Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
File:                     V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft (raw, json)
Hash identifier:          mFSP4k1jpJs0RxzzWu4nH5xaN5HzocCuAieo0yZjGc0=
Subject key identifier:   9E:85:1D:77:8F:2C:99:EC:5E:01:E7:E2:13:83:1F:5A:28:05:B6:A1
Authority key identifier: 57:7C:0C:D5:A4:CF:D8:3D:49:1D:62:7D:8B:0F:CC:B6:70:E8:15:34
Certificate issuer:       /CN=577c0cd5a4cfd83d491d627d8b0fccb670e81534
Certificate serial:       019E329835C0131B9FFF5389154D385FE1F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
Manifest number:          1912
Signing time:             Sat 16 May 2026 21:01:36 +0000
Manifest this update:     Sat 16 May 2026 21:01:36 +0000
Manifest next update:     Sun 17 May 2026 21:01:36 +0000
Files and hashes:         1: 5G9NBhPDFJnBpV_ODJ-yxnU8F0U.roa (hash: xl4h6DuoEnDQif85q6/N4TbdIRiCv01AKSy0anUCZ3k=)
                          2: RkiRAFcrZu-Lo8gYHeUyPspBx44.roa (hash: oGKuW1KVMpw7V7M8/Yknn9ZA7Ros9J6QJpSzewOzRZI=)
                          3: V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl (hash: Sn933tWjFZujZiPaUDUARa/h73TUuton9qsHhZuk87Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:98:35:c0:13:1b:9f:ff:53:89:15:4d:38:5f:e1:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577c0cd5a4cfd83d491d627d8b0fccb670e81534
        Validity
            Not Before: May 16 21:01:36 2026 GMT
            Not After : May 17 21:01:36 2026 GMT
        Subject: CN=9e851d778f2c99ec5e01e7e213831f5a2805b6a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e5:db:83:d7:52:3d:30:a0:af:b5:c8:b5:5d:
                    01:a5:5e:a1:b0:62:ce:93:a9:60:1d:ff:c8:81:80:
                    0f:24:26:fb:6b:0a:fa:6e:8b:86:61:b7:0f:b2:e4:
                    d8:28:4c:45:98:64:9a:f3:3d:ad:db:a3:d1:6d:99:
                    5c:88:c3:a0:1c:7f:10:b8:f2:81:21:ad:12:87:64:
                    69:a6:c9:fd:ad:4e:2b:5f:16:c3:9c:2f:b7:36:e1:
                    6d:95:11:91:80:1c:a5:92:18:82:ec:48:8f:6e:88:
                    e9:5d:4f:78:e6:fa:a6:d1:f8:20:85:04:1c:69:fd:
                    f8:bb:a6:07:76:a7:bd:4c:18:aa:b5:4c:ab:9b:4a:
                    ba:77:26:42:2f:d5:ad:9e:54:b5:f0:4b:32:3c:f5:
                    e2:56:31:b1:aa:f4:4b:43:8d:0b:11:e8:7b:0b:e0:
                    bf:a1:40:e5:5c:4b:29:e5:c9:85:5f:66:ff:31:f3:
                    91:90:9a:dc:f7:f7:30:47:63:6c:b7:a0:7b:65:e2:
                    33:4c:60:bc:55:5b:aa:51:69:b5:2f:65:c1:63:ac:
                    eb:8b:a0:0c:18:c5:68:60:e5:cd:60:b2:e5:85:82:
                    b4:a1:fb:0a:a6:9f:31:ef:f1:58:d8:5b:27:d0:47:
                    1f:b4:32:b0:ee:b5:ab:60:39:96:6c:a7:15:6b:1e:
                    2c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:85:1D:77:8F:2C:99:EC:5E:01:E7:E2:13:83:1F:5A:28:05:B6:A1
            X509v3 Authority Key Identifier:
                keyid:57:7C:0C:D5:A4:CF:D8:3D:49:1D:62:7D:8B:0F:CC:B6:70:E8:15:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:96:8d:ca:b1:23:4a:31:16:1c:3a:94:a5:47:90:18:a3:b2:
         93:65:89:67:3d:fd:2f:6e:20:29:3e:2f:2d:c3:52:b9:e7:90:
         10:fa:02:5d:5c:c9:40:88:4a:20:74:6d:50:b6:94:3e:db:74:
         96:46:34:62:18:9a:67:ea:0e:1b:df:4f:0d:28:ad:53:d3:0e:
         9a:3c:cf:f1:7c:2a:3b:f3:70:a8:d8:47:58:bc:8c:15:aa:48:
         34:9d:27:93:ec:70:f2:d0:34:25:1f:c7:6e:06:ab:3c:12:ad:
         cc:86:e5:1e:ef:eb:e7:3c:df:d0:a8:f0:bb:aa:28:93:88:c9:
         2b:df:86:18:26:b7:65:28:5f:27:48:2d:ed:22:c5:65:a9:f3:
         1f:b9:a6:5d:c8:a3:39:de:88:10:c0:b2:d1:a2:7c:a6:64:77:
         35:ee:55:1e:c9:10:72:40:c2:4b:82:56:31:c1:b4:6f:cd:2b:
         94:24:fa:e9:cb:31:00:80:92:db:d6:a9:51:a1:b5:e4:44:47:
         15:0f:b8:51:ce:8b:b7:15:a5:a8:34:f3:21:90:13:6b:04:cc:
         1e:0f:e2:9b:1f:9a:45:82:c8:38:50:a5:f6:9d:43:d6:1c:1a:
         ac:90:9b:10:7b:11:3f:76:c5:5f:32:95:dc:f6:c1:d9:6b:f3:
         68:f4:87:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 02:05:45 2026 by rpki-client