Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
File:                     BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft (raw, json)
Hash identifier:          Y3oGHUXvQjjY1KYkZ1Lp0f7nuBgWZLoYKELkBr+olJU=
Subject key identifier:   1D:E3:26:28:18:70:67:2D:AD:DE:D6:01:6E:5C:7C:BB:AE:AA:74:18
Authority key identifier: 07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD
Certificate issuer:       /CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
Certificate serial:       019E30E0DEEB9E13180CC437AE7835953E96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
Manifest number:          190E
Signing time:             Sat 16 May 2026 13:01:43 +0000
Manifest this update:     Sat 16 May 2026 13:01:43 +0000
Manifest next update:     Sun 17 May 2026 13:01:43 +0000
Files and hashes:         1: B3vEmndp_x6YAMvLtgQ70Ik6U0I.roa (hash: bqi4W7Nv7XoPhrNwH2N+CzXFN/qDDhLjqU9t3bRJqlI=)
                          2: BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl (hash: ooqpvnbs0y16mPmUgQG3Qm1jiPnRsu5mV1T6HzH05r8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:de:eb:9e:13:18:0c:c4:37:ae:78:35:95:3e:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
        Validity
            Not Before: May 16 13:01:43 2026 GMT
            Not After : May 17 13:01:43 2026 GMT
        Subject: CN=1de326281870672dadded6016e5c7cbbaeaa7418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a5:db:aa:83:55:31:9e:95:19:53:96:ea:49:
                    0e:8c:6f:45:5a:9a:fa:80:b3:86:d9:1a:c2:9f:84:
                    04:91:21:f2:20:c0:41:c1:5f:2f:37:20:20:a0:f2:
                    42:e1:bc:16:0d:69:2c:f3:5e:77:9e:d6:d1:35:b1:
                    f3:bc:5e:f6:3e:d2:8e:c3:da:aa:8c:4b:55:77:ea:
                    8d:86:99:07:e6:88:2e:2d:6c:4a:66:23:78:85:96:
                    49:87:3d:28:20:11:30:a6:54:99:b9:ff:ab:1f:7c:
                    32:ac:1c:42:97:8c:d1:7c:79:37:af:df:00:28:cc:
                    b7:e9:07:b6:fb:74:59:61:a4:d8:c6:fa:4b:22:2e:
                    da:52:f7:14:00:3e:bc:3d:81:2f:23:72:27:ef:62:
                    da:f7:62:ed:48:a3:52:b8:fe:43:32:6b:e3:94:5c:
                    00:cf:ca:4b:0d:70:88:02:62:25:f5:85:a3:73:04:
                    38:55:e6:d7:26:90:f6:38:fc:a3:72:44:27:5b:0e:
                    82:bc:53:49:a7:91:5e:02:f3:a5:22:f5:5a:ce:04:
                    23:f4:f3:64:2c:b1:10:ea:08:25:ff:4f:2b:df:4b:
                    15:ca:00:b9:8e:41:09:5b:6d:53:83:d4:ae:09:ed:
                    b7:d2:db:75:9d:85:1b:95:d7:2e:83:60:9d:2d:7b:
                    be:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E3:26:28:18:70:67:2D:AD:DE:D6:01:6E:5C:7C:BB:AE:AA:74:18
            X509v3 Authority Key Identifier:
                keyid:07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:de:98:a0:58:52:3a:9a:63:9c:b3:bf:e9:74:4f:e6:24:86:
         c9:fe:7a:90:d9:84:5b:55:87:a8:ff:c1:f0:79:89:dc:66:61:
         e0:b3:2e:0c:c5:50:50:9a:c7:1f:02:bd:bc:1c:42:0a:72:7c:
         2c:ff:96:14:ad:a3:cb:cf:bc:7d:01:3f:1c:63:89:62:f5:fe:
         fd:7a:aa:82:ad:a2:5c:9c:da:f8:6c:dd:2f:55:15:e7:98:07:
         cf:b8:fa:c9:5f:98:8a:13:e2:88:79:83:36:ce:05:6c:cb:c1:
         48:ae:43:a9:2e:9b:98:ed:8e:e4:19:ef:e2:8f:2a:73:4a:e6:
         b2:35:00:53:40:79:98:2b:1c:46:7b:fc:3b:61:31:db:4d:ec:
         87:d5:e3:35:e9:92:de:4f:97:32:63:fa:cc:ee:a1:ac:95:8f:
         1e:e1:4e:ca:2f:b3:66:a3:4f:09:91:c9:2b:93:93:34:9c:09:
         25:45:15:a9:86:1a:ad:ee:16:14:61:e3:eb:5c:ae:f7:93:c3:
         ab:63:e6:1b:b6:23:14:f0:70:fb:72:6c:aa:f5:42:a7:4e:a3:
         ee:a8:28:1b:11:8e:17:eb:9d:24:8f:ba:3e:40:7d:a7:8f:d2:
         a5:f5:b3:9e:13:a4:be:c9:65:bd:1e:3f:8e:8f:3d:75:d5:8b:
         f7:00:7f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:40:35 2026 by rpki-client