Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
File:                     n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft (raw, json)
Hash identifier:          glob7E0ICVx+4rG4NhzT/ycqQvN9lMFdia1GZ+r6YEs=
Subject key identifier:   4C:4C:71:38:57:1E:94:07:15:AB:8E:66:E1:CC:A7:63:F4:AE:B9:8D
Authority key identifier: 9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92
Certificate issuer:       /CN=9ff3396374cbf5d767125f02dcf0f97296323092
Certificate serial:       019E2B4C846B98B170A11D2A0A7723869AE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
Manifest number:          1912
Signing time:             Fri 15 May 2026 11:01:35 +0000
Manifest this update:     Fri 15 May 2026 11:01:35 +0000
Manifest next update:     Sat 16 May 2026 11:01:35 +0000
Files and hashes:         1: fCweoVy2pE-RI3KiJqu_U9vP31o.roa (hash: Izz1/Qkh1zmgocHLfNEMhHk5Leqh7AEpEEvpIvvT/eA=)
                          2: n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl (hash: uS2dfApGrYBFX5BsGZhBcwFHYuVzcc2HYQqWl7yG/Wc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2b:4c:84:6b:98:b1:70:a1:1d:2a:0a:77:23:86:9a:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ff3396374cbf5d767125f02dcf0f97296323092
        Validity
            Not Before: May 15 11:01:35 2026 GMT
            Not After : May 16 11:01:35 2026 GMT
        Subject: CN=4c4c7138571e940715ab8e66e1cca763f4aeb98d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:aa:65:cf:b4:e4:91:66:54:4b:44:04:84:e2:
                    08:0d:dc:31:47:3f:70:8f:21:87:4e:8f:c4:cd:7a:
                    0e:e2:f4:97:e5:fe:ab:dd:68:ae:ed:9a:0e:2a:41:
                    0f:6b:f5:d5:29:7b:cb:61:07:37:5d:f9:3b:b0:14:
                    13:20:e6:e1:23:1a:9d:e0:dd:ae:54:c2:cc:e0:a6:
                    dc:8e:d1:b4:74:bf:bf:b1:0e:c4:53:42:7b:48:6a:
                    98:80:3c:21:30:c6:3a:6a:1b:e0:41:ba:f5:e1:14:
                    26:25:70:13:90:43:21:e6:25:81:54:8e:89:40:2e:
                    f5:ee:78:1c:ba:73:78:7b:bb:cf:9a:a2:04:c3:f9:
                    ca:da:bd:ee:62:15:c2:0d:d0:0c:9f:8c:5a:1c:80:
                    8a:7a:05:a2:e7:64:99:b5:79:66:d8:e5:d8:d6:75:
                    2f:8a:12:ad:51:a9:af:49:cc:70:1a:45:fe:6b:90:
                    88:89:9d:51:74:81:d5:4e:63:de:05:73:c8:30:79:
                    ac:c6:ee:85:ca:03:29:38:a2:fd:e5:27:e1:3c:42:
                    a2:fc:68:9f:17:d5:3a:c3:c3:e2:c7:97:27:00:64:
                    8b:df:d6:bc:26:bd:54:4f:f6:03:61:94:aa:e6:db:
                    57:3b:21:cb:40:84:32:62:ed:cc:2d:08:e8:70:1c:
                    9e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4C:71:38:57:1E:94:07:15:AB:8E:66:E1:CC:A7:63:F4:AE:B9:8D
            X509v3 Authority Key Identifier:
                keyid:9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:c6:b3:3b:25:d4:fe:0c:ab:6b:35:58:3a:6a:70:7b:fe:7a:
         c2:44:d2:e5:f0:ce:db:04:03:e9:00:96:db:3d:df:8e:1e:19:
         48:1e:26:6c:8a:3f:88:d1:be:1b:05:b9:fc:a2:46:89:72:f1:
         75:dc:2e:69:b2:0c:63:04:16:09:fd:52:1c:c2:c7:58:70:e8:
         3c:63:cf:3b:d5:b2:c2:5b:fd:14:d8:87:bc:72:95:bd:1c:6d:
         dc:28:d3:73:81:1f:6d:d8:30:b1:43:78:dc:c9:da:ed:00:77:
         3d:b7:4d:3c:d0:f3:d7:4d:e6:da:85:73:d1:99:16:c8:a6:5c:
         61:86:ec:83:dc:12:24:13:c8:3d:16:9f:93:51:55:a4:58:37:
         3d:07:69:8d:78:12:b9:99:66:3b:55:a9:1e:07:04:c4:48:6f:
         31:94:7f:07:f8:27:26:e3:26:af:ea:54:b6:1c:04:f0:d9:28:
         6c:2e:d4:ef:7f:5b:65:db:35:08:8a:f3:8f:a2:13:ce:07:79:
         ba:25:7c:f6:48:98:56:86:5f:fb:56:68:2b:d3:50:9a:99:25:
         70:e9:2d:cf:f7:a4:58:a4:b7:61:90:94:73:b8:33:8f:f7:57:
         00:19:bb:8d:48:4b:1a:97:7a:e6:4e:78:ac:48:80:87:67:c9:
         08:01:23:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:46:08 2026 by rpki-client