Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
File:                     tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft (raw, json)
Hash identifier:          2zZ//xSxcKoVSGOx/Jjrgz+1wavgeEEOmNadkCdVMUw=
Subject key identifier:   30:4C:88:C2:D0:82:FD:60:DA:94:B2:47:A9:AA:65:F0:61:7F:2F:FE
Authority key identifier: B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
Certificate issuer:       /CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Certificate serial:       019E56A4426DD1427012403E690014D2FF4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
Manifest number:          1383
Signing time:             Sat 23 May 2026 21:01:05 +0000
Manifest this update:     Sat 23 May 2026 21:01:05 +0000
Manifest next update:     Sun 24 May 2026 21:01:05 +0000
Files and hashes:         1: Ts1c5R1pfarxRE69RZTUbL8j2wI.roa (hash: ZcQpB70U2YO+2we7XC8myVB/BAIh03F9aXKEn9a2hG4=)
                          2: tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl (hash: H71MOTYTletu/XV89elhXnHFECRi3uEkAq3hKJMSoN0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 May 2026 20:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:56:a4:42:6d:d1:42:70:12:40:3e:69:00:14:d2:ff:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
        Validity
            Not Before: May 23 21:01:05 2026 GMT
            Not After : May 24 21:01:05 2026 GMT
        Subject: CN=304c88c2d082fd60da94b247a9aa65f0617f2ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7f:d7:ee:09:fe:85:fb:e1:e0:0c:89:52:7d:
                    3b:8d:8e:86:b1:7a:e7:03:56:a6:ee:d5:6d:37:9a:
                    a2:37:68:c6:47:54:3b:5a:dd:29:2e:c7:55:cb:ff:
                    30:bb:53:1e:89:e9:9e:b0:d7:63:5f:56:f0:aa:ba:
                    e6:02:6e:27:c1:44:fe:1e:0e:42:d9:1f:28:10:24:
                    9a:3a:0f:3f:26:3c:f3:16:bc:25:65:b9:fc:8d:fb:
                    2b:80:38:b5:84:e6:9d:b9:de:76:ca:06:6c:92:52:
                    9a:01:6f:95:b8:41:2a:3f:d8:0e:38:4d:f8:89:04:
                    36:13:bc:97:98:68:04:ae:2d:cd:1c:b0:6f:83:4e:
                    de:a9:82:28:1e:b6:80:08:da:9a:87:a1:1f:79:c3:
                    bb:aa:8d:e3:31:89:e6:d9:4d:d6:5a:be:7b:18:8f:
                    8b:28:dd:3c:14:83:87:35:63:f7:9f:ed:63:8b:f9:
                    a7:52:57:24:7b:65:f9:2d:ee:8a:6d:93:82:6c:16:
                    24:1d:5e:ad:34:0d:82:e7:5f:c8:41:cd:57:a9:93:
                    de:f2:71:e2:f2:6d:96:7d:cd:c4:4b:68:03:39:c1:
                    07:8d:a7:49:c2:91:9f:7a:49:ae:a2:01:2a:e5:52:
                    d3:79:8d:57:ac:b1:34:90:cd:55:bc:08:a1:05:96:
                    4d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4C:88:C2:D0:82:FD:60:DA:94:B2:47:A9:AA:65:F0:61:7F:2F:FE
            X509v3 Authority Key Identifier:
                keyid:B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:1d:f6:b5:19:77:b7:81:88:c5:b6:cf:65:6f:c9:db:7d:fd:
         0c:ba:f4:e7:cc:41:98:61:69:3f:4f:03:2f:ae:fd:90:d6:2b:
         e3:01:12:0f:48:43:af:c3:78:ea:1f:14:a9:e7:ee:a8:0f:2b:
         0a:66:97:11:ff:af:dd:0b:c8:3c:bc:b1:71:ac:49:51:fd:09:
         e0:58:8b:a5:15:d5:0f:f8:09:56:f0:8f:5b:c2:52:06:4f:7d:
         12:57:3b:15:64:74:c2:35:0e:16:78:08:6b:44:a9:33:3a:62:
         59:91:74:a0:ca:dc:f7:e4:83:18:96:4a:80:23:3a:92:48:d9:
         e6:c8:c4:d0:b4:59:fd:74:91:6b:4b:c3:22:94:ed:a0:55:9d:
         5c:ce:5a:3d:6c:47:8b:88:ae:7b:67:4f:29:25:de:63:17:5a:
         82:3d:68:09:2c:38:6a:fe:94:84:32:f6:3c:80:8e:7e:c4:37:
         1e:45:6a:6a:32:39:f4:1f:f2:e3:46:7e:30:e3:d7:e6:a4:02:
         92:35:ea:52:5c:1f:07:12:d1:ce:4d:b4:a5:a4:b7:7f:6c:a6:
         93:41:b4:db:1f:59:aa:88:5c:5b:e2:93:8d:38:9b:0b:89:00:
         a3:4a:51:a9:c8:d3:36:3a:04:0c:b0:26:e0:e7:4c:20:a4:75:
         6a:c9:2a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 04:38:11 2026 by rpki-client