Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
File:                     a30fHod8EnmCdOATNFVPiZ846sE.mft (raw, json)
Hash identifier:          +GcKqnue5pSuIWsKvyJbZEeZv3p2ZAs6VCLvUDopMag=
Subject key identifier:   D2:69:89:14:97:D2:E2:97:25:AE:A1:96:12:8A:E4:38:47:83:FC:FE
Authority key identifier: 6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1
Certificate issuer:       /CN=6b7d1f1e877c12798274e01334554f899f38eac1
Certificate serial:       019E299499E4C5544123F39AE5E0FD44DC56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
Manifest number:          139B
Signing time:             Fri 15 May 2026 03:01:04 +0000
Manifest this update:     Fri 15 May 2026 03:01:04 +0000
Manifest next update:     Sat 16 May 2026 03:01:04 +0000
Files and hashes:         1: T66u3sAZ1h5lcd7CohPfojjoGXM.roa (hash: b1dlk+UCa27l6BBCa3opEOMqOQC7JiJWknd1DaHG0Vo=)
                          2: Ud3In0OaskIaLWIkC7KZsdF241I.roa (hash: AB7KnYKNBO0Ndoa3Ocgqa4UpFDUV3mhvx0miDDfBz5E=)
                          3: WBUV1KvDkb2jOcRdkjFWIVt7ErY.roa (hash: ajrXPdqhe0OAtEgCrpBNnNMpZPGjD6DwlNl7HI0x0zY=)
                          4: a30fHod8EnmCdOATNFVPiZ846sE.crl (hash: nk8MCJaoOS2Vap7DOKDTbXuO/yBT3UMTBAnrBx20aQc=)
                          5: kJEyi9t8ewQAOML32QKelXRnNQw.roa (hash: qisABknNXytALeoXTgeNFHWe1rQRJTNgqfs59Mw/Lek=)
                          6: n_fghfm4yvkyJN0aLgQKMYifpk8.roa (hash: s8M9V6kInMrZ8SN7cdYOAnlXWHjxa+Mtfe0ezUCITCc=)
                          7: zHv_4yLb29OZEPsryzQwrsubCmY.roa (hash: bf6GHsA4iW8nNCo3qaxOx39ntbWsQ60VlVEmI5fRZwc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:94:99:e4:c5:54:41:23:f3:9a:e5:e0:fd:44:dc:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b7d1f1e877c12798274e01334554f899f38eac1
        Validity
            Not Before: May 15 03:01:04 2026 GMT
            Not After : May 16 03:01:04 2026 GMT
        Subject: CN=d269891497d2e29725aea196128ae4384783fcfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:95:82:d1:0e:80:e7:cb:70:f0:4b:2f:7b:d6:
                    72:5f:e0:76:a7:fc:79:fc:31:c2:19:83:ab:2b:68:
                    ba:ba:f9:e2:1e:c0:21:27:e8:e3:2d:57:a2:21:94:
                    dc:c6:ac:3e:6a:38:a3:31:58:8e:ed:c6:de:70:e0:
                    cf:aa:19:3e:7b:6a:9c:ae:89:99:3f:30:e5:12:97:
                    42:85:7c:67:c6:00:62:9d:4e:0a:d7:e2:44:58:bb:
                    fd:6c:d0:5a:02:75:2d:cc:17:0b:69:e2:9b:16:16:
                    59:2b:c4:b2:c1:52:e9:2d:92:ba:1a:fc:88:68:ec:
                    1c:2c:a8:ba:61:a3:99:9b:4e:ae:77:f5:fc:ab:6d:
                    c7:a0:36:ad:35:7a:87:ff:f9:d6:00:c2:fd:c2:cf:
                    c8:12:02:bc:04:4f:a2:7d:2b:90:3d:60:33:dc:92:
                    e2:32:8b:8e:c1:6e:a9:b2:d1:1b:4b:83:7c:66:5d:
                    6e:b8:ef:ce:36:4d:70:64:0f:33:37:56:f6:04:f4:
                    62:46:31:f3:74:e4:f0:21:a7:ff:31:aa:88:4c:e7:
                    ee:5f:ae:6c:1a:da:83:7c:40:63:d1:68:2a:0b:af:
                    9d:61:6a:05:7c:85:80:42:bb:39:7c:74:31:86:53:
                    13:38:e6:1c:52:6c:61:6a:6b:84:cf:bf:48:bb:b9:
                    70:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:69:89:14:97:D2:E2:97:25:AE:A1:96:12:8A:E4:38:47:83:FC:FE
            X509v3 Authority Key Identifier:
                keyid:6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:6a:4b:f8:59:5f:d9:0a:da:70:16:e6:f1:aa:c2:16:3a:65:
         4f:40:ce:f7:85:61:aa:10:b6:7b:53:00:51:ac:0f:03:09:c0:
         19:36:2c:73:68:f6:76:f4:93:75:d2:e2:4d:c9:4e:03:4e:8a:
         94:6a:98:4f:b3:91:dc:c0:23:6c:74:34:2f:57:90:21:0f:81:
         3e:6a:b7:86:f5:ee:b8:9c:5c:50:69:3f:17:28:88:26:0a:9b:
         ac:59:a1:ea:a3:a3:9f:04:00:9a:31:a9:a5:c7:7b:25:c0:01:
         a5:95:c5:53:41:eb:42:2b:0c:b0:6a:99:61:ae:2a:65:65:bc:
         6e:d0:97:42:8c:dd:b2:84:f2:6a:f0:df:e0:60:de:eb:0c:c2:
         30:4a:bc:4a:fd:bf:37:e0:ef:d8:71:13:42:58:82:b3:aa:df:
         98:2e:2e:69:d1:08:51:26:b6:9e:b6:fc:5a:42:62:a6:75:91:
         78:4c:b4:d2:21:be:8c:df:79:d7:ab:f8:3e:8e:05:fa:cf:95:
         14:ea:b4:d6:4d:6f:29:32:76:9c:99:a3:cc:59:18:08:a0:dd:
         d4:dc:b7:ad:f3:3c:f3:67:b3:fc:a8:13:1c:60:96:36:2e:01:
         99:8a:7a:e2:72:86:27:8b:91:c9:72:8c:a9:49:a8:60:35:fd:
         25:2a:55:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 09:51:27 2026 by rpki-client