Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
File:                     mk123S9GBosIca1FAKxuV3r-Rpw.mft (raw, json)
Hash identifier:          vXVkBt7QAOoDRWeZLyN2lhY1dit3xHF0Hcagb0LWhpc=
Subject key identifier:   B7:23:4C:AD:FE:67:26:04:C1:DA:00:4F:7E:86:7D:BD:CE:3B:11:E4
Authority key identifier: 9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
Certificate issuer:       /CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Certificate serial:       019E1E354561FA616E447C9D00F41A108D91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
Manifest number:          1911
Signing time:             Tue 12 May 2026 22:01:07 +0000
Manifest this update:     Tue 12 May 2026 22:01:07 +0000
Manifest next update:     Wed 13 May 2026 22:01:07 +0000
Files and hashes:         1: SYtSh6MgqpX8fZ4WHojx0wxmwAU.roa (hash: qfAbswAstxuSdJu35mimEN1jiqsDnLeGp+g0coBMNag=)
                          2: YIp8U7durT_VOWJi51t_EhaEZmc.roa (hash: uqZNroUU2FsZFyQ6iEi3c3DU2XeoL0O/vrop/BVrvjs=)
                          3: mk123S9GBosIca1FAKxuV3r-Rpw.crl (hash: gpCGYeB9grAPxcW5Zja05bH8uZMhBS2zu9IOCrrKVfg=)
                          4: pEE9oryUWOVeetd5uFrgO_cdrpE.roa (hash: jDaM82TLaH8oaB0vSE3Avb/s35Fb5rQ5AgRFhpcBjks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:45:61:fa:61:6e:44:7c:9d:00:f4:1a:10:8d:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
        Validity
            Not Before: May 12 22:01:07 2026 GMT
            Not After : May 13 22:01:07 2026 GMT
        Subject: CN=b7234cadfe672604c1da004f7e867dbdce3b11e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2a:01:96:a5:99:24:a8:6b:38:7c:fa:82:a6:
                    6b:7a:56:2e:23:3f:4c:85:11:21:d2:50:ad:83:3e:
                    a1:18:2a:74:8d:52:c6:57:c5:9a:e2:54:c0:ee:8e:
                    49:40:d6:a9:15:53:fe:d7:5e:0d:e8:e0:a6:e2:ae:
                    40:b3:d9:7b:2f:92:ad:13:81:ed:df:e5:8d:bc:c9:
                    9f:aa:19:3c:9d:9e:ba:f2:b7:e5:e1:0d:04:0b:dc:
                    48:dd:6a:a6:64:47:b4:01:b6:0d:f7:a3:8e:5f:6e:
                    71:ef:41:95:39:89:c2:5c:c2:a2:4f:9c:ab:d5:15:
                    7e:db:1a:5f:c2:34:ec:f2:b4:96:b8:ea:ae:c0:4d:
                    94:43:3b:67:eb:24:cf:43:15:d4:f5:f8:48:63:c4:
                    f1:bc:ff:bd:6f:4c:f2:c0:1f:b5:4c:d0:da:3b:6f:
                    1d:9c:1f:82:6f:2c:46:41:18:49:a0:d3:5b:a0:5b:
                    0d:51:fd:66:15:26:10:de:33:28:ba:da:31:81:95:
                    c1:2f:77:99:63:ea:8a:46:a8:b0:d9:20:25:83:e1:
                    9f:f2:39:f6:87:ae:ca:af:c7:64:23:be:96:84:78:
                    8e:d0:c7:41:82:1b:6d:f3:70:53:28:29:d8:80:6a:
                    27:68:28:57:05:a8:4b:c1:e1:db:7c:cd:07:55:45:
                    4a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:23:4C:AD:FE:67:26:04:C1:DA:00:4F:7E:86:7D:BD:CE:3B:11:E4
            X509v3 Authority Key Identifier:
                keyid:9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:9e:b9:5a:ec:ac:d0:d3:d9:a4:fc:e7:8d:22:d3:d7:6f:61:
         ba:6c:7b:36:c2:c1:7d:d8:e7:20:4a:aa:37:ea:0f:91:9d:b5:
         0a:af:af:bc:23:2b:ae:38:14:9c:de:fe:db:d1:18:ec:d4:af:
         2f:82:9b:0a:fb:b1:63:6b:7e:3d:03:b1:cd:f7:93:cd:14:8b:
         8b:3c:e1:45:b2:f7:b5:f1:b3:87:c8:16:2a:ea:d3:56:1f:16:
         0e:ea:ae:1d:53:1d:f0:0a:f1:cc:57:5f:96:2d:78:09:22:b0:
         77:09:81:69:76:03:75:6d:83:ae:32:d0:74:66:9c:1b:97:7c:
         8c:60:f6:14:bc:7d:69:b0:70:24:77:0e:0d:a3:a4:ea:d4:37:
         ef:8d:a8:9d:f8:d4:f9:9b:f2:b4:c5:62:38:d5:da:87:3a:80:
         3f:25:92:5a:07:a8:07:8b:7c:ab:76:0e:6d:a6:6d:a2:70:fe:
         53:c7:de:2d:30:80:cb:b7:31:c4:75:c6:2b:69:c7:5a:bf:01:
         1b:91:14:50:94:6f:e0:5a:83:58:37:55:15:c2:f1:bb:b0:f2:
         32:63:bf:a7:96:31:b7:b7:a4:ab:bd:9f:5f:71:d6:6d:11:01:
         75:c1:5a:f9:17:1b:12:59:df:95:c6:b4:e9:66:2d:ca:53:5c:
         70:73:c9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:46:24 2026 by rpki-client