Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
File:                     tJvYTaF5l8uyhq-QIqsuBboItEI.mft (raw, json)
Hash identifier:          bidmuGz37/Yi2l/f8Sv5NuXfcFffZGyQEaBHfS90AIE=
Subject key identifier:   EE:ED:4D:57:08:8E:A0:07:A9:F7:02:2C:0A:E0:32:22:ED:D5:F1:81
Authority key identifier: B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
Certificate issuer:       /CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Certificate serial:       019DF9837287DC54484EB6AE0E8C1238DAB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
Manifest number:          1454
Signing time:             Tue 05 May 2026 19:00:34 +0000
Manifest this update:     Tue 05 May 2026 19:00:34 +0000
Manifest next update:     Wed 06 May 2026 19:00:34 +0000
Files and hashes:         1: PTqqtT4_tP0RAOhqpaeaV7qFsoM.roa (hash: gS+7X+RhiaD/Wpkqye3btlKeUsU6cdg4vX6kC9nPKmY=)
                          2: Zx8NV8g2SZTn17r6ny-ihGOw0zg.roa (hash: oDKvuRyprpCre1JRHHQFdko0hYMR6EjsyiF9Shy7Ous=)
                          3: o_4znoNuO2BlgKbgpDwRbvS5e9M.roa (hash: UG/yd3TL4Rh6gQUIGrMAEttNV+zSF20Hc2Z6UKPMWAc=)
                          4: tJvYTaF5l8uyhq-QIqsuBboItEI.crl (hash: aEhVZJYFf1HWoC5TGg33uE9v0p6dC4IepRhJVk3eH60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 May 2026 18:48:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:f9:83:72:87:dc:54:48:4e:b6:ae:0e:8c:12:38:da:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b49bd84da17997cbb286af9022ab2e05ba08b442
        Validity
            Not Before: May  5 19:00:34 2026 GMT
            Not After : May  6 19:00:34 2026 GMT
        Subject: CN=eeed4d57088ea007a9f7022c0ae03222edd5f181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6e:bb:63:43:16:29:fb:5a:d4:0b:6e:56:72:
                    f9:23:b4:0b:0e:7e:c2:c3:d7:aa:55:51:10:07:71:
                    db:00:18:d5:a7:83:ce:5e:f3:60:e2:a5:d8:b6:72:
                    2c:60:26:62:09:6b:fc:f2:39:82:6b:ee:d1:64:bd:
                    00:0d:08:a2:18:59:8d:19:f0:b6:07:5c:7e:ae:c5:
                    dc:0b:90:94:53:59:ec:8e:50:95:dc:c7:79:2f:05:
                    19:1e:e0:36:9e:2f:d6:85:dd:a6:e2:11:a8:1e:7f:
                    c5:a0:fd:ae:ab:96:3d:69:6b:48:f8:6b:09:a7:aa:
                    a5:eb:1a:c0:8c:8a:58:09:96:86:ac:53:19:d1:ff:
                    05:49:9a:b5:bb:7b:39:e6:ae:93:98:0c:9f:0f:7f:
                    43:0a:d2:b7:f3:fa:50:32:5b:d5:53:db:5d:f4:e1:
                    e0:03:d3:1d:ba:3a:5c:5b:ae:b1:50:fd:bb:bd:e6:
                    b8:72:42:12:0e:13:f8:20:db:6c:d1:5d:ad:df:0a:
                    0b:f8:45:11:a5:17:43:f1:cc:15:ba:77:b0:86:ca:
                    85:4f:e6:98:07:99:ba:e4:c1:55:a7:c6:07:3c:05:
                    16:43:96:67:5f:cf:e6:e4:fa:07:ea:72:47:52:ec:
                    e1:19:49:8c:60:4d:53:7b:17:f5:92:f1:b1:e0:1f:
                    66:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:ED:4D:57:08:8E:A0:07:A9:F7:02:2C:0A:E0:32:22:ED:D5:F1:81
            X509v3 Authority Key Identifier:
                keyid:B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:39:19:41:68:0a:d6:e8:1f:10:52:09:a6:50:87:9e:b3:16:
         6b:1d:15:63:a5:a0:4b:12:1a:70:dd:37:db:1d:ce:ce:d4:14:
         26:2d:01:89:4e:30:0d:96:ed:d3:2a:72:5b:5c:cd:79:80:cc:
         f6:da:93:75:38:9c:97:1a:bf:d0:2b:00:4f:0d:19:ab:a2:c7:
         c6:6e:66:b5:c0:bf:46:a2:6a:a0:7f:a4:b1:0b:98:87:21:0d:
         05:a8:ff:ed:fd:66:cd:c0:8d:10:8f:2e:26:81:7d:38:fc:2f:
         e8:0e:8f:af:f2:a3:68:0a:91:01:a6:f8:c8:2d:6b:9f:d4:03:
         9e:18:53:36:0c:30:dd:46:2f:e6:6c:a5:56:23:ce:c2:19:1a:
         6b:31:ee:c4:b2:cb:a7:ad:4e:c9:56:07:e9:03:12:5d:55:12:
         81:09:c1:bb:9d:9a:a5:a5:6e:9e:32:91:ec:fc:eb:a0:76:98:
         51:c1:b7:4a:dd:b6:d2:2a:64:62:ac:2c:26:bd:a8:74:82:19:
         2d:aa:63:1f:1b:b5:a3:56:37:21:71:cb:4a:9f:75:14:5e:fa:
         b7:f8:3e:18:fc:98:cb:d4:75:5f:ad:3a:6a:f2:57:f1:6c:fb:
         de:53:71:40:51:b0:f1:50:3b:08:4f:23:0b:30:a5:25:3a:f6:
         87:50:df:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 03:47:35 2026 by rpki-client