Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
File:                     V0U31U828UIjG8gXA4hyy2B7Iec.mft (raw, json)
Hash identifier:          rZZmgsObX1PhYjT57FTooJa1syHStlZ1OblWOTVOPSw=
Subject key identifier:   82:9E:7F:9C:96:C3:6C:6C:80:54:FF:5D:C2:5A:0C:8B:4F:25:27:FA
Authority key identifier: 57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7
Certificate issuer:       /CN=574537d54f36f142231bc817038872cb607b21e7
Certificate serial:       019E1DC7481AC744AC6450293096B8FEF2A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
Manifest number:          190B
Signing time:             Tue 12 May 2026 20:00:59 +0000
Manifest this update:     Tue 12 May 2026 20:00:59 +0000
Manifest next update:     Wed 13 May 2026 20:00:59 +0000
Files and hashes:         1: EN3L4pyXEtd8agpR0WCbncdFo08.roa (hash: NJ7X+GYc10QZ6IeNjYC/5Bh9ragVjwZPuZ02BIahBWE=)
                          2: V0U31U828UIjG8gXA4hyy2B7Iec.crl (hash: m1NXXQ2a5OkZ427fD/SLPOvtg+46kBm5QBRb+kab5FQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:48:1a:c7:44:ac:64:50:29:30:96:b8:fe:f2:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=574537d54f36f142231bc817038872cb607b21e7
        Validity
            Not Before: May 12 20:00:59 2026 GMT
            Not After : May 13 20:00:59 2026 GMT
        Subject: CN=829e7f9c96c36c6c8054ff5dc25a0c8b4f2527fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:55:eb:b1:c5:ae:82:3b:d7:e5:03:7c:56:6c:
                    ea:58:51:97:74:3f:c1:fc:29:0f:37:bb:6e:2c:fa:
                    14:07:92:d5:92:17:ad:4a:b5:73:d7:00:a1:bd:6a:
                    40:ab:37:54:8e:8b:2e:db:4b:91:66:bd:8f:c3:dd:
                    22:1f:47:c1:87:b8:09:e5:cb:9b:67:c5:a8:62:85:
                    e4:9b:45:9e:c8:6a:17:a9:65:28:33:3c:5b:39:47:
                    13:1d:ae:b1:01:21:1a:96:4c:44:a1:8e:8f:9a:a3:
                    48:e5:05:da:7e:89:5a:a8:e9:b5:3f:4f:70:2f:fd:
                    5f:d2:40:58:d4:33:7d:91:e0:09:8a:2d:3e:94:dc:
                    8b:9d:fa:3f:a0:86:bd:f0:0f:6d:c1:44:55:f5:59:
                    eb:3c:48:97:4e:b8:2b:73:1e:88:ad:81:42:3c:d8:
                    dc:cb:1f:71:38:3c:d6:44:1b:10:c6:da:41:e6:b5:
                    35:6a:0f:fd:fd:3d:80:15:18:a9:cd:1f:81:87:de:
                    2b:04:91:e3:9d:06:9d:2a:19:9d:c6:f0:ee:db:bb:
                    20:44:54:bb:da:40:13:0c:b7:90:fa:fd:ae:d2:02:
                    90:66:31:6e:cc:fe:09:9a:f6:e4:64:84:0d:12:64:
                    bf:8a:d6:37:ab:97:da:56:11:75:64:7c:26:3a:8a:
                    64:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9E:7F:9C:96:C3:6C:6C:80:54:FF:5D:C2:5A:0C:8B:4F:25:27:FA
            X509v3 Authority Key Identifier:
                keyid:57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:ff:0d:ea:52:0c:bb:24:eb:61:62:f4:66:9a:98:13:ec:8e:
         72:b0:7d:db:4a:be:f9:96:82:7a:68:b3:0e:fb:05:b3:8e:50:
         94:a6:ed:e2:3e:75:df:dd:55:bd:23:f8:c2:fd:70:f8:aa:12:
         66:ac:66:6c:ff:05:f9:16:2c:38:ee:9b:be:59:54:e5:bf:0e:
         60:a9:4f:8c:4b:b2:fd:0c:3d:f6:f0:c1:2e:12:3d:f5:46:a0:
         4e:fc:91:40:22:3f:b3:d1:56:f8:84:d7:7a:f7:5f:1f:e3:65:
         6c:c4:0f:89:e0:d7:74:00:fa:f5:06:fd:e6:4c:f4:9e:26:aa:
         b0:4f:af:36:c7:7f:33:ee:dc:09:50:b5:2a:ed:e8:93:98:35:
         d1:98:d8:a8:5b:5d:97:be:56:59:15:8f:4e:30:21:0f:e5:d2:
         2b:4b:15:37:1a:fb:95:82:61:63:81:ad:85:dd:3b:59:f4:a4:
         14:96:74:ab:4e:1f:0d:cb:73:d3:68:85:2f:8d:65:14:9d:bc:
         3b:f9:a7:78:f3:17:b3:72:b8:c7:ec:e9:10:c0:db:49:31:b5:
         3b:e2:5b:07:72:f9:19:9e:f6:ad:d5:f1:fb:bc:5a:85:85:76:
         a0:bc:cf:10:8f:e4:a5:9e:51:de:b1:ef:fa:9d:84:83:1b:58:
         c5:0c:5f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:29:33 2026 by rpki-client