Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
File:                     9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft (raw, json)
Hash identifier:          KJvGcVQt7IjrNcY+9nIMS7VD+on41q4ul5tBJGt5hBg=
Subject key identifier:   D7:43:72:83:0C:CB:1B:92:C3:43:90:7D:65:6B:E5:8A:C8:0E:AF:A4
Authority key identifier: F6:DE:34:6B:58:05:32:7B:BC:9D:F5:E4:9B:16:C9:97:EA:3A:12:54
Certificate issuer:       /CN=f6de346b5805327bbc9df5e49b16c997ea3a1254
Certificate serial:       019E1D59DF1C8ECDC0F07BB5A736FA084AD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
Manifest number:          1903
Signing time:             Tue 12 May 2026 18:01:29 +0000
Manifest this update:     Tue 12 May 2026 18:01:29 +0000
Manifest next update:     Wed 13 May 2026 18:01:29 +0000
Files and hashes:         1: 9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl (hash: N5IdIQR8oaVmyMAxsc79Hgb5W4dYMzM359qhqS7kGJ4=)
                          2: PTV1hUcFPrtTj8H3jV-0PBWi2aA.roa (hash: LVcltXxTmaC1wumCr9KKXzHWOb4BW8vwqUzLL/KaVfw=)
                          3: TCIlW-BlRgj9qm8sFvnqA1D_U0w.roa (hash: 3xQeUcgzW7NvDJ0rSLhKBh5bLuiyyVyOLX9rka6WNDc=)
                          4: pt0vpyYLtzmKEkPORjUEbfLrK04.roa (hash: aNfm1fqgMjkcUsOwar3uLSqc/xreSHXCvlrwdm4pI3s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:df:1c:8e:cd:c0:f0:7b:b5:a7:36:fa:08:4a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6de346b5805327bbc9df5e49b16c997ea3a1254
        Validity
            Not Before: May 12 18:01:29 2026 GMT
            Not After : May 13 18:01:29 2026 GMT
        Subject: CN=d74372830ccb1b92c343907d656be58ac80eafa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f2:6b:ee:71:d2:6a:2c:5f:71:f1:9b:7a:03:
                    17:21:dc:9c:00:e0:a5:02:7f:5a:30:51:7f:c9:21:
                    0b:48:9c:42:30:19:8a:31:6e:05:67:79:0a:8a:33:
                    1a:f4:79:31:54:eb:f5:e7:eb:e8:7c:85:b5:c8:77:
                    56:0b:13:12:9f:31:08:33:d9:b6:66:68:82:5b:a1:
                    c9:67:2a:45:14:40:26:3f:c6:b8:b5:32:47:ca:c4:
                    76:54:98:22:2b:16:89:66:7e:05:17:37:69:49:e1:
                    5e:d9:34:4f:ec:49:ba:06:f3:58:d7:30:d4:d4:5e:
                    a7:87:bc:5c:5e:1e:97:39:fe:36:a5:64:95:73:5b:
                    45:93:4e:9b:d9:7f:27:23:84:5d:01:a2:5e:55:6c:
                    b0:66:35:39:b9:bc:a3:27:25:de:7e:52:e2:5c:db:
                    14:6f:44:be:16:46:b9:3a:08:79:0c:23:0b:34:9c:
                    b8:7b:d3:8d:1f:ad:57:3d:4b:11:ad:dd:5f:33:32:
                    f8:1d:ee:99:68:31:7b:cd:91:65:83:38:27:76:34:
                    0a:a1:8c:16:99:33:50:42:1f:87:91:19:81:59:de:
                    82:1f:a2:b2:a3:65:a3:7f:45:a0:c4:cf:b5:dd:4e:
                    3b:69:15:d3:22:1c:16:cb:a8:0f:67:b2:ed:ec:ed:
                    a1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:43:72:83:0C:CB:1B:92:C3:43:90:7D:65:6B:E5:8A:C8:0E:AF:A4
            X509v3 Authority Key Identifier:
                keyid:F6:DE:34:6B:58:05:32:7B:BC:9D:F5:E4:9B:16:C9:97:EA:3A:12:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:49:2f:81:13:f8:0a:40:73:41:2a:b4:b2:eb:2a:46:c1:49:
         e0:4e:22:1f:6d:dc:37:d0:43:43:28:22:31:94:9d:10:9f:c4:
         ac:d5:29:ef:7c:11:69:a4:e1:da:15:d6:29:14:ff:1a:06:93:
         0b:12:3a:ed:de:2c:56:24:9b:30:ad:90:87:88:54:20:0c:30:
         27:3e:7d:10:f3:89:f2:7a:77:e4:2e:7c:0f:98:6b:63:40:3c:
         3e:b2:b8:57:cb:b1:24:59:7d:98:d7:0b:2a:b7:d9:e0:f5:ca:
         4c:16:e7:94:e6:96:16:a5:68:ed:b5:4a:bc:fb:42:15:f0:30:
         2d:9f:ac:c1:97:2b:3a:64:9f:c4:cf:7f:b7:fb:95:06:8b:b8:
         2c:58:46:e3:09:b1:2e:28:d8:98:a3:da:60:1a:d4:38:5d:12:
         00:18:5b:ee:0b:5f:ad:74:e9:de:c0:6d:18:05:9f:09:a6:00:
         45:71:9d:bb:a1:77:56:45:29:76:f6:f1:38:c9:95:18:c5:89:
         9d:89:ae:74:11:9f:6d:3d:47:a5:f3:f7:37:ee:87:8c:17:ab:
         fc:cd:d3:14:31:d6:07:ba:a8:60:1c:ef:01:b3:33:5d:42:a5:
         47:09:02:84:c3:26:3e:93:8f:1e:5c:dc:59:2c:89:b7:ee:58:
         a7:db:83:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:29:57 2026 by rpki-client