Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft
File:                     e4jUpKsYpZtmTauv2ziA3DWyK5E.mft (raw, json)
Hash identifier:          ex5h9NRMaNNXXddt5W2qiGIY5ySgt8twq1e4+LKeA78=
Subject key identifier:   1E:DD:FB:6D:35:CB:7B:A4:B0:64:34:AE:AF:A5:28:95:63:4E:ED:1B
Authority key identifier: 7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91
Certificate issuer:       /CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91
Certificate serial:       019E53A35CA8ABD941DDA411BDE5F51FCC75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft
Manifest number:          1928
Signing time:             Sat 23 May 2026 07:01:15 +0000
Manifest this update:     Sat 23 May 2026 07:01:15 +0000
Manifest next update:     Sun 24 May 2026 07:01:15 +0000
Files and hashes:         1: 4SDEWo-xQsKLEV5N5c74kcSp4oo.roa (hash: Mn5HgxK6d1bhThHGyve20eCsHoaIqihBEBC3lrXSKiQ=)
                          2: 9XmTiY_H8jaK8nxNmw6DCXZkrL8.roa (hash: qzv4sP0iawufJ5iQxd2v/qGGI7FMui/kqPe0/MuBNTw=)
                          3: YgTu92EMlSHH6hAx-wKAfH0f5HA.roa (hash: w4NEQ8Pa4tghHvqnWHIsU9oi0/GjMWGF/km3INOctDg=)
                          4: e4jUpKsYpZtmTauv2ziA3DWyK5E.crl (hash: /iaHzRT0FJuzoTxNYByq0LIIvXmsRpwLjtCpD8gSSIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:53:a3:5c:a8:ab:d9:41:dd:a4:11:bd:e5:f5:1f:cc:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91
        Validity
            Not Before: May 23 07:01:15 2026 GMT
            Not After : May 24 07:01:15 2026 GMT
        Subject: CN=1eddfb6d35cb7ba4b06434aeafa52895634eed1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a8:04:d7:bc:fa:e5:fe:00:b5:7f:65:55:fd:
                    0e:d2:25:57:22:a7:be:21:43:b2:fa:e5:c6:3f:8a:
                    b2:f0:0e:00:7c:d4:23:64:b0:e3:41:7b:39:ed:82:
                    dc:fb:93:5a:4e:8a:5a:c0:09:9b:7a:ea:30:1c:17:
                    c9:2b:02:93:98:24:da:cb:d2:14:ee:03:84:f4:33:
                    9a:73:a3:4c:a7:da:52:c1:dd:58:05:76:e9:2a:32:
                    6d:a9:36:90:3b:07:3e:53:74:9c:b2:43:8f:86:ad:
                    e6:a7:a8:51:23:81:23:86:01:7e:65:ca:81:56:ad:
                    44:3c:01:92:a9:ce:d1:1a:09:ad:a9:ae:e4:11:49:
                    58:16:ce:77:d8:da:08:68:3b:21:a8:ca:b4:f9:21:
                    ea:5a:f0:37:03:06:fb:46:ca:8a:0e:56:97:46:cd:
                    bc:55:97:60:91:2f:43:17:37:cd:8f:6f:57:17:74:
                    01:a2:16:f0:d3:7d:bf:2b:d8:16:de:17:88:c1:05:
                    19:59:95:cd:6e:e6:04:11:f6:4d:b6:2d:04:5c:77:
                    08:72:d1:77:81:2d:7d:c6:ab:85:35:0f:5f:c0:45:
                    c9:43:8b:fa:f2:0c:46:35:37:76:d2:f8:86:4f:23:
                    de:38:86:d7:74:e9:60:2e:2e:c4:c1:92:09:d2:6f:
                    7b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:DD:FB:6D:35:CB:7B:A4:B0:64:34:AE:AF:A5:28:95:63:4E:ED:1B
            X509v3 Authority Key Identifier:
                keyid:7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:5f:97:f5:d8:78:fd:7b:3a:f0:28:bb:61:d8:f0:f3:b7:bb:
         d3:db:7c:00:8c:c6:23:15:4e:cb:99:0a:67:36:78:d0:17:56:
         4e:9d:73:27:81:92:e8:b4:f9:f8:91:ab:5e:02:24:1d:a2:2b:
         48:1f:5f:b6:01:21:49:00:8c:4d:ca:32:77:b4:17:76:26:96:
         7c:2e:4c:90:bb:06:ba:12:ab:2c:12:b1:11:9e:b3:b6:b3:7b:
         2a:f1:bc:8a:30:4f:29:1e:46:32:9d:b9:09:10:4a:33:61:b2:
         07:b2:8d:d5:62:72:0c:7a:cc:4a:b2:53:ff:7f:f0:87:8f:30:
         ac:c8:b3:50:2f:a6:1e:d4:14:aa:60:30:2e:62:7a:8f:66:d5:
         89:ab:e1:8c:cb:1e:bb:de:f8:3b:1c:fa:15:db:e1:ef:e5:9c:
         8d:49:3e:36:f5:aa:63:37:1f:ef:d6:2f:01:d0:28:63:6f:ff:
         79:e8:9e:b1:c0:08:da:cb:02:f4:a6:c9:ba:04:be:f0:a0:1b:
         52:60:ea:42:27:4a:2e:5c:d6:27:5f:4a:79:8f:75:48:1c:3c:
         e0:98:c9:30:2f:dd:a3:10:97:d0:b8:39:ab:c1:7e:f6:08:a4:
         36:0a:19:3c:59:50:06:d8:26:57:d7:69:ca:ed:d9:c1:f3:78:
         fa:94:2a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 09:58:46 2026 by rpki-client