Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
File:                     fOaNr18IlFbA4dAiRTk1Maxbj8s.mft (raw, json)
Hash identifier:          +MsMAJ4EZAoxKC+3Ju7HaVca2+StGbB6f0YKPQb2l5A=
Subject key identifier:   7E:42:65:4E:CC:2B:77:22:AB:78:13:ED:35:77:78:19:4C:E4:1A:28
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Certificate issuer:       /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial:       019E1D59C6781FE62158B03323AEDA579A39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
Manifest number:          195D
Signing time:             Tue 12 May 2026 18:01:23 +0000
Manifest this update:     Tue 12 May 2026 18:01:23 +0000
Manifest next update:     Wed 13 May 2026 18:01:23 +0000
Files and hashes:         1: 1-gD4Hq6k3_IBwrhpxMMG_5-Bhrc.roa (hash: D/5u0x0tc9amqj7LxNMrUHo2Ohz0yRVArWNlJ2DKIqA=)
                          2: 3Ntb8637r4izsCpVwd5gcAHqdG4.roa (hash: v8fDaBY/Qsb7VQFSR88lHqJauVxk7NICenthut3N3XE=)
                          3: CYt9Nv9dBKT9g5TLwV4c4DEZGU0.roa (hash: rA9XhkKgyB7cXpzG2udSGKxNb3vtZoJSLVB744tVVnU=)
                          4: FQaFiTcf67x6YrpuBrF65w_8hug.roa (hash: CNjoRJ7uhvB1XswkiORZT6na1N/pFMt+GGKFD8Y6iH0=)
                          5: LKLutE-uCKR41ay5iaoVFawv-Gs.roa (hash: oOu8i7EWf5PBDu9YcMHQbEXmrmW+EZz9feEFexijuIs=)
                          6: OUSNJic16YHsFdydiuaFE2ZdqEU.roa (hash: Te9uOokwyk9iyAdeUIheCIvhMu20V8m5YnWWnhDRCII=)
                          7: QYcFCUvrty_eEw95bsUeyFFjK-c.roa (hash: jbyRPBMO6AQ8+x+sL1BfcSXlfYOvQy8bP202dnbtn6o=)
                          8: SaQLJTN3Tu68cjM5ZHbz4FW_mpg.roa (hash: WsziI7VNkNBzfhBKLzBNR8KU16oQ4434je9QUJEHNAU=)
                          9: fOaNr18IlFbA4dAiRTk1Maxbj8s.crl (hash: TzA1AT20kn697VGrHmKMJAtlASvaAhlIb/kOw0BJFdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:c6:78:1f:e6:21:58:b0:33:23:ae:da:57:9a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
        Validity
            Not Before: May 12 18:01:23 2026 GMT
            Not After : May 13 18:01:23 2026 GMT
        Subject: CN=7e42654ecc2b7722ab7813ed357778194ce41a28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:42:99:4e:c0:55:24:6e:df:13:21:b0:bc:21:
                    f7:b8:48:51:c9:72:8a:57:41:8f:e0:0b:73:7b:4e:
                    34:d7:c3:f9:31:88:f9:1f:b0:c3:73:a8:26:d0:a0:
                    24:52:39:a0:97:40:40:d2:13:9c:ca:48:13:ac:a4:
                    6a:e8:13:6d:b4:16:ba:a6:a1:9e:a3:67:8c:fa:ee:
                    d4:b9:96:59:c9:97:3c:24:50:15:65:da:99:2b:b4:
                    3d:5c:4f:3b:95:f3:cf:62:19:56:8d:f4:e7:12:d6:
                    d5:32:12:58:4c:68:6b:a7:76:6a:66:39:22:8a:95:
                    5a:18:59:25:7c:3a:14:77:83:93:c4:b6:03:51:29:
                    80:e5:bb:80:42:9d:7a:ac:01:95:a9:4c:7e:53:16:
                    01:c2:7b:47:28:26:f5:f6:b0:ff:f4:c9:c3:80:11:
                    d1:c5:3d:09:a5:70:8f:bd:11:a5:53:86:ff:cb:e5:
                    08:33:3d:fe:52:3f:68:60:70:2a:1b:10:4f:cf:91:
                    12:1b:e4:c2:52:f0:02:c7:a8:dc:ce:9e:b8:c7:5f:
                    d6:1d:e9:03:e8:9f:e0:3a:63:d2:ef:26:41:92:48:
                    7e:c3:62:fc:6f:c6:98:0e:ef:d1:62:f5:be:64:57:
                    a5:a7:ab:db:f2:47:71:3c:7f:ff:96:d0:ca:1e:63:
                    88:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:42:65:4E:CC:2B:77:22:AB:78:13:ED:35:77:78:19:4C:E4:1A:28
            X509v3 Authority Key Identifier:
                keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:4f:f1:ff:32:b3:4b:84:99:dd:c1:6d:a1:59:62:9d:00:fd:
         3f:76:40:84:78:5e:98:4c:c4:a0:ac:1b:a5:49:0a:43:23:59:
         0c:d5:68:c9:92:9f:98:6b:7e:78:7c:44:e9:3d:07:82:43:36:
         a4:f5:bc:5d:d6:f0:71:f7:e2:c7:84:96:02:e3:04:1d:84:34:
         f0:2d:04:7c:17:68:80:67:0b:89:94:7f:df:e6:79:c7:8b:78:
         1f:a7:59:d4:44:76:72:5c:d2:21:09:41:ef:cd:c0:92:e9:03:
         a4:49:23:66:c9:82:5b:e2:7e:d5:86:d0:1f:13:26:5c:25:b5:
         6b:47:8e:6a:ff:9b:e3:80:b8:17:3e:24:66:2e:4e:e8:d5:33:
         71:79:1e:aa:b8:cd:90:15:93:7f:5c:ea:2a:18:f8:b6:93:a2:
         ca:94:99:0e:cc:31:18:d4:d5:1c:bc:b5:c5:1b:64:af:89:d4:
         9a:aa:e0:15:ff:1d:27:47:4a:8e:c5:4d:eb:74:dd:d7:2d:03:
         b2:fa:9b:e0:71:20:7d:8a:de:93:b2:a9:18:53:71:70:88:2d:
         df:fb:54:1b:14:c9:90:b0:04:03:14:dc:d4:4d:8e:27:74:82:
         ab:2d:7e:aa:1c:b4:a7:91:66:ac:09:e3:06:0f:6d:79:65:49:
         e8:cd:e6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:16:51 2026 by rpki-client