Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
File:                     fWReWE8e-aiB8fu8TSejQj3j3_E.mft (raw, json)
Hash identifier:          jN+Z1RJSZYZ/VH3ZD+n19DahDBygNj95dczkT5py1Mg=
Subject key identifier:   E4:A1:4D:BC:33:76:0B:46:19:E9:8F:E6:95:75:21:0D:B7:BB:A9:84
Authority key identifier: 7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1
Certificate issuer:       /CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
Certificate serial:       019E1FEC7EB45B939A0803DC715694CE3355
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
Manifest number:          1909
Signing time:             Wed 13 May 2026 06:00:52 +0000
Manifest this update:     Wed 13 May 2026 06:00:52 +0000
Manifest next update:     Thu 14 May 2026 06:00:52 +0000
Files and hashes:         1: 5LuGzHTGNXh7ooCOYMthjUDSS6E.roa (hash: ueacTOAGFcsAA9jabTl3i8ESOHojLkJGvrFKPoo+SiA=)
                          2: Up6FPG2EmlxGGm-IJpPlY2eyxIw.roa (hash: vllY3zX6/fq+SiGXdC5fpCJcuaKw1ngd9//Sa26iQZc=)
                          3: fWReWE8e-aiB8fu8TSejQj3j3_E.crl (hash: ThZSU+F1NDNqTvFsIN0n8H4luInJcdI/4CYY/EnSaIg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:7e:b4:5b:93:9a:08:03:dc:71:56:94:ce:33:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
        Validity
            Not Before: May 13 06:00:52 2026 GMT
            Not After : May 14 06:00:52 2026 GMT
        Subject: CN=e4a14dbc33760b4619e98fe69575210db7bba984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:00:ad:eb:bc:d6:08:13:1a:c0:41:e6:15:30:
                    93:06:2a:bb:c7:50:11:40:ad:50:3b:07:b6:20:1a:
                    0a:74:87:51:88:12:4c:3b:e6:f4:60:f5:0e:97:dd:
                    06:20:1f:9d:2b:24:70:81:09:5a:42:50:e8:8b:64:
                    9d:65:d6:8f:0b:a9:55:d7:fc:68:23:fc:80:ea:75:
                    72:ae:28:b3:60:c9:f6:b2:35:67:9e:28:b5:27:c1:
                    34:51:9b:ce:4c:f1:9c:b3:56:64:f8:95:7f:c1:20:
                    02:8b:ec:9e:a5:3f:5f:e4:0d:5e:84:67:e3:d1:3e:
                    b8:b6:df:8d:0e:09:77:6a:cd:5a:aa:fe:c2:99:5e:
                    3c:5d:81:2d:3c:57:b2:17:a4:cc:3f:b9:cd:6c:d4:
                    a8:ec:5e:15:f4:54:4d:0b:d6:d3:aa:eb:b1:8d:5b:
                    8b:99:2c:88:f8:dd:c7:3c:9b:a5:e1:f6:97:38:f5:
                    64:2c:7d:ea:2b:95:09:bd:f4:14:98:83:34:c5:76:
                    9a:ca:4e:27:e9:db:9f:5b:f9:9f:64:2d:d7:e3:9b:
                    2c:f4:c1:9d:d7:e2:9c:0b:1b:84:d8:5c:8c:f6:bb:
                    35:1a:fd:6f:5c:5c:41:ac:65:a5:3b:26:39:0e:9b:
                    72:65:a3:79:51:c7:01:20:23:09:44:39:af:a5:10:
                    7b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A1:4D:BC:33:76:0B:46:19:E9:8F:E6:95:75:21:0D:B7:BB:A9:84
            X509v3 Authority Key Identifier:
                keyid:7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:c5:60:ae:a5:fa:42:eb:37:59:25:7c:44:f3:56:9c:ca:ab:
         22:65:eb:ca:85:2b:88:a1:9b:dd:19:31:11:d3:c5:bf:24:d4:
         23:f5:b7:3f:3c:fe:2d:90:eb:0c:1e:ca:ca:48:32:f9:b0:66:
         fe:73:18:87:ec:d7:8a:91:89:07:9d:09:cb:fc:14:88:92:f3:
         9d:7e:24:09:d7:e8:94:78:fe:21:ee:70:9d:83:09:31:11:07:
         6a:16:c7:2c:fa:94:fc:32:81:19:71:cb:df:11:31:6f:74:37:
         b7:8b:48:d0:b2:c3:c1:51:27:60:32:db:06:b7:b4:a7:b7:a2:
         ee:6d:e4:65:d2:43:67:8e:74:eb:eb:d9:5c:bd:70:5e:5f:11:
         fe:ee:45:98:da:6c:a9:5f:9d:a7:d7:94:62:d7:5f:1a:a8:b7:
         7c:5b:d7:5c:b3:36:66:a7:3e:4a:b6:f0:72:f9:b1:b8:1b:16:
         d6:0a:bb:dc:5e:dd:09:9f:66:90:16:62:24:bc:df:15:54:c8:
         64:27:3a:35:ee:85:88:b1:ea:45:5f:08:f1:3d:5b:ed:e1:d2:
         69:2e:9e:90:59:6d:9c:7a:f0:49:b1:2d:7e:e8:dd:71:37:d6:
         57:3a:c1:08:3a:27:56:63:59:44:a9:d2:8b:a6:a8:de:b3:7f:
         72:d3:00:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:54:21 2026 by rpki-client