Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
File:                     tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft (raw, json)
Hash identifier:          sLymLvbmYdj2dY9XRmDChSN9LwPxBalqOJPWX/fMe6A=
Subject key identifier:   4D:6C:8D:15:54:7E:27:F3:51:B1:D1:8B:61:FF:23:72:E9:AF:C6:E5
Authority key identifier: B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
Certificate issuer:       /CN=b478410224904494e9c0f7d35650a260e5fb6193
Certificate serial:       019E2091B28AA95730AB7F8262EC699A06E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 09:01:19 +0000
Manifest this update:     Wed 13 May 2026 09:01:19 +0000
Manifest next update:     Thu 14 May 2026 09:01:19 +0000
Files and hashes:         1: 1-ceGIaRHJAaXBLPJRrOgDXm8QYk.roa (hash: koOl6xvsjw0LPNpf6MfybPGCkgptrhSYthcGhLIG8iM=)
                          2: tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl (hash: 26GHlwnFoBKiro2/z9xZCpv/2W+d0QjCRYmHCYacyHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:91:b2:8a:a9:57:30:ab:7f:82:62:ec:69:9a:06:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b478410224904494e9c0f7d35650a260e5fb6193
        Validity
            Not Before: May 13 09:01:19 2026 GMT
            Not After : May 14 09:01:19 2026 GMT
        Subject: CN=4d6c8d15547e27f351b1d18b61ff2372e9afc6e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9c:98:eb:76:ec:ec:c5:9e:d6:56:5f:0a:df:
                    d9:49:46:ec:82:69:18:14:88:9d:e0:77:2e:0a:cb:
                    22:6d:8e:60:ac:20:a5:1c:60:03:b4:dc:9c:53:1a:
                    78:58:42:45:54:6c:bf:16:01:87:ea:61:a1:e9:83:
                    e0:ae:5a:92:7d:da:78:ee:27:2b:f7:97:e5:7f:fe:
                    e4:bb:53:34:35:ca:c9:17:fb:f0:6a:9d:ca:86:70:
                    be:87:50:4a:9e:fb:21:1f:27:1c:7b:8e:b6:db:28:
                    57:fe:83:55:7e:e7:b3:4c:3f:99:91:aa:f9:8f:c4:
                    ae:a2:24:3e:cd:29:0e:e7:18:0b:54:92:3c:48:a4:
                    88:c7:57:70:16:83:c1:92:51:32:c0:d8:cc:63:af:
                    b9:38:ab:3a:b5:34:a5:4a:07:fa:90:9f:73:cc:37:
                    e1:7f:21:11:39:ee:9a:d6:9b:10:fd:84:b5:c3:13:
                    13:9b:c3:44:e2:c8:ed:6e:c3:39:12:a1:41:b3:f4:
                    1a:d9:52:03:9b:bd:7b:6b:41:7f:00:f9:ed:81:f6:
                    bd:de:02:5b:6b:c9:31:25:56:00:73:40:bf:36:37:
                    fd:cb:0c:89:34:44:0e:26:76:f8:81:23:91:f4:54:
                    aa:14:f4:92:67:35:a3:52:d1:0e:65:11:57:6b:fa:
                    49:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:6C:8D:15:54:7E:27:F3:51:B1:D1:8B:61:FF:23:72:E9:AF:C6:E5
            X509v3 Authority Key Identifier:
                keyid:B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:fa:70:89:09:b5:d3:ad:6b:bb:e9:ec:fc:7b:6c:20:0c:57:
         c4:63:f5:bf:af:b1:dd:08:90:ee:ce:a1:fc:4f:80:c1:61:bc:
         eb:e7:1b:5d:85:42:68:be:d1:d7:b8:a5:c9:f1:92:86:b9:34:
         12:ab:1b:dc:4d:50:84:7f:b3:8a:2d:74:e7:78:9c:58:69:79:
         0b:f7:02:b7:87:d9:a2:66:85:56:b7:75:c2:a2:01:a9:35:aa:
         e0:69:80:73:75:b0:f2:52:22:f6:56:31:8a:59:5b:90:ea:d1:
         c6:d4:e8:cc:05:63:cb:1d:76:2b:66:b5:c0:9b:88:1e:2e:52:
         a8:01:a1:ad:5a:55:68:90:ee:10:19:e8:d2:70:fe:da:a7:58:
         b4:aa:1b:a6:47:9a:b0:c0:6c:d1:a9:d8:ae:07:74:a7:af:17:
         68:66:a3:e6:97:2b:f5:33:5b:8d:e6:36:12:53:9b:ac:5b:cf:
         31:ae:b3:a3:43:3c:8d:59:97:71:52:44:56:0e:a9:af:ca:f2:
         e5:05:6b:b9:b3:93:db:1e:f3:70:e0:30:4b:0f:09:8b:26:b5:
         8f:11:db:0e:16:83:b3:4b:b9:41:83:90:cb:7f:c4:dd:d0:9b:
         b5:86:cc:9d:b4:5e:cd:59:98:12:54:ef:3d:3a:50:5c:7d:41:
         ce:d7:9c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:56:36 2026 by rpki-client