Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
File:                     i992xUueaTXDCptMm6kwmsRw7AI.mft (raw, json)
Hash identifier:          mPzzZfQbIF3mm6DAU2ZR5OxN+rm0Bwg0bm6Af6gDx00=
Subject key identifier:   02:85:4D:23:39:85:20:25:87:E9:46:FB:9A:49:C3:E3:22:F1:B3:AE
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Certificate issuer:       /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial:       019E1EA3A4A8D10314AF5DA9DC49AEC49335
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
Manifest number:          164E
Signing time:             Wed 13 May 2026 00:01:41 +0000
Manifest this update:     Wed 13 May 2026 00:01:41 +0000
Manifest next update:     Thu 14 May 2026 00:01:41 +0000
Files and hashes:         1: FO34XpplAW7QlRa_nhaWh0bzK1M.roa (hash: OY8jMW/Q0/vSfJsf4E0K4jOzUbbQOka6dbLisQTbUTM=)
                          2: VDzTMSvfBKqHEPkPZy5QxtuwU4Q.roa (hash: nbe4oKw1dzzL8XTpfLmk2OwowG5rknPjlUlPj/nEWbw=)
                          3: e3zkTMxhCP8clQpAZAhrUsMaFY4.roa (hash: lH0rEg0z6LL5JT+j317Y72Z5fFHRfeR3TqiBJjzkaDg=)
                          4: i992xUueaTXDCptMm6kwmsRw7AI.crl (hash: iacDngjLn7m48wncaTHYtPgvF6y45PJN+9p+vpe1ZFc=)
                          5: q1z9wEUZ-3q2dVe1kVMgwooEueU.roa (hash: 0i6Usfk5Np9doym2lgfbGxDGei4jmouvH6UyKjL5l/k=)
                          6: rLATH_cRU9R2CRUg391jtLBKHvM.roa (hash: cfLlwKbBsVlo1cSK1agygN0nYq7409jM2xI+56PGyq0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:a4:a8:d1:03:14:af:5d:a9:dc:49:ae:c4:93:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
        Validity
            Not Before: May 13 00:01:41 2026 GMT
            Not After : May 14 00:01:41 2026 GMT
        Subject: CN=02854d233985202587e946fb9a49c3e322f1b3ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f3:1b:2c:52:93:1a:40:85:bf:96:0b:d4:8d:
                    9c:e9:77:6b:10:88:dd:9a:30:21:a5:02:c5:40:e9:
                    ca:dc:8b:e5:d6:c7:36:2d:a7:1b:92:c3:47:30:46:
                    b0:ce:1e:76:eb:ef:ec:2b:93:6c:03:14:34:bd:25:
                    cb:46:57:56:b5:07:5e:96:d3:4b:ea:b2:67:24:c1:
                    54:97:1c:a6:41:1c:3e:3c:b7:e2:95:3d:f4:cd:90:
                    fb:ca:36:14:4e:22:08:5d:1b:d1:53:72:83:4a:db:
                    52:d0:f5:cc:c0:e4:f3:78:07:cb:16:0c:41:fd:b9:
                    f9:5a:17:66:b6:e4:95:92:70:ed:2a:39:61:ea:c4:
                    db:e1:78:de:f5:da:22:1b:78:b8:57:9a:5f:af:17:
                    40:4b:9d:06:38:eb:0d:40:67:4a:b3:a4:59:07:bf:
                    77:ac:a2:1e:c4:46:54:5c:69:14:2f:5e:98:2a:b9:
                    27:23:26:2d:6f:83:c0:b3:3b:59:8c:ef:3a:4a:be:
                    55:b2:fd:4a:b5:51:15:b6:2a:8a:e7:af:15:dc:2e:
                    c3:8a:f5:67:e2:ed:9c:c5:60:84:e2:1d:2d:54:54:
                    62:7a:9e:51:4b:0b:07:77:81:a2:b4:16:7e:ae:53:
                    6b:1b:44:07:9d:7d:32:82:2a:a2:47:18:d7:b9:6b:
                    84:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:85:4D:23:39:85:20:25:87:E9:46:FB:9A:49:C3:E3:22:F1:B3:AE
            X509v3 Authority Key Identifier:
                keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:c4:ab:5b:b0:ab:46:fc:61:96:70:04:db:79:ef:65:57:9a:
         51:d3:9c:cb:f6:62:88:93:e9:39:11:bd:62:d0:e2:1d:42:a2:
         5c:ea:3b:3c:e6:da:52:7c:52:3d:31:23:e7:1b:08:f0:54:bc:
         c8:6f:68:3c:87:8a:24:1c:e1:6c:00:34:49:71:fa:d5:11:4e:
         23:81:88:cb:5c:6c:d6:da:fa:f7:bd:8f:18:06:3d:d0:84:e6:
         34:e1:2d:3b:c7:f6:8d:fc:ab:f0:aa:ce:57:88:1f:4b:c4:05:
         0e:84:01:14:53:ee:42:3a:ab:07:5b:20:33:dc:eb:e5:28:c1:
         12:4e:24:a4:15:66:5a:31:e3:a7:a6:cf:86:b2:83:0a:b8:fa:
         85:62:0c:3d:11:0b:aa:82:a9:c5:85:63:2f:83:6e:61:a9:7b:
         80:b6:f5:b5:b2:e3:8b:55:fe:dd:3b:cc:fa:d6:b1:3a:dc:53:
         e0:bb:5e:e9:99:5f:9d:d7:f5:0a:74:71:34:2d:c2:67:18:cd:
         56:73:78:2d:18:d2:66:a5:cc:5b:15:51:43:66:35:ef:2f:b2:
         5b:db:42:16:21:ca:10:13:75:32:b7:c2:d5:6d:23:48:ee:6f:
         12:05:af:58:00:01:af:17:08:cf:e2:1b:a1:c0:b4:c7:88:ad:
         85:9c:f0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:15:29 2026 by rpki-client