Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
File:                     tRhBzcn2NZTd3CulmkATMYK1efo.mft (raw, json)
Hash identifier:          iCkFkvMcK5I5tPOBeQaYrvCzFSiAoec96osz3f0LQog=
Subject key identifier:   E6:3D:75:D2:32:D3:DC:EB:69:54:86:EF:9C:77:6F:B1:03:CC:69:31
Authority key identifier: B5:18:41:CD:C9:F6:35:94:DD:DC:2B:A5:9A:40:13:31:82:B5:79:FA
Certificate issuer:       /CN=b51841cdc9f63594dddc2ba59a40133182b579fa
Certificate serial:       019E3229D301E4E8421B00CB3B08845300B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
Manifest number:          1914
Signing time:             Sat 16 May 2026 19:01:02 +0000
Manifest this update:     Sat 16 May 2026 19:01:02 +0000
Manifest next update:     Sun 17 May 2026 19:01:02 +0000
Files and hashes:         1: gn4_joE3Kg7Iuvtn8_CsNV3N_rY.roa (hash: inZ7mhN1iTFUjJSaH+6rFZpFzgOqpsU8gKqes5JxewU=)
                          2: tRhBzcn2NZTd3CulmkATMYK1efo.crl (hash: 6D6KTPq1zACb7hNU8x0shFM90G9ke1e/9uqNGMhjjU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:29:d3:01:e4:e8:42:1b:00:cb:3b:08:84:53:00:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51841cdc9f63594dddc2ba59a40133182b579fa
        Validity
            Not Before: May 16 19:01:02 2026 GMT
            Not After : May 17 19:01:02 2026 GMT
        Subject: CN=e63d75d232d3dceb695486ef9c776fb103cc6931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:29:5e:b9:bf:25:f2:25:09:33:5f:6d:8b:43:
                    89:6c:45:f0:59:e0:ad:d5:ec:9b:de:43:b3:2d:6b:
                    e6:77:96:6f:4f:64:53:63:f7:55:44:2f:ec:a6:14:
                    f9:8b:57:3b:be:f2:ed:bd:42:73:44:d6:f0:a3:c5:
                    30:cb:d4:57:67:a8:fd:6c:67:35:9c:60:0a:9f:35:
                    04:67:1f:91:ce:29:f5:bd:eb:db:b7:c2:6d:a9:0d:
                    52:f7:c8:9e:e5:92:27:01:5a:9c:41:dc:92:49:81:
                    2d:18:7c:af:ca:e9:d8:44:9f:4d:bc:3c:43:09:67:
                    26:55:f7:ea:ed:09:83:14:23:0e:ca:c0:ee:73:f1:
                    54:0a:e8:a4:53:bd:a4:85:5f:f9:7a:27:41:30:b7:
                    0c:60:0b:14:5a:17:ba:42:d5:96:ab:8d:a3:2e:f1:
                    ea:36:85:15:82:2d:68:78:62:82:50:88:66:de:83:
                    5b:df:04:cb:ce:7c:4b:3a:3e:d1:b6:28:88:c9:41:
                    b7:26:c0:2d:b7:ed:39:1f:b4:21:8f:f8:c6:7b:71:
                    42:8d:7d:2f:94:72:dc:c1:f6:75:b7:09:4c:fc:30:
                    d9:44:f1:a8:6d:86:81:27:b0:e5:2c:82:fc:89:4c:
                    06:fd:ed:bc:2b:fe:d6:32:b3:66:32:ef:03:d6:38:
                    5f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:3D:75:D2:32:D3:DC:EB:69:54:86:EF:9C:77:6F:B1:03:CC:69:31
            X509v3 Authority Key Identifier:
                keyid:B5:18:41:CD:C9:F6:35:94:DD:DC:2B:A5:9A:40:13:31:82:B5:79:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:6c:0d:14:ef:4e:6d:63:6e:49:0f:57:d2:1e:03:3a:54:ed:
         6a:03:02:48:ef:d8:b3:6c:23:f9:85:cd:3a:98:92:fb:0a:a6:
         0c:17:cd:9b:b7:27:f0:df:61:ef:d3:5a:69:87:d6:ec:6e:89:
         97:fe:94:8b:de:cf:66:8f:d4:12:d3:22:9e:23:68:f3:25:4d:
         97:91:b2:55:53:67:d0:38:9c:a4:e1:e2:23:d6:b1:48:64:5c:
         5a:7e:c8:26:2b:c8:fb:a8:a4:28:28:57:6f:31:38:ee:43:3f:
         5c:82:f4:79:73:41:0a:66:e5:62:fc:a3:f8:62:02:e2:89:7a:
         fc:7e:a9:2f:13:71:bd:77:58:c1:d7:cb:d8:ad:07:a6:f6:1b:
         7c:6e:c5:be:5b:27:96:1c:b9:28:7c:fa:23:a2:cb:a4:19:ec:
         c6:ba:51:a0:81:b3:f0:ee:8b:ca:5a:1c:48:6b:88:eb:2d:9d:
         34:93:8c:9f:b1:b8:83:19:94:cb:f1:91:21:4e:2b:a1:0d:d6:
         32:6c:43:da:c8:d7:4a:40:ed:dc:61:2b:79:20:61:6b:2e:fa:
         f0:06:bc:1b:4a:bc:df:a9:95:11:fa:fa:41:17:d5:db:b6:d2:
         76:26:30:a1:58:71:26:5e:de:9d:30:f1:e6:5f:93:7c:61:b5:
         3d:58:a3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:26:08 2026 by rpki-client