Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
File:                     f1byiUjIMvLUNLtE1d4OoSJgGwU.mft (raw, json)
Hash identifier:          +mxxza8D9512XVCu1n576ZEQlpmV2njdTZhUFNGN4aU=
Subject key identifier:   E3:B5:00:F1:C3:FD:C3:98:B0:F8:DB:DF:26:99:93:9C:C6:7F:D0:DB
Authority key identifier: 7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05
Certificate issuer:       /CN=7f56f28948c832f2d434bb44d5de0ea122601b05
Certificate serial:       019E4F8F13E66F102E8B11BB85EDE3658277
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
Manifest number:          1920
Signing time:             Fri 22 May 2026 12:00:37 +0000
Manifest this update:     Fri 22 May 2026 12:00:37 +0000
Manifest next update:     Sat 23 May 2026 12:00:37 +0000
Files and hashes:         1: 3BxhZ35N8Qx2oPV8uifmlMo5dOs.roa (hash: bD1bjEPm+DLe/WM+85t8bSN4Tr3PbaJNuazlrJ3Q/3o=)
                          2: SoyEFopk-R4dS6W4GId_dIzG6Fo.roa (hash: 8Qh9O/rztM/wDJzj5wDIv0KZPNCBmgUCZ7Xbj18mMsE=)
                          3: f1byiUjIMvLUNLtE1d4OoSJgGwU.crl (hash: rsQKEnBA6yec0Cy13yffcgD+q2X3K9odnGou1s9dFnc=)
                          4: zfvsegXog0j8iHhgS6fpZB-7wA0.roa (hash: bFu3gDNhMpBoThiANf0cCs15MmxVpxeF1StwYMxxHlM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 May 2026 08:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:4f:8f:13:e6:6f:10:2e:8b:11:bb:85:ed:e3:65:82:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f56f28948c832f2d434bb44d5de0ea122601b05
        Validity
            Not Before: May 22 12:00:37 2026 GMT
            Not After : May 23 12:00:37 2026 GMT
        Subject: CN=e3b500f1c3fdc398b0f8dbdf2699939cc67fd0db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:57:b5:a2:ae:64:65:a8:87:a6:aa:fa:b5:ae:
                    af:31:21:43:32:30:70:b7:cb:55:e9:1e:cb:4c:9a:
                    6b:3c:4d:b0:57:e8:5b:f6:43:d3:78:d8:38:ab:8b:
                    38:c1:2a:f9:6b:eb:94:65:87:3a:70:48:42:31:32:
                    58:8b:5f:99:24:e2:e5:1d:d9:a2:63:81:fa:80:02:
                    cd:ca:0e:75:d6:5e:2b:77:3e:72:7a:aa:a2:17:2e:
                    e2:04:7e:b0:4a:e1:cb:48:3d:ec:00:35:36:69:67:
                    37:73:14:68:46:1c:c4:80:fb:dd:e1:b6:0e:e8:b8:
                    0d:5b:f6:c2:f0:19:3c:3f:3f:b5:0d:ec:8e:d8:10:
                    89:6c:aa:0e:62:3d:f6:4a:3d:93:43:98:91:c9:47:
                    4a:31:f6:20:fd:1f:c3:59:a8:3f:c8:68:43:18:c1:
                    72:88:a2:a7:c7:a6:df:2b:8a:4a:63:26:dd:bc:c3:
                    0f:17:82:30:59:37:55:59:d3:dc:be:84:43:b9:45:
                    7d:a1:45:c9:9a:57:f4:1c:39:d9:cc:46:39:9f:53:
                    45:4f:64:0a:8d:2b:bc:73:12:21:64:cc:f6:7b:e6:
                    17:2b:0f:81:45:c5:cc:9f:15:bf:e9:b4:bd:1b:00:
                    9a:36:4b:36:22:dc:76:ee:c6:a6:74:ab:f8:d4:75:
                    16:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B5:00:F1:C3:FD:C3:98:B0:F8:DB:DF:26:99:93:9C:C6:7F:D0:DB
            X509v3 Authority Key Identifier:
                keyid:7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:29:ea:dc:6f:3e:ff:41:04:75:6a:68:56:6b:fd:f3:98:53:
         52:66:1c:1f:7c:ad:b7:1d:21:92:7b:b4:c6:18:48:45:f7:2d:
         9e:2d:6f:94:38:5d:ca:ec:68:49:1e:2e:a2:5a:07:2d:d5:eb:
         d7:90:c8:b5:62:1d:d8:30:2d:bc:27:b3:88:ca:6d:8e:2f:53:
         38:33:02:3c:08:0b:fa:1e:da:cf:35:7f:3c:a3:1b:96:57:99:
         de:31:4d:db:66:4c:f8:64:ce:73:94:6d:67:b3:5a:43:c4:e3:
         a9:d8:9c:a2:4b:a9:0c:b6:17:9d:5c:af:bb:76:75:f3:19:e3:
         80:9a:f7:64:d7:16:d7:95:4b:e2:d7:91:c1:07:67:25:cb:50:
         3a:83:32:4a:b6:64:86:44:d0:49:19:96:4a:10:8a:f3:9f:20:
         aa:9f:e8:8a:78:20:39:74:95:a9:f8:7c:1a:73:c3:7b:93:ac:
         19:db:fd:96:e4:87:1a:90:35:eb:bb:de:b4:c6:ef:92:96:d4:
         1d:b6:9b:9a:bc:f1:c4:fd:7a:9d:a9:ae:7e:81:00:a8:ae:c5:
         f1:b3:64:56:32:ba:aa:e8:1a:2b:5a:16:44:99:7b:11:8c:e7:
         ae:07:2a:7f:1e:91:2f:b1:24:0d:95:9b:63:2d:c3:be:70:e4:
         bb:56:53:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:09:46 2026 by rpki-client