Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
File:                     adXUUqjtU1KH_rNlFLyHwCI1WkM.mft (raw, json)
Hash identifier:          HF6YYTfE+bBZB3U5mZ4AlRH/G1xDLbno7yp5XPRp4JA=
Subject key identifier:   0D:5A:1C:EA:C1:BD:E7:D2:6F:F6:14:09:43:88:43:6C:79:56:6F:0B
Authority key identifier: 69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43
Certificate issuer:       /CN=69d5d452a8ed535287feb36514bc87c022355a43
Certificate serial:       019E3072E212E8DB86CADC2A5C5301175D41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
Manifest number:          1911
Signing time:             Sat 16 May 2026 11:01:35 +0000
Manifest this update:     Sat 16 May 2026 11:01:35 +0000
Manifest next update:     Sun 17 May 2026 11:01:35 +0000
Files and hashes:         1: 99ukKo0G5E-X61ucxhUYzuXviMg.roa (hash: klMpZV7tFP7vNV7veN/nv8e/MQyS41qIS69khsoXMUw=)
                          2: adXUUqjtU1KH_rNlFLyHwCI1WkM.crl (hash: FTw10M2EDZGSrSJmuqXgLnJlbf1lX5rtnITlqPea7Uk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:e2:12:e8:db:86:ca:dc:2a:5c:53:01:17:5d:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d5d452a8ed535287feb36514bc87c022355a43
        Validity
            Not Before: May 16 11:01:35 2026 GMT
            Not After : May 17 11:01:35 2026 GMT
        Subject: CN=0d5a1ceac1bde7d26ff614094388436c79566f0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9f:71:2c:25:95:d6:7e:1d:ec:0b:4d:f8:9e:
                    8e:31:4b:f7:f1:d8:06:4c:d8:ce:f7:59:5b:fd:90:
                    f5:3d:8d:a5:73:a1:5e:f6:f5:31:09:60:f1:50:b7:
                    66:65:e5:a4:c5:8e:5d:44:1b:f2:ed:18:f6:ea:6b:
                    a3:5a:13:a9:99:68:66:e4:85:9e:bd:46:49:74:1b:
                    13:ea:cc:e8:33:ee:12:8e:03:c0:58:ae:46:09:75:
                    97:63:e2:47:17:b8:ed:b7:0a:53:42:1d:52:76:14:
                    7e:76:aa:44:3e:e1:ca:56:1a:91:a5:11:bf:f2:05:
                    62:9a:44:17:26:37:3e:56:cb:af:b4:fd:a6:d0:54:
                    96:8a:9b:29:7e:0e:44:85:ac:e6:26:4d:90:c9:3d:
                    29:1d:26:7c:98:c9:11:0e:f9:f2:a3:9f:a1:54:c5:
                    7c:4b:22:b7:4a:80:57:07:a7:ba:a5:53:54:25:78:
                    95:62:51:cd:5a:21:0e:b8:5d:bf:21:6c:00:f6:a4:
                    40:60:7c:d6:f6:7b:74:7d:7e:63:02:bc:0b:2f:44:
                    26:25:9e:a9:48:84:67:a1:1d:c3:67:af:d9:94:d3:
                    92:9f:c8:ea:46:6c:f1:5d:7b:31:81:9b:8c:17:e3:
                    0f:d4:7d:46:3a:bd:2a:98:1f:da:38:ad:20:56:ac:
                    c4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5A:1C:EA:C1:BD:E7:D2:6F:F6:14:09:43:88:43:6C:79:56:6F:0B
            X509v3 Authority Key Identifier:
                keyid:69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:f0:c3:0f:8f:ec:e8:3d:8c:4b:45:92:8e:f0:09:1b:80:4e:
         ac:a3:84:58:f9:cb:1c:d2:3b:21:dd:aa:3f:b4:66:5a:96:ca:
         6c:15:24:ec:58:85:0a:21:39:2c:39:8b:a9:27:29:b6:5a:02:
         58:74:6d:3c:48:7b:e0:70:35:32:41:a9:f5:ac:48:a3:9c:f8:
         5a:b8:87:ba:40:46:7f:b1:a9:62:95:3c:ce:0b:9c:b1:80:9c:
         d1:36:82:96:7d:de:d0:5c:01:e5:fd:4f:d2:95:5e:ca:7b:04:
         3b:11:4f:f8:79:2c:e8:c9:1c:c5:4f:e8:21:23:cb:65:58:8d:
         43:40:f8:ff:d7:4a:fa:f3:34:e5:bd:53:85:61:7c:7c:de:37:
         92:d5:cd:f9:e1:ca:95:90:b2:96:8a:8b:5e:03:aa:10:70:90:
         97:d4:5b:1b:bc:31:75:8a:b7:58:25:e3:17:37:8d:19:32:32:
         df:03:ce:c7:28:20:df:fd:80:81:52:44:22:b9:db:3e:8c:1a:
         63:d9:23:f2:9b:ad:44:33:cb:32:3e:8f:aa:c1:d0:a7:d9:dd:
         40:77:cc:9f:3d:93:6e:b5:48:43:d0:b7:30:02:89:10:2d:46:
         26:0c:3d:a5:da:61:ad:91:dd:1f:15:0d:ba:dd:af:75:02:52:
         ba:fa:c0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:14:02 2026 by rpki-client