Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
File:                     TEA7xgtKE8Pao0EaySPGNy1CPrg.mft (raw, json)
Hash identifier:          xZ5W3bmgqlGuDKIpiUdVA827nY5kEk84F1J8Ura4c5k=
Subject key identifier:   03:F3:6D:06:D2:42:9B:86:19:8E:46:A6:90:EB:CB:8E:18:9E:D6:D7
Authority key identifier: 4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
Certificate issuer:       /CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Certificate serial:       019E1EA3411BF2D6C168BE0D781DF334BE09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 00:01:15 +0000
Manifest this update:     Wed 13 May 2026 00:01:15 +0000
Manifest next update:     Thu 14 May 2026 00:01:15 +0000
Files and hashes:         1: TEA7xgtKE8Pao0EaySPGNy1CPrg.crl (hash: v+fIH8MTySo66VhA2JOILpVyv4DMKem3xQbnRVMcUSY=)
                          2: daxj-MhkiZarWyN8EVbWUahA0Nw.roa (hash: DXI6WwfxF6esJ4bJvCIfH7p2ed5ZUha18BtslnvRoss=)
                          3: n7q5NwtaL8-zEQXH647Qf4RaQks.roa (hash: n40KhH8cPfP863DY99KhVmZjjBSxGcmy9+bxffCu9sY=)
                          4: v7NOMk3x2Uly1ZRD2JuF1N9_0qo.roa (hash: +/eUsv8fNjsa5iAvEDJgYJR3r1TegvUrhwXeQYQizWs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:41:1b:f2:d6:c1:68:be:0d:78:1d:f3:34:be:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
        Validity
            Not Before: May 13 00:01:15 2026 GMT
            Not After : May 14 00:01:15 2026 GMT
        Subject: CN=03f36d06d2429b86198e46a690ebcb8e189ed6d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c7:4b:2b:fc:a5:11:04:37:f0:00:e0:e9:28:
                    0d:1b:10:b4:90:16:32:f7:e1:2f:a6:f4:e3:d3:8f:
                    43:8c:dd:c7:c1:0f:0e:cb:d4:5f:79:61:c1:81:14:
                    e2:3f:4b:c7:74:7b:52:82:e0:d6:4e:c6:12:00:41:
                    52:17:31:34:cb:80:a9:eb:d5:b4:57:e3:cd:e9:6a:
                    54:3f:0a:67:c8:0a:49:12:ca:96:d3:90:a8:39:60:
                    55:f6:de:67:1c:61:bc:2a:01:29:66:d7:84:5d:75:
                    31:03:da:5c:0e:35:01:59:13:5d:07:26:e8:e1:b6:
                    cb:f4:05:66:2c:b0:7f:e9:b3:00:fb:10:45:14:80:
                    9e:f4:e8:14:d3:44:4c:ab:f6:e5:98:28:25:7c:26:
                    49:14:4a:26:20:ad:7e:8d:11:dd:d5:c3:7a:ec:1c:
                    09:35:54:3e:7f:44:a7:93:af:75:1e:f5:b1:04:5c:
                    d4:9a:a6:b2:ec:27:5a:b9:6b:7a:1d:44:20:2c:f8:
                    d5:dc:69:e9:cb:33:e8:d1:4b:40:40:0a:be:ad:fc:
                    79:34:e4:4f:3f:03:58:9e:e5:1e:de:37:6f:3d:b8:
                    68:19:34:4a:df:65:cb:52:47:6a:72:c4:4e:37:82:
                    f5:55:6a:e8:26:4d:ce:14:3e:d5:cd:69:1a:bc:da:
                    bb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F3:6D:06:D2:42:9B:86:19:8E:46:A6:90:EB:CB:8E:18:9E:D6:D7
            X509v3 Authority Key Identifier:
                keyid:4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:04:f6:d7:d6:22:30:4c:d6:45:3a:ca:62:b4:6d:e2:28:0f:
         b6:c9:28:c8:4d:3b:02:28:dd:9d:36:3e:d7:e3:4c:dc:1b:68:
         2a:81:85:e2:f7:83:cb:52:4f:24:2a:9d:36:b7:58:0f:8b:df:
         b8:2b:92:09:c2:a9:24:c4:35:12:13:98:f4:ec:5e:f9:3b:03:
         52:17:3d:64:d4:f7:2c:7a:d9:90:62:8d:a5:ff:49:8c:bf:48:
         a6:31:c7:eb:fb:5e:63:b9:1c:26:c4:95:b9:82:d1:af:48:1f:
         41:32:32:00:67:eb:a5:0d:c8:5e:22:b1:9f:cf:b9:96:b5:ec:
         12:f9:19:db:46:e7:51:aa:4a:7b:3b:ac:43:a5:3b:0e:a9:11:
         86:9d:58:da:47:98:ad:91:b5:b6:76:31:53:2b:5b:7d:9b:11:
         a6:9d:97:a3:9a:9f:44:14:33:5e:56:62:52:50:5d:15:6f:af:
         9e:0e:b0:10:e2:c7:bb:78:90:3f:37:a0:3d:e4:79:d8:17:ab:
         c5:a3:df:c4:da:8d:65:95:ae:ce:bb:e0:66:77:af:0b:ea:31:
         bd:0d:ab:31:3b:cc:8f:10:9a:fe:e7:75:7d:91:80:6f:56:30:
         6e:08:5f:68:9e:96:5c:45:f1:9d:eb:01:03:b1:8f:e8:12:cc:
         e6:dc:92:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:03:27 2026 by rpki-client