Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
File:                     mBPi9jUdO00eYapAFvGyz6YtfN8.mft (raw, json)
Hash identifier:          6QuGxzEOhB7ljvs1gsEcq9WovIUlPIEGxFT0Q2zT3do=
Subject key identifier:   7D:AE:2D:2E:75:C7:3E:9C:C7:70:5B:8A:9B:35:B9:DA:B9:BB:34:2C
Authority key identifier: 98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF
Certificate issuer:       /CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
Certificate serial:       019E21DB36BF36F138A404C3F4E3A5859AC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
Manifest number:          05CB
Signing time:             Wed 13 May 2026 15:01:14 +0000
Manifest this update:     Wed 13 May 2026 15:01:14 +0000
Manifest next update:     Thu 14 May 2026 15:01:14 +0000
Files and hashes:         1: NfO8TWIkaxE4DaKwNuYvhzbmi90.roa (hash: 07eBVlhSt2pE8VL0qAd29LqwR9jHDzCkLPkg8sdeyGk=)
                          2: TRd3PwWjN2N6i0kSV548d4vlbt0.roa (hash: ZKnbwzmBAX2zhMCQGg8pdlTxO8b68gKUxXEWzkBH4eI=)
                          3: mBPi9jUdO00eYapAFvGyz6YtfN8.crl (hash: kVfs8zMl8FdcoIUwxh4BJ+eTMTwxE3lkNrUHoZkecr0=)
                          4: o04EKVPaSCdYlCxT4efK6vx9Qwk.roa (hash: tNYBjaANlJOuYZAK5FkLTFbNd6zPpcROskpJuIE9NLA=)
                          5: xWwqlVqWd0iRwMTuQO8eVNoCWHU.roa (hash: yQKukILLOQx8xluWCSSZQ2VF3E7ijyBr1SeiIVBdBeU=)
                          6: xulzqcYhIs7PWGHWVfL4YmNhVq8.roa (hash: WAG1ujb3pAhI/q7UcuSpjvhOpci45QogtqTPG/JOxEE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 14:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:21:db:36:bf:36:f1:38:a4:04:c3:f4:e3:a5:85:9a:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
        Validity
            Not Before: May 13 15:01:14 2026 GMT
            Not After : May 14 15:01:14 2026 GMT
        Subject: CN=7dae2d2e75c73e9cc7705b8a9b35b9dab9bb342c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d5:34:2d:b8:67:d2:20:5a:c1:ca:91:05:07:
                    93:8e:0d:40:c9:c1:e5:06:07:56:52:18:12:a5:12:
                    cd:28:3c:d1:da:a9:56:60:7c:ee:39:46:16:df:7f:
                    c6:79:da:32:0d:64:34:b7:ce:cc:76:54:fa:bf:c6:
                    64:fd:f0:09:e2:18:43:32:6a:d0:72:b6:2e:d9:30:
                    2b:b5:26:60:71:d4:9e:0f:7e:ec:16:49:a7:01:be:
                    43:26:d4:4a:49:43:95:bd:ae:d2:26:81:dc:57:d2:
                    d3:45:0d:1f:61:9b:4d:0c:d9:b7:4d:81:c8:52:ba:
                    1c:f3:ab:0a:a9:37:fe:c8:37:58:c2:7d:aa:bf:96:
                    f2:66:8e:ed:43:19:42:f8:7c:50:36:38:01:5e:13:
                    bd:62:67:f3:44:04:19:42:0d:e4:d9:ff:57:7d:de:
                    2b:00:63:f5:ac:2a:ea:38:0d:c8:c8:26:42:4c:f0:
                    26:4d:23:8e:d8:5d:9c:84:a3:13:cd:1f:87:6a:5a:
                    ef:5b:95:b9:91:a4:e9:d0:1e:cb:49:b3:da:f9:e1:
                    a2:56:09:62:f6:ce:a8:8c:50:30:a3:52:0c:1a:84:
                    45:4b:ce:35:7e:a1:13:64:f4:46:15:4d:fd:be:75:
                    41:d5:f5:6b:0e:77:6b:de:bf:4f:f1:69:e2:46:48:
                    c3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AE:2D:2E:75:C7:3E:9C:C7:70:5B:8A:9B:35:B9:DA:B9:BB:34:2C
            X509v3 Authority Key Identifier:
                keyid:98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:66:6f:f7:e4:e4:5f:d1:32:88:06:9a:44:ba:3b:5f:cf:59:
         75:f6:c3:e1:13:a9:6f:fe:03:8d:77:8c:db:f9:31:cb:c0:99:
         97:e8:4b:13:63:f1:07:14:97:9d:aa:53:e3:c8:42:02:3f:69:
         47:29:fb:62:46:2f:05:3d:a5:c7:6b:ce:32:6d:55:79:6b:e5:
         ba:d1:90:3b:77:51:9e:58:c6:ac:e7:9a:b6:a1:8d:dd:4f:38:
         d9:44:a4:46:aa:c7:02:d6:f4:c9:2c:de:af:4e:89:6a:e6:b5:
         14:b5:a8:59:6d:eb:d0:82:cf:92:9d:9b:e7:9f:3d:e7:3d:f2:
         77:be:9e:af:b0:a9:8b:04:e7:19:2e:7a:9f:78:be:32:7f:24:
         b1:f0:58:9a:7f:b5:5e:3e:e6:2b:c0:58:2b:75:9a:88:43:26:
         f5:02:8e:d3:c8:6a:b7:ba:7f:22:a4:7f:55:cf:cf:5c:b4:79:
         f1:fa:89:55:5e:48:e4:42:0c:d5:18:54:87:99:71:06:13:1e:
         01:5e:67:b2:49:c2:4d:f7:44:8b:ac:3b:9f:cf:8f:7c:51:55:
         fe:3d:57:d3:d4:be:8d:ae:d7:db:95:79:9e:87:f2:ac:47:aa:
         35:f5:5b:d5:f9:2c:0a:5a:38:28:0b:55:a7:44:35:64:c5:45:
         0d:ab:d4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:37:55 2026 by rpki-client