Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
File:                     l0Zhyxw45jvXi9aysdaGhqVBW_U.mft (raw, json)
Hash identifier:          75A3or93duqOCAIxfVZB0IKt31wOO2zH1qwtSD1wY9s=
Subject key identifier:   74:9F:94:01:65:84:13:C5:F2:CA:E3:D6:28:D6:54:DC:E2:F0:DF:B8
Authority key identifier: 97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5
Certificate issuer:       /CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
Certificate serial:       019E29951069F087E52C88A520490D3A2140
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
Manifest number:          1916
Signing time:             Fri 15 May 2026 03:01:35 +0000
Manifest this update:     Fri 15 May 2026 03:01:35 +0000
Manifest next update:     Sat 16 May 2026 03:01:35 +0000
Files and hashes:         1: 3JvVaHFxMvE7oKb_Rk5KcxOo0QM.roa (hash: ni3uO/fhFfgK3uTopvt+sNnEoUiIwxpRI4kiwz3P0Q4=)
                          2: C9Y58BKwkaw0ZHTl_j0txcpI-HU.asa (hash: 6ft+Zt4xMqD8pufWleBqsqUW7RgXeGTKhk+GP4M0q7Q=)
                          3: b4x9At5aHU384b0djamWkOwy0Gk.roa (hash: kQ+bOS8CQlnm4PmXuVXiGK4SgaDFMpdC3HI9bBKlvtQ=)
                          4: l0Zhyxw45jvXi9aysdaGhqVBW_U.crl (hash: HcXuJ8vCBb31R5Dc8pQKyZKz6nzvhdKVSKmBgw1VzeI=)
                          5: mYpQfCwGUFa_N3gCiTs-pRnvFpc.roa (hash: gQqVTcaiR3QtkZ8CYSUcJShg6d7Q858NjMwMx9HDxMo=)
                          6: vEZLnR5almH1CGYItYBwVOGJqYY.asa (hash: Q9dmdkbTJa12zCUuc9rAzbHv2trspyTh+XDW4FOxvK4=)
                          7: yu-i2x-62u9GgIqkbHtrB0flg3s.roa (hash: DBRnQF75P0UT8wiwqTpnRrbuWAWKmmICP891u/zUXI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:95:10:69:f0:87:e5:2c:88:a5:20:49:0d:3a:21:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
        Validity
            Not Before: May 15 03:01:35 2026 GMT
            Not After : May 16 03:01:35 2026 GMT
        Subject: CN=749f9401658413c5f2cae3d628d654dce2f0dfb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7f:8b:4d:aa:dd:a7:aa:dd:68:22:0d:c4:f5:
                    3f:fd:6a:24:8b:18:f6:80:64:3e:bf:4a:42:1b:a4:
                    71:a7:07:d3:ce:ef:9e:5a:41:cd:c7:50:5e:6b:85:
                    39:a0:68:68:24:05:21:3b:0d:e4:8c:bf:f9:d2:3a:
                    04:0f:50:b8:dc:56:d9:43:a7:01:f1:89:58:05:60:
                    be:5c:e4:0f:ba:3f:e7:53:cc:d0:21:e0:f2:07:1c:
                    f0:22:8f:4e:47:11:38:23:72:97:66:72:2c:d5:de:
                    3a:72:e4:ec:10:92:50:70:26:8a:b0:a7:c7:52:b0:
                    72:87:60:b0:45:93:d9:1c:2a:f6:64:d0:4e:ea:de:
                    0f:e4:e3:0e:52:5a:5e:cc:c4:c2:8c:84:54:6e:a9:
                    ff:e5:6a:c3:f0:48:d1:e3:51:34:a2:ae:bd:39:e5:
                    cd:43:ee:f8:51:31:0c:a2:4b:67:b7:c6:d3:f9:fc:
                    4e:ab:84:8e:49:7b:ba:8f:44:f5:25:7b:12:40:3c:
                    85:4c:c8:32:90:35:d4:7f:25:41:30:3a:7f:da:f6:
                    08:dd:2d:ea:4b:e3:da:e9:3a:2d:63:25:0d:1b:87:
                    0a:44:4f:74:bf:66:7a:4b:79:6f:b2:3e:64:c3:68:
                    d3:98:16:b8:c8:c1:8e:a4:a8:ca:5b:59:79:d9:ae:
                    a8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:9F:94:01:65:84:13:C5:F2:CA:E3:D6:28:D6:54:DC:E2:F0:DF:B8
            X509v3 Authority Key Identifier:
                keyid:97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:88:19:fa:7d:5c:93:37:0a:e8:00:26:8a:a3:c7:d2:a2:3e:
         6f:25:68:3f:d8:6b:87:df:c3:f7:cf:3e:cd:2b:56:f1:8a:31:
         85:2e:18:9c:89:d7:9b:87:16:ee:53:3e:74:f2:ea:33:c5:8b:
         09:4c:a6:61:84:2f:3f:7a:ed:38:32:91:ab:e3:78:df:0c:4e:
         de:62:e8:01:a7:a5:02:2d:e1:1e:ee:79:e4:6c:15:94:ad:26:
         9c:a5:0e:b6:cf:8f:f9:51:8e:01:b3:93:f3:2d:cb:74:28:f0:
         21:35:e4:02:c7:68:60:97:90:42:1f:8f:6b:0b:18:9d:0c:f1:
         16:f7:19:34:32:8c:ea:8d:fd:5b:07:9e:f6:c4:ee:62:18:dd:
         36:48:62:a0:c2:a5:ef:95:b6:11:2a:04:4e:4e:c5:cc:94:65:
         18:c0:08:51:ae:9e:d5:7e:d2:51:07:02:3b:38:f7:34:b6:0d:
         ec:7c:d7:e7:27:e9:40:d3:59:db:39:77:cc:ce:8b:dc:fa:ae:
         46:0c:83:be:ab:26:f6:11:13:7b:ad:5f:6f:62:d3:5d:3f:08:
         a4:8f:70:d4:ab:45:25:97:4b:46:cb:bb:77:da:63:ab:c2:71:
         47:a7:9c:fe:54:46:ae:52:b1:d5:70:8a:6b:1f:0c:92:fb:95:
         4a:c0:27:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:19:44 2026 by rpki-client