Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
File:                     P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft (raw, json)
Hash identifier:          vDGKr62Px18sZhw3N0E4OehpH2DZxaz11T8uPHBRefE=
Subject key identifier:   6B:B9:A2:4E:80:C0:C0:2F:B9:E2:ED:47:0C:CB:78:80:D2:7E:33:12
Authority key identifier: 3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9
Certificate issuer:       /CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
Certificate serial:       019E1FB58E2E75B35030C34B18BD9C117D4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
Manifest number:          151E
Signing time:             Wed 13 May 2026 05:00:52 +0000
Manifest this update:     Wed 13 May 2026 05:00:52 +0000
Manifest next update:     Thu 14 May 2026 05:00:52 +0000
Files and hashes:         1: 3W2kBgMIvhcXUhUq2YtKk1xN_AU.roa (hash: CAsZ3C2TdySi/ZWvlReBuoW/T5KbXTvFwU9q/tZJ4e0=)
                          2: P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl (hash: hAoI3eHPZsc/Z2qoab7Ux4FLvc0sl7Ervgq/rbL/kt0=)
                          3: RbC01VwFxiZgBTALS-uMjRZzAhY.roa (hash: q9hSu3/IMM4HWr9vjCMGx9EywT+vVqNbYQnoN0MBA20=)
                          4: _FgKHiwZ54ey0goItnrxJYHRboo.roa (hash: sg5CvvnTfG2oD+toERRbafBqjfE3xSjzejxaJO1LxU8=)
                          5: gSlaPw018DNPuMxCsveqA8oQUsY.roa (hash: 0+yjCTwe2aAK7n4AkPNcQnffX1JuMjM0FZBSULYc1vQ=)
                          6: z2A2T1nq3TaPFhF11ccXgPg0K_M.roa (hash: FIAAHyPL1J0jzI8B5mvusigwqLIBDgZSTDh7qjXNzTM=)
                          7: zXZDjCl_wpe20vJI7Svnpaah_LM.roa (hash: Uex3ZzOS035SmbmtX2k6Jvjfz1dsWhh2Uu53J7YkHiU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:8e:2e:75:b3:50:30:c3:4b:18:bd:9c:11:7d:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
        Validity
            Not Before: May 13 05:00:52 2026 GMT
            Not After : May 14 05:00:52 2026 GMT
        Subject: CN=6bb9a24e80c0c02fb9e2ed470ccb7880d27e3312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6c:79:25:b6:4a:6a:f2:37:24:e0:0f:b3:90:
                    17:b1:fb:01:da:6a:91:e5:c8:35:e7:8a:03:ea:78:
                    11:cc:0c:9f:32:18:64:04:42:72:a5:38:cc:44:37:
                    a7:a0:4e:47:cc:1a:0b:f4:f2:d9:59:a0:5a:da:71:
                    bc:1b:6e:e2:0c:f1:88:6c:c4:84:3e:ea:5e:e5:94:
                    3c:7b:4e:80:95:bc:b6:69:15:6d:90:27:d7:0c:b8:
                    a7:15:f4:52:ba:59:0d:7f:c4:bc:cf:b3:b4:29:11:
                    26:1f:94:75:ae:13:d1:81:c4:af:38:a0:30:81:ac:
                    85:e0:f0:0b:04:16:95:41:40:83:08:60:f3:8a:7b:
                    45:9e:61:01:fa:64:28:c2:66:32:b4:50:84:72:bb:
                    6c:d9:5c:de:42:37:e2:d6:6a:d8:d7:fc:1c:c1:ea:
                    90:02:94:91:5c:65:b8:31:cb:52:77:a6:0a:b2:55:
                    81:8c:c4:95:c3:e5:2f:0e:2e:91:4d:a7:38:f1:a3:
                    1d:2b:cb:2f:35:54:23:e2:46:7e:17:77:38:c5:21:
                    7b:fa:76:9d:19:a6:af:d8:f9:9f:44:7d:2d:00:f0:
                    b0:88:4e:d0:61:41:5e:72:81:b0:28:d3:c0:72:8e:
                    b2:1b:70:78:e9:88:5a:d7:53:95:6d:6d:59:c9:71:
                    96:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B9:A2:4E:80:C0:C0:2F:B9:E2:ED:47:0C:CB:78:80:D2:7E:33:12
            X509v3 Authority Key Identifier:
                keyid:3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:5c:9f:9d:6b:c4:69:e9:40:c5:cf:6d:6f:79:e0:79:eb:37:
         2a:75:b7:fd:e1:fe:4b:49:0a:91:6d:e6:65:6a:fb:33:2f:50:
         39:1f:da:30:26:54:c4:e3:ee:14:87:75:65:a0:8d:be:13:76:
         89:f6:e6:b9:e8:b9:d5:9b:4c:73:03:e1:53:2b:e2:ef:42:87:
         d4:eb:72:ef:51:37:46:f3:c3:68:58:9a:cb:52:e3:1a:db:de:
         7c:77:2e:99:1a:12:77:74:ae:22:43:5f:e2:61:e7:48:3a:25:
         a8:bf:e0:c7:cf:42:8a:12:ed:3b:bc:70:ce:3e:bd:9a:7d:8c:
         09:2e:5d:5c:66:bf:ab:c8:c9:a8:b5:c3:08:6a:3d:b6:5d:31:
         f1:41:20:94:a1:57:b1:b8:c5:7f:7f:16:be:c0:a5:fb:b9:a0:
         2f:c0:cf:0c:d9:be:18:6f:a6:ea:40:c1:77:68:2f:1f:09:d6:
         3a:93:18:7e:46:3a:fa:a2:53:2e:a5:6a:0f:83:1a:e8:72:0d:
         71:c0:6b:d3:f4:58:b4:a1:ab:8e:3e:82:48:76:24:88:8f:05:
         33:5a:e1:49:69:f6:26:92:7d:da:0e:0e:22:cd:77:a0:88:84:
         27:35:90:a6:4a:d9:08:c7:28:3b:5d:3d:73:98:ac:c6:c6:09:
         ef:43:6c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:10:57 2026 by rpki-client