Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
File:                     sy7is5cSN3tL_snmasfm6Qjvzuw.mft (raw, json)
Hash identifier:          Nr1m71gF/fReNJj+AJPpyvfse6jVzG7HVwrqOQ5PeO8=
Subject key identifier:   C9:FF:45:0C:AC:55:AC:8F:B4:E8:12:E5:73:42:2C:7C:6C:98:70:14
Authority key identifier: B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
Certificate issuer:       /CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Certificate serial:       019E295D990A637E9275698800B60250C049
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
Manifest number:          191F
Signing time:             Fri 15 May 2026 02:01:00 +0000
Manifest this update:     Fri 15 May 2026 02:01:00 +0000
Manifest next update:     Sat 16 May 2026 02:01:00 +0000
Files and hashes:         1: 1-qCzU7rt1XBn9cM66mOKV2JKpmM.roa (hash: 2yNm3gZsn/uIFKiYLjVHUVr0sDTSowqLDiGRvdYsMoM=)
                          2: BpG8igZJv8h8cPkp6g_Gbs3F_SU.roa (hash: EZCW2Mw9lZcsL5iipH/n6h6UZOB/4+vnk665tkL9CRo=)
                          3: PwG6kgE4pgXJJkL8ugwSTM2yxbE.roa (hash: DDzmamajStjqmhcsDYxm8w9Zc5fmsm1zJsTmwujf+jw=)
                          4: sy7is5cSN3tL_snmasfm6Qjvzuw.crl (hash: F+FrDc74beUD4mxhnda4m61meZ6HbTBYwck7MVVEOMI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:5d:99:0a:63:7e:92:75:69:88:00:b6:02:50:c0:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
        Validity
            Not Before: May 15 02:01:00 2026 GMT
            Not After : May 16 02:01:00 2026 GMT
        Subject: CN=c9ff450cac55ac8fb4e812e573422c7c6c987014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:58:04:de:55:c0:9f:32:1c:d4:fb:7e:e5:c7:
                    ed:9e:b5:4b:17:a3:48:3a:53:63:52:6c:03:c7:59:
                    4b:28:d5:0a:06:e4:c2:5d:67:96:01:85:21:aa:85:
                    f4:e2:b4:17:20:97:9b:da:42:b7:ad:9e:03:52:e2:
                    e7:f4:0a:2c:43:27:d8:79:fc:37:82:11:71:91:bc:
                    a9:17:08:46:f2:2c:cb:f5:da:96:2d:09:d4:ab:00:
                    b3:92:36:ed:f2:eb:ab:36:b9:f7:1b:2e:24:05:da:
                    8a:f6:c8:72:ed:6d:6c:aa:78:06:f6:ba:a0:6b:80:
                    32:ea:a9:99:88:47:d2:e8:d8:97:a8:35:63:6c:cf:
                    09:98:6a:e4:55:a3:14:c7:77:06:ad:87:f0:84:a8:
                    1d:9b:df:29:ac:3d:73:d7:47:85:84:68:28:ab:ff:
                    9c:a4:9c:5f:f0:c3:d2:06:0f:f0:2c:24:d1:4a:f0:
                    78:6a:f5:bb:ae:d7:58:75:b5:a9:b6:61:ae:b1:66:
                    55:6b:04:c9:e9:45:5a:18:29:4d:7f:df:2c:9e:08:
                    da:e9:dc:f8:18:3e:11:73:9d:ea:7d:0b:4f:8c:e7:
                    36:d4:fc:32:46:08:ac:11:7a:9e:18:71:b3:83:f1:
                    df:14:ec:58:4a:8d:74:66:72:d0:3b:28:7a:9c:cd:
                    32:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:FF:45:0C:AC:55:AC:8F:B4:E8:12:E5:73:42:2C:7C:6C:98:70:14
            X509v3 Authority Key Identifier:
                keyid:B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:20:39:68:ab:12:32:c5:28:b2:20:ea:67:21:79:6d:21:2f:
         18:89:30:c3:d6:e5:08:68:34:3e:41:78:23:9f:7d:32:4e:1e:
         c5:67:1d:98:34:c5:97:9f:cb:a8:fb:14:67:d4:03:db:e6:aa:
         52:17:fd:9a:6d:c1:40:d6:66:14:34:5a:63:5c:18:12:d3:4a:
         34:20:3f:ca:fc:10:6a:78:1a:af:34:60:72:d6:db:c5:77:c8:
         ab:b4:ce:b8:6b:fa:ce:d5:20:ed:5f:31:36:b8:fd:e2:30:59:
         16:13:e7:9c:98:64:d9:e9:ef:49:26:61:ad:e2:64:c8:81:d3:
         bc:fe:81:41:a7:6c:e4:dd:b0:0c:69:d1:68:3f:4c:cc:4f:22:
         88:51:7d:bb:73:fb:3f:28:f2:b6:2c:3e:01:db:01:de:af:51:
         74:17:b2:66:54:78:52:2d:c9:11:ff:9d:2c:24:aa:6b:bc:30:
         29:85:57:b1:ce:67:8c:a4:31:e6:40:9b:fb:cf:bd:bb:ca:e2:
         28:56:5a:34:d1:18:53:19:34:69:d5:44:d0:98:6e:db:36:2e:
         6b:90:04:37:a4:4b:a2:2f:d0:04:a6:96:d1:82:9c:20:d9:b0:
         f2:ce:f5:c9:a9:c5:de:5f:aa:a8:e5:a2:fd:37:1d:f0:38:81:
         47:bb:f1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 12:45:04 2026 by rpki-client