:fd:3f:98:75:6a:54:90:c4:
         c8:82:f4:a1:6c:b4:ad:c5:45:17:d0:06:50:f4:78:d8:2c:1c:
         93:b5:a9:0d:b0:07:e0:ab:9e:07:84:e6:42:09:a1:e5:8d:99:
         a4:d4:d6:09:d3:15:c4:8e:32:07:b9:7d:b8:e6:eb:59:8a:63:
         02:2b:b2:cb:a0:8e:7e:db:b8:1d:17:54:30:db:d1:04:47:a7:
         28:cd:e9:a3:d5:83:15:ca:5d:62:35:a0:82:62:76:56:a6:79:
         e3:02:f2:ee:eb:12:0a:7f:fa:4f:22:02:ba:35:68:4f:0a:a1:
         3f:ce:46:cb:b9:c5:a0:df:b1:bd:c1:74:98:27:59:c6:9e:38:
         07:de:b2:05:cf:ff:28:3a:19:ea:18:81:eb:38:20:26:88:62:
         e5:84:da:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:47 2026 by rpki-client