Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
File:                     r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft (raw, json)
Hash identifier:          q9fLho2NUxfchpPkBFE9gziOnrsyySF55rjudqwDV4Y=
Subject key identifier:   34:B1:47:9F:97:05:76:F1:B8:5E:46:12:71:24:D3:7C:79:B5:A7:17
Authority key identifier: AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
Certificate issuer:       /CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
Certificate serial:       019E314E0F98D5DF2095060B17A1E4E01B56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
Manifest number:          190F
Signing time:             Sat 16 May 2026 15:00:59 +0000
Manifest this update:     Sat 16 May 2026 15:00:59 +0000
Manifest next update:     Sun 17 May 2026 15:00:59 +0000
Files and hashes:         1: L-zvgoeGr5QCNNKdFrigYiUThmw.roa (hash: 5dCIcepW4WjNJw8oLPf6dUnoQSabbeGPDqnNUHTDSio=)
                          2: QiAgT2HWAVS4RtCxk3EgrUcgIYg.roa (hash: KFQ1WZMAZMiBqbCBbEMvQWQem6/MoMp+dWHnCpqq7zE=)
                          3: r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl (hash: 0hQLtynvf3RKYgS3IQmxbMXhi4pdA8ZszRWGm3tQXKQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4e:0f:98:d5:df:20:95:06:0b:17:a1:e4:e0:1b:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
        Validity
            Not Before: May 16 15:00:59 2026 GMT
            Not After : May 17 15:00:59 2026 GMT
        Subject: CN=34b1479f970576f1b85e46127124d37c79b5a717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5f:42:eb:b9:f5:02:01:83:4c:9c:c6:76:ae:
                    2e:c9:0b:57:94:63:b3:ca:8f:41:f8:eb:24:f6:cc:
                    6c:ad:58:7c:de:d3:a3:fc:f7:46:c9:40:75:92:f6:
                    d4:59:59:ce:fb:7d:ec:20:7b:29:9a:99:c1:7b:76:
                    ea:18:2a:9c:d9:55:a8:48:96:0a:58:e2:66:eb:53:
                    7a:7f:88:40:18:3d:b4:94:c8:6a:1c:3e:04:a2:75:
                    de:84:d6:3b:60:ff:68:c5:7a:d0:95:47:37:86:97:
                    28:0e:4f:d6:1c:92:1b:a0:cb:31:c0:8a:b4:9d:a3:
                    27:89:51:a6:90:16:12:45:87:16:d8:fd:f8:ee:d5:
                    16:21:65:6b:9e:a1:86:8a:8b:ca:25:f1:e5:98:c4:
                    5c:da:07:22:8f:04:27:0e:5f:92:af:77:88:ab:2b:
                    ec:78:7d:86:9e:4f:cb:31:27:bd:91:9b:25:5e:b5:
                    09:d6:3d:6c:29:71:15:4c:76:df:56:55:cb:0c:72:
                    03:8d:3e:66:99:77:78:21:66:14:aa:3f:ed:40:7b:
                    96:fa:cb:18:26:78:20:0b:40:c1:49:3e:1b:93:48:
                    b9:94:12:45:61:62:d0:c7:ae:db:ea:b0:37:b2:60:
                    9e:f5:29:f2:8e:b9:4d:48:5f:39:00:06:7a:8e:e3:
                    c2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B1:47:9F:97:05:76:F1:B8:5E:46:12:71:24:D3:7C:79:B5:A7:17
            X509v3 Authority Key Identifier:
                keyid:AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:5c:6c:48:46:95:d9:9b:b3:f2:88:86:82:e1:11:2c:6b:bd:
         ae:5c:2b:33:8d:08:d7:52:3c:60:7e:9e:c8:2d:77:4b:93:cf:
         dc:6b:dc:e8:cb:13:2b:da:7e:6c:10:06:bf:56:e2:da:ac:fa:
         de:bb:56:ed:66:13:01:08:9c:31:e3:1a:1c:38:e3:60:5c:c6:
         16:8b:ff:5e:70:0d:8c:4f:1f:c7:61:11:87:bb:cc:a8:6b:58:
         5b:7d:40:09:85:f8:6d:94:28:6d:9f:87:44:13:ae:39:12:cf:
         81:e4:4b:5c:2b:91:fe:f9:a4:97:c3:10:61:e3:da:bd:93:13:
         89:58:aa:b3:0c:db:d6:d6:1e:c3:68:5e:d3:9d:36:b5:f1:b0:
         3b:d2:38:fa:42:08:9c:bf:b3:2f:dc:64:bd:c8:a4:08:fe:f9:
         db:da:6d:78:75:c9:ea:4d:74:12:8f:ae:af:cc:2a:3a:0c:e6:
         41:13:2d:22:50:20:23:85:23:e8:12:75:96:0a:70:81:55:fa:
         22:b8:4f:a1:a9:8c:e6:bf:f9:94:b6:c5:de:97:57:cf:61:93:
         7d:a9:58:7f:ec:58:fc:16:19:e0:41:95:d9:83:b2:39:2c:ee:
         7e:50:39:9a:34:6c:d5:70:1b:4d:ac:6d:1d:4a:db:88:b9:c6:
         7f:0b:f1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:28:39 2026 by rpki-client