Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
File:                     o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft (raw, json)
Hash identifier:          1JSu48wmIjJohD3UdpuFTLcUcWDU4dy3SHqlyjFjDJs=
Subject key identifier:   54:F0:30:E1:C7:39:E0:2F:90:85:BC:B7:EF:53:D3:46:A9:87:B1:E8
Authority key identifier: A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60
Certificate issuer:       /CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
Certificate serial:       019E1C4676D910544C09C1A233503CDF9CF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
Manifest number:          1424
Signing time:             Tue 12 May 2026 13:00:40 +0000
Manifest this update:     Tue 12 May 2026 13:00:40 +0000
Manifest next update:     Wed 13 May 2026 13:00:40 +0000
Files and hashes:         1: 4GPF89WAgnUGZriA9ptZSO-T4Cw.roa (hash: XFSu2XLv7vsDUbhfxd0ND/Cuvi1jJWGEcqXPPJPZ9So=)
                          2: 64rrEASv-BoNZyRK9yZ16W29oTQ.roa (hash: w8eD21Xmt1XkyLoIbHqWreG+9516iIJY6+/unbkEvgA=)
                          3: fdcUPEAFVByeSkOzLhk0ArJoQkw.roa (hash: rHln5/yrMAHXobfsyoJHEIc2WxuOuH5MOCln5AKCui4=)
                          4: o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl (hash: fyT4vJzfjnP9NowwslZZhjPCvfwv6AvgvaZOGUu6nAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:46:76:d9:10:54:4c:09:c1:a2:33:50:3c:df:9c:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
        Validity
            Not Before: May 12 13:00:40 2026 GMT
            Not After : May 13 13:00:40 2026 GMT
        Subject: CN=54f030e1c739e02f9085bcb7ef53d346a987b1e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:dc:f2:57:ab:fe:ea:c7:32:8b:65:f3:b9:07:
                    bc:67:d7:e7:70:68:1b:e2:3d:47:da:6a:6a:78:84:
                    17:88:ac:a4:ac:10:ff:73:2c:74:a3:ee:e7:42:c4:
                    d3:ed:48:c5:2c:01:77:d4:bc:26:7d:f2:10:3c:26:
                    6d:1b:e8:77:2f:9e:ed:4a:30:6d:36:70:d9:ef:cf:
                    9b:11:6d:d5:b9:2b:77:ec:f5:fd:2f:98:42:38:c8:
                    fd:39:e9:e2:3e:eb:6e:9f:56:eb:f3:3c:68:72:26:
                    02:f3:f4:77:35:01:98:1d:77:53:98:0e:12:8b:11:
                    7e:6e:94:8f:d5:aa:3e:d7:4b:ce:56:9a:2c:b7:a7:
                    6a:34:79:af:27:d3:d5:ab:d4:d9:3e:6c:54:a7:d7:
                    f1:e5:1a:77:84:73:01:dd:6b:92:bd:09:22:1a:83:
                    c5:82:f5:f6:ff:93:e9:cf:b8:6f:e3:8c:5c:0a:72:
                    4c:09:95:9f:b3:02:52:6e:f2:68:85:f7:60:80:47:
                    78:93:ea:4f:92:7a:89:eb:a5:6e:17:a9:ec:6e:b2:
                    13:f4:f7:8e:a5:40:9c:62:87:a4:0b:f9:20:c5:4a:
                    55:de:eb:e9:99:e9:04:89:c3:d1:ea:85:de:d8:94:
                    df:cf:85:e4:e5:7f:0f:e8:6c:9b:a8:8a:ec:1e:89:
                    e6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F0:30:E1:C7:39:E0:2F:90:85:BC:B7:EF:53:D3:46:A9:87:B1:E8
            X509v3 Authority Key Identifier:
                keyid:A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:8d:c5:71:4f:16:92:32:66:db:c1:ba:31:7d:7c:9e:88:42:
         94:f8:43:19:7e:d5:b0:68:9d:cb:40:03:b5:c5:4b:8c:05:35:
         ec:25:8f:5b:04:55:39:7c:e3:a2:e5:49:ab:68:b2:5d:37:61:
         cf:f6:48:2c:ee:c2:90:bb:21:77:88:06:8e:ed:2e:8c:cf:23:
         d2:50:7b:2b:09:5d:f2:d6:0d:be:35:dc:78:75:50:28:45:a2:
         ec:a7:d2:bc:e4:54:a7:fc:68:18:b6:38:6e:dd:d3:55:b0:ac:
         cf:0a:ba:34:d0:ee:08:80:6e:26:c0:20:99:6a:6b:1f:06:06:
         39:9c:07:d4:aa:84:ac:85:3c:0e:74:00:86:3f:aa:52:04:84:
         2d:c4:73:3a:0e:c0:02:4d:84:49:69:ed:40:40:95:31:dd:a7:
         ed:9e:70:41:06:6c:7e:87:8c:64:8a:1e:e8:03:e4:4c:8a:ab:
         ef:4b:b3:5f:28:a2:e3:00:13:88:c0:54:c7:97:17:95:24:53:
         56:a9:36:b8:de:f0:f9:4c:30:1c:65:66:33:fe:80:0e:cd:40:
         a2:7b:ca:55:07:a3:d3:88:54:34:55:33:a4:3a:fc:bc:4a:87:
         26:53:b5:09:07:af:fe:9f:76:ed:18:c1:0e:3f:cf:f0:64:c3:
         07:93:3c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:15:18 2026 by rpki-client