Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
File:                     TXaD1upTn-8ba22910ox0F5fCiM.mft (raw, json)
Hash identifier:          kIP0zHDuihZbnEmVJpJiFWyexq7oeFoFlLkqI89wtbY=
Subject key identifier:   6B:CF:1A:EA:08:26:93:49:9A:BF:1F:B9:B8:C5:67:AD:A8:51:EB:C2
Authority key identifier: 4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
Certificate issuer:       /CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
Certificate serial:       019E31F309DA568D297C2F39F2C09E6AC0C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
Manifest number:          1915
Signing time:             Sat 16 May 2026 18:01:11 +0000
Manifest this update:     Sat 16 May 2026 18:01:11 +0000
Manifest next update:     Sun 17 May 2026 18:01:11 +0000
Files and hashes:         1: 9nRBo0Yomhpgm9TNkjDZWwhznG4.roa (hash: JVKW/CXhEruKd4nkDT8EtdFwFBbGNGwV/vGyVQso2YA=)
                          2: CJ1p60ncJ6lwmkba6tzp8PwUtGA.roa (hash: Fs77R9OF/tCUM07EJYitJlab1am9Hn64q8ob0oebDkA=)
                          3: PabEzo_xhzNh86GJKwujZAVSaKY.roa (hash: KpQX2bvuJbagEXNR3/7qIg5Rru1wDlXdCAjMjXG/6Mc=)
                          4: TXaD1upTn-8ba22910ox0F5fCiM.crl (hash: KOdS5oVjMuy/TYzPgce8IXSIm2ylXYgNl1Ras1Yn21Q=)
                          5: fTj8VjA3jlGkhYbcidRdlQKvw2s.roa (hash: jRzOWOgwnHuf2EMT7ZgwseHhtj6/xt+nW051JNR2aY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:f3:09:da:56:8d:29:7c:2f:39:f2:c0:9e:6a:c0:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
        Validity
            Not Before: May 16 18:01:11 2026 GMT
            Not After : May 17 18:01:11 2026 GMT
        Subject: CN=6bcf1aea082693499abf1fb9b8c567ada851ebc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f2:db:2f:dc:32:ca:33:d5:28:f4:b2:0f:ae:
                    7c:3d:a2:60:b5:28:19:e6:e4:e2:93:60:7e:dd:06:
                    5b:7b:5b:9e:6b:fb:f9:99:9d:9d:b6:f6:e7:52:5b:
                    b2:9f:f3:f5:96:9b:13:35:7f:ae:83:1f:f9:e3:43:
                    4c:f6:14:5e:09:73:ff:6f:77:26:b9:ad:2b:ee:d3:
                    c4:de:7d:50:cf:84:8c:4b:ea:8d:e4:53:0b:9a:f3:
                    2d:7d:fb:95:c0:a3:6c:20:7f:58:fe:b3:43:c0:c4:
                    c1:e3:bf:7f:ec:17:81:bf:d3:0d:c6:7d:1e:6b:74:
                    36:c4:0e:56:cf:99:62:a2:ce:d0:fe:f5:fb:f9:40:
                    e4:0b:f8:7a:be:f1:7f:44:78:d4:84:6f:fc:65:3c:
                    4c:03:d0:ec:fc:f3:fa:81:ba:23:67:5d:2f:4a:e3:
                    d8:bb:86:2e:c4:d0:8b:f8:4c:9c:a4:36:5c:8e:e1:
                    15:15:3a:55:2b:6f:9f:ad:c2:a3:46:9e:65:7c:af:
                    ce:b3:cb:09:45:99:b3:5f:34:51:03:6b:1f:39:b8:
                    35:21:14:1c:da:8b:f1:dd:96:88:23:99:97:fa:92:
                    17:9e:fa:df:ec:48:f7:38:37:0e:ba:8a:4b:21:e5:
                    2f:74:ef:fe:10:3a:19:6b:76:6c:0e:55:52:b4:38:
                    5d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:CF:1A:EA:08:26:93:49:9A:BF:1F:B9:B8:C5:67:AD:A8:51:EB:C2
            X509v3 Authority Key Identifier:
                keyid:4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:04:09:fe:5a:8d:ce:ff:f3:8b:49:e2:f4:79:14:69:ce:9a:
         58:2f:c8:7f:ce:1f:42:58:bb:6e:9b:4b:c3:c0:ea:74:89:31:
         7e:b8:04:4f:27:56:4f:82:a4:84:b7:d2:51:a9:a2:89:df:c1:
         b7:ca:6f:a1:92:b3:01:ca:aa:f4:2b:4f:a5:2b:95:ba:79:80:
         d0:fe:c1:a9:c0:51:fa:fb:ea:00:76:d9:f1:a6:52:dc:c1:dd:
         22:e5:45:3d:48:be:dd:24:15:d8:1f:95:86:22:e3:53:30:7d:
         28:83:4e:8c:bc:83:66:21:89:59:eb:54:7f:8d:68:3f:ae:ce:
         87:92:f1:ec:40:2d:36:3c:c0:26:eb:a9:eb:a0:7d:60:15:c6:
         03:f2:02:ec:f7:e8:a9:3d:64:34:fa:5d:ff:df:89:cd:33:cc:
         d6:3e:9b:b7:72:ab:ae:bf:7c:a7:4f:bd:bf:90:14:4b:93:5f:
         84:4b:8a:5b:14:f4:e4:97:db:26:c8:d6:d0:dd:2f:8c:8e:c3:
         13:2a:24:43:14:db:90:e0:42:36:1f:30:d8:8a:23:5e:66:f4:
         03:ee:f1:56:da:27:ef:27:a7:9e:13:84:d2:1f:ab:86:b4:e3:
         f3:10:56:05:eb:7c:c4:a6:86:20:af:1e:f4:9d:87:35:b6:0a:
         ae:7f:37:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:14:29 2026 by rpki-client