Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
File:                     w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft (raw, json)
Hash identifier:          nSlwtuJKplap5b6H8bHnjLP69Hsv1Odnk2ijiLvgxpA=
Subject key identifier:   5D:23:FF:92:11:2A:AD:A6:C5:38:CC:00:30:C6:97:3E:A9:8C:13:5E
Authority key identifier: C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F
Certificate issuer:       /CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
Certificate serial:       019E1DFE4B52B48B10D2239EB857A9A85842
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
Manifest number:          1915
Signing time:             Tue 12 May 2026 21:01:05 +0000
Manifest this update:     Tue 12 May 2026 21:01:05 +0000
Manifest next update:     Wed 13 May 2026 21:01:05 +0000
Files and hashes:         1: 7rlFWVvMWKLAs_-CwEfFx1HBnYY.roa (hash: Pq6qLtXzClwLxML1ozcVt+Ip73JNmGPve9pIBAJv6IA=)
                          2: Fb1LxadIV7oBDqCNnGTm-OSYcpU.roa (hash: Fl5GSOOt62GrdSA1DfCyrlVCI+6NRse3s+pMK1jPEng=)
                          3: jYY_ixTwgJOc5Fm5bCXMoT8UKbs.roa (hash: +muUSZsgKVwKKY94l/X1a1ye28aD1e0NYwivFYV1wxQ=)
                          4: q5DJrkGpFtBRVSTiER6qubZrzwg.roa (hash: d2oZQywAG8/Q2HF8swgC8YVUSDiFpeqcb9GLnII1M0c=)
                          5: rMdXeptRpu0Pt2xvscICCvTvL1w.roa (hash: /3qPf2GIjkHB+ECKNRa9eV5BXy6n4Np+NAUC/iSaKqg=)
                          6: w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl (hash: kQHxjUV9QsBoK3YpAgv6LtlEZs9meFtlX+/DikxBTks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:4b:52:b4:8b:10:d2:23:9e:b8:57:a9:a8:58:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
        Validity
            Not Before: May 12 21:01:05 2026 GMT
            Not After : May 13 21:01:05 2026 GMT
        Subject: CN=5d23ff92112aada6c538cc0030c6973ea98c135e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ce:ed:9b:7b:59:56:2b:8e:11:1b:20:64:45:
                    e8:1a:74:78:70:c5:95:1a:e5:0c:76:f5:04:b9:b1:
                    0c:8d:c6:9c:d6:e5:55:4a:9d:c1:6c:a7:89:53:a3:
                    f4:45:11:ab:fc:0a:30:88:49:0d:58:64:fb:f9:a8:
                    8f:84:cd:fd:d0:ed:f6:21:24:66:fe:63:59:00:f2:
                    48:3e:75:aa:3d:22:b7:5a:eb:2d:83:49:19:cc:4a:
                    cc:e6:9c:ee:4e:ef:94:db:bf:ac:2c:97:58:32:52:
                    44:1e:98:bf:2b:eb:94:89:c2:68:91:ba:a7:5c:34:
                    dc:2b:b8:75:02:c0:1d:a8:2f:f0:71:8e:0c:2e:c3:
                    53:e4:11:bf:8c:ee:99:fa:6d:dd:99:e3:40:5c:50:
                    24:84:ea:0a:1d:c1:f3:c2:9a:27:4f:bf:f3:52:a7:
                    64:56:68:40:0c:a7:8c:e3:ee:ef:73:23:c5:c0:42:
                    d3:8e:72:f6:e2:c1:4e:4c:1c:4c:43:93:53:f6:18:
                    83:6d:6e:f8:ca:51:e6:a2:4c:36:e5:81:a0:72:72:
                    9a:95:18:e7:43:b5:dd:b9:4a:c5:82:ac:9d:68:e8:
                    19:92:f7:1f:52:6c:e3:8b:6a:98:b2:b5:fa:46:66:
                    57:e3:a1:f2:e4:5c:31:88:35:e0:69:6a:92:e6:17:
                    1d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:23:FF:92:11:2A:AD:A6:C5:38:CC:00:30:C6:97:3E:A9:8C:13:5E
            X509v3 Authority Key Identifier:
                keyid:C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:1c:16:47:ad:6c:19:9f:f6:94:0c:97:a1:68:ac:c9:ea:90:
         92:c7:48:59:c8:10:aa:08:20:d5:56:56:b1:a7:6f:47:b1:34:
         60:d9:2c:5c:b3:33:6c:dc:f7:9c:bd:32:87:42:34:2f:9a:d9:
         03:24:2f:bc:a9:e7:d7:1c:2b:73:68:f4:2b:ee:fe:d9:bd:51:
         d6:e0:59:d5:67:8e:23:65:ab:dd:3d:61:26:c3:78:3a:e0:80:
         5c:a9:0b:a9:46:64:16:49:98:2f:2c:4e:33:c3:8f:78:58:cf:
         e2:86:76:80:03:4f:f6:0d:d0:74:60:a6:95:0e:12:77:4a:64:
         81:23:04:2f:0a:2f:92:1f:88:80:a4:38:93:ce:c5:65:00:3d:
         e2:b5:ab:b3:f8:8a:c5:27:16:fb:07:b0:67:5a:fe:1b:73:0f:
         1e:00:d3:65:fc:71:dd:05:27:01:6c:d0:eb:7b:b6:3c:be:f0:
         bf:dd:34:c0:a8:9f:36:da:79:6b:7d:81:7e:e5:2a:ae:51:7c:
         c7:f6:12:7e:bd:b0:dd:8e:88:e6:5e:7c:e2:7e:3e:2d:76:99:
         9d:ba:d6:b1:4f:ea:78:38:75:71:a3:18:66:15:74:12:a5:2b:
         97:f0:c5:e3:29:62:33:9a:04:df:d6:68:9e:f8:20:1a:fe:94:
         35:c7:d9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:33:33 2026 by rpki-client