Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
File:                     TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft (raw, json)
Hash identifier:          rXtp2zUJ5Fo6MmjlSJkqnbbBUpWsu54nYJ5Y+Kko7qg=
Subject key identifier:   E9:82:21:FD:FC:A4:0F:FE:53:FE:2E:41:8E:51:F5:C0:1A:30:B0:87
Authority key identifier: 4D:86:2E:65:E9:3D:88:5C:4F:97:44:9B:CA:EB:AB:C3:51:DE:67:D2
Certificate issuer:       /CN=4d862e65e93d885c4f97449bcaebabc351de67d2
Certificate serial:       019E1D905ADF067EFD9E1ECBDCF3675B6CD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TYYuZek9iFxPl0Sbyuurw1HeZ9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
Manifest number:          0145
Signing time:             Tue 12 May 2026 19:01:00 +0000
Manifest this update:     Tue 12 May 2026 19:01:00 +0000
Manifest next update:     Wed 13 May 2026 19:01:00 +0000
Files and hashes:         1: F3i7pvlCaVlLH03PBuARZVEC6Dw.asa (hash: FtQAM/wOBZf+OkMWx2MgLRzyqtUbtvx1ifNIr7aVQfc=)
                          2: TYYuZek9iFxPl0Sbyuurw1HeZ9I.crl (hash: Vt3N8IbsThIj6LDi4+rq8vzh++QmvGKw56zYE94UtV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TYYuZek9iFxPl0Sbyuurw1HeZ9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:5a:df:06:7e:fd:9e:1e:cb:dc:f3:67:5b:6c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d862e65e93d885c4f97449bcaebabc351de67d2
        Validity
            Not Before: May 12 19:01:00 2026 GMT
            Not After : May 13 19:01:00 2026 GMT
        Subject: CN=e98221fdfca40ffe53fe2e418e51f5c01a30b087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c0:20:28:b3:76:09:74:b3:7d:fe:f3:db:16:
                    11:08:73:a9:66:ce:8c:cb:fb:10:14:c2:79:fb:b2:
                    e2:b8:7f:b9:cb:af:29:3a:ad:ca:cf:85:87:a6:ee:
                    b8:ef:9a:b8:7a:2d:41:10:4c:5d:42:60:88:8d:f9:
                    aa:96:d6:6c:24:67:57:26:b8:26:5d:00:6e:07:61:
                    9b:86:f3:8b:e2:e0:36:5f:a7:86:4b:c1:2e:50:14:
                    3c:17:f5:23:82:41:6f:19:35:5d:ae:59:4d:4b:b4:
                    8e:5f:22:71:da:78:d9:62:ee:3f:4f:d4:89:94:aa:
                    21:72:a7:5f:d1:b2:37:f5:a9:08:c8:e7:a7:36:b5:
                    b2:08:ef:47:ec:3e:41:cc:3e:8e:d9:bb:04:b5:a3:
                    0f:87:61:1c:05:dc:f5:7e:23:a6:11:9d:b8:9e:bf:
                    79:5b:cd:d5:11:59:f2:0e:57:a8:33:73:f8:73:0c:
                    bf:d8:dd:e2:10:79:d6:46:54:b5:a4:89:c0:25:e3:
                    1b:92:3c:31:ef:a7:69:33:a5:7b:22:44:20:0c:f2:
                    65:82:72:6f:ea:a1:88:f2:9e:64:26:6c:61:90:9d:
                    91:eb:f0:f0:53:1b:66:38:fa:2e:85:da:c0:bb:dc:
                    02:ab:92:4c:c9:11:fe:48:96:ed:75:a8:a9:0a:36:
                    10:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:82:21:FD:FC:A4:0F:FE:53:FE:2E:41:8E:51:F5:C0:1A:30:B0:87
            X509v3 Authority Key Identifier:
                keyid:4D:86:2E:65:E9:3D:88:5C:4F:97:44:9B:CA:EB:AB:C3:51:DE:67:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYYuZek9iFxPl0Sbyuurw1HeZ9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:40:fa:1d:aa:7c:14:32:c3:0f:90:4d:1f:a9:be:04:31:cc:
         af:83:3d:87:ed:8b:90:11:a0:7c:29:d1:4c:7e:85:3d:6a:b4:
         14:f0:1c:14:62:9e:fc:73:43:c8:2d:65:01:97:2b:b9:b1:01:
         51:25:e0:25:c7:1a:27:68:a2:25:fd:bb:a8:a3:a3:89:c5:7f:
         ea:b3:be:e0:41:fa:83:1b:c0:73:6c:53:ea:09:30:ba:f8:22:
         a5:b0:02:bd:93:f4:e8:9c:8c:c6:ec:77:f2:37:5b:95:36:25:
         56:5c:05:b3:b4:fc:8e:0f:78:9b:76:5d:d1:fe:be:96:9d:fa:
         78:bd:7d:d1:db:5c:17:04:34:e2:7a:ca:44:51:da:ad:99:dd:
         b1:66:67:39:9a:b3:79:d7:6c:c4:2c:5e:ad:70:57:03:b8:12:
         04:6f:1e:28:70:ff:f5:0b:87:60:9e:a9:25:23:16:ce:d6:a8:
         81:90:6c:1a:13:42:ee:d8:60:62:d4:50:cc:87:23:a2:fd:cb:
         49:93:7c:1b:ac:6d:c2:d5:14:eb:2a:f2:eb:e5:84:a5:dc:d7:
         46:b4:54:10:f7:fe:b7:aa:62:cf:b2:cc:20:3b:ad:8c:51:8c:
         19:34:15:11:a5:88:9b:38:41:f7:f0:8d:e8:2b:1c:d6:10:23:
         ef:9f:52:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:12:33 2026 by rpki-client