Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
File:                     S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft (raw, json)
Hash identifier:          LHOH6+B/Z8Qor6wQcbabASF+YlVlN0aqzcC3R7vavkY=
Subject key identifier:   8B:7A:02:8F:C2:1B:14:76:97:0C:CB:0B:84:9B:40:64:34:C9:EE:75
Authority key identifier: 4B:53:F9:56:7F:6D:6A:D8:94:12:C0:51:5F:74:64:76:12:DC:E0:4A
Certificate issuer:       /CN=4b53f9567f6d6ad89412c0515f74647612dce04a
Certificate serial:       019E1C46E62571B97F0F187845C8B319AECD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
Manifest number:          0C9A
Signing time:             Tue 12 May 2026 13:01:08 +0000
Manifest this update:     Tue 12 May 2026 13:01:08 +0000
Manifest next update:     Wed 13 May 2026 13:01:08 +0000
Files and hashes:         1: 4vUJXm8eNnXrmzWPEJu4hyJ74bE.asa (hash: E4sIlw3AAVJ0Z5hHy6GY0z+mLPDpAHtRm2YAKcmDuRI=)
                          2: S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl (hash: Bii+R9cXgqn3nhG96pdTi+Hlp6cNu7picNGFlLCIQV8=)
                          3: q7Y942LXE7VDqi3CVQGg7s-T4B4.roa (hash: um+Nzf6xvoV3Y4Z8bfjOD2xB6Pty18EAptHerBiWZz4=)
                          4: sN_A4_afKTzrbujkvLlFerai1cc.roa (hash: kT/3kMd3FSxH/sNDt/AGCw6+mNMLymdiF+y0wVoZofk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:46:e6:25:71:b9:7f:0f:18:78:45:c8:b3:19:ae:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b53f9567f6d6ad89412c0515f74647612dce04a
        Validity
            Not Before: May 12 13:01:08 2026 GMT
            Not After : May 13 13:01:08 2026 GMT
        Subject: CN=8b7a028fc21b1476970ccb0b849b406434c9ee75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1c:80:38:93:61:49:38:b2:b4:46:5d:eb:a4:
                    56:74:ec:e9:76:7e:14:6c:6e:d2:ea:42:18:37:5c:
                    fa:bf:2e:f7:db:27:b1:05:fe:b8:74:df:82:9b:2b:
                    64:7f:1b:ff:28:1a:13:81:71:98:e2:8f:a2:a3:a5:
                    b5:be:7b:31:5a:31:79:1d:c5:71:26:4d:69:77:f8:
                    fb:b7:be:56:a8:72:86:c4:d1:ba:ce:95:c3:52:33:
                    35:15:a7:42:58:ac:2d:74:6b:41:d3:52:df:c7:b3:
                    98:9a:26:55:64:3a:a9:e5:0f:d7:0c:75:37:d8:f1:
                    73:76:a7:4a:2d:db:a8:b2:17:3d:9e:04:df:3e:49:
                    83:7c:10:46:e8:56:60:0d:40:be:0b:82:83:3e:5e:
                    ea:ab:f6:5f:fa:97:02:e8:49:e0:19:8a:c2:fc:d5:
                    4f:a9:3b:27:4e:b2:88:9e:0a:81:c0:ba:ba:7a:f6:
                    55:d1:59:5c:88:f5:0a:d4:ae:23:c2:d3:ce:8a:4d:
                    9f:c8:7a:b1:91:09:51:0b:d9:2e:30:54:2d:06:82:
                    c8:4a:ef:b0:e7:30:9b:1e:b0:c4:0d:89:c1:73:e0:
                    59:60:25:f5:92:55:0f:32:e9:da:a0:94:d9:38:8e:
                    7b:1a:3b:d7:28:a9:19:63:cc:ce:40:1f:1f:b8:3e:
                    7b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:7A:02:8F:C2:1B:14:76:97:0C:CB:0B:84:9B:40:64:34:C9:EE:75
            X509v3 Authority Key Identifier:
                keyid:4B:53:F9:56:7F:6D:6A:D8:94:12:C0:51:5F:74:64:76:12:DC:E0:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:b4:66:ad:4f:16:f2:61:e7:d2:82:52:34:aa:5e:3e:f4:57:
         b7:14:ee:09:26:c4:80:43:ee:0c:9b:5d:31:97:54:53:29:67:
         6f:61:4a:6d:c0:aa:3b:fe:fb:40:22:fb:95:7d:3f:52:ff:9f:
         57:58:59:55:bc:0d:f6:7f:2c:32:b3:0d:d2:e8:2a:66:8e:b4:
         5c:a9:ba:d3:f3:6f:75:90:2f:ec:4e:22:7e:24:ef:a8:a6:a2:
         75:54:93:e2:ef:02:b4:c7:b6:55:af:59:3f:00:5c:58:d5:45:
         31:97:29:1e:cc:e3:ac:2f:da:6d:17:6d:6c:9a:60:65:3c:38:
         f5:d1:52:dd:56:db:03:f1:de:5c:5c:41:0c:e5:ad:96:a3:01:
         66:e5:d3:03:e7:92:18:49:1f:1f:39:7f:00:a9:36:af:00:e2:
         5c:71:f4:87:f3:ad:81:77:a4:e6:3b:d0:f1:2b:5f:52:57:bf:
         7b:2a:d1:01:62:66:19:a1:c2:e6:5c:42:c1:d6:f0:c5:64:e3:
         3b:7e:88:0d:00:c8:0a:88:8b:b9:7c:4b:39:3b:d1:4b:b3:06:
         08:c4:b1:65:b1:e6:fc:f9:91:6e:8a:f4:78:76:d5:67:99:a0:
         d6:ef:f3:23:0a:5d:53:2f:0b:56:bc:b2:f1:e1:22:b8:67:44:
         91:d9:be:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:26:31 2026 by rpki-client