Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft
File:                     rOzREmnuoGcmJ3zjYatRzkIEnjY.mft (raw, json)
Hash identifier:          8pqSqSmvEZ6nMPsOCjtq1ENgS+d7Ipad6ol2Qr72Cpk=
Subject key identifier:   CE:11:6B:47:0E:B5:33:AE:8C:BC:52:BD:C6:0E:C3:00:E1:0B:65:2A
Authority key identifier: AC:EC:D1:12:69:EE:A0:67:26:27:7C:E3:61:AB:51:CE:42:04:9E:36
Certificate issuer:       /CN=acecd11269eea06726277ce361ab51ce42049e36
Certificate serial:       019E216DADD62656368D8E3115CA86BD3307
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft
Manifest number:          0274
Signing time:             Wed 13 May 2026 13:01:36 +0000
Manifest this update:     Wed 13 May 2026 13:01:36 +0000
Manifest next update:     Thu 14 May 2026 13:01:36 +0000
Files and hashes:         1: 1oXMdBZ5QwBEktq29jlZeTysc3c.roa (hash: WrwjvmGXn9QS/QC9EfjjK7O+1t52HaSP06M7BN2wY4Q=)
                          2: BsHhOGPLqv_b-i7lbkWetPhmogc.roa (hash: 6b/HByXr0kCEfte6/E55VHhk+GpSly1EQ1fovYfyDC0=)
                          3: LQ4p4FWR2wiOfJ7GYUxYWopRPko.roa (hash: QCy7JHnHp3e55OkboH/41OR5K91quYIv15ltvpwox8U=)
                          4: qZ6mNAnH1X0WEvWvCW48xFHIAzM.roa (hash: bRXqasdQMNLOjthWLYT2MOp9X0uzuSjiftrzVa+XjXU=)
                          5: rOzREmnuoGcmJ3zjYatRzkIEnjY.crl (hash: kiD3bVwUV7xhGMZOQBbMepq9o4/Q8E4P0pOK970upEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:21:6d:ad:d6:26:56:36:8d:8e:31:15:ca:86:bd:33:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acecd11269eea06726277ce361ab51ce42049e36
        Validity
            Not Before: May 13 13:01:36 2026 GMT
            Not After : May 14 13:01:36 2026 GMT
        Subject: CN=ce116b470eb533ae8cbc52bdc60ec300e10b652a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7a:ce:17:b3:63:22:ab:52:74:a5:68:f1:74:
                    af:8d:5b:03:be:57:50:d6:cf:65:f9:12:f1:cf:12:
                    e5:10:23:33:53:64:b5:a9:d3:05:7b:a4:12:c8:72:
                    1a:0a:8e:22:30:4e:7c:82:eb:97:9b:6f:eb:be:76:
                    f3:61:59:38:33:1b:3e:06:71:6d:65:21:5d:c7:ba:
                    37:01:25:86:3d:9d:0f:36:c7:ae:8c:90:2b:14:57:
                    85:fb:9f:80:32:92:76:0b:10:7e:26:dc:b3:c5:e2:
                    a2:3a:5e:9a:f5:88:7f:16:87:6f:18:8f:66:ba:fe:
                    0a:fe:fc:7c:99:30:6b:29:aa:0b:cc:d4:77:90:b4:
                    e5:89:a3:89:a1:4b:23:a7:aa:7e:16:3c:20:47:b2:
                    62:d1:59:b8:98:71:80:33:f3:d4:90:b0:c6:9f:20:
                    1d:63:d9:4f:75:9c:6a:95:95:b3:7a:06:61:f3:4c:
                    43:37:c2:0b:df:86:ec:c0:d4:df:34:e9:5d:58:18:
                    3b:63:3e:c1:3a:c8:1e:85:d0:3c:19:9a:94:b7:7f:
                    7f:28:99:54:78:33:93:50:29:62:fb:22:64:80:5e:
                    2a:27:9c:ee:5e:72:06:7c:32:a5:59:79:13:d3:a4:
                    ac:01:39:92:98:9f:c8:a4:2a:14:d9:b8:0d:69:c7:
                    50:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:11:6B:47:0E:B5:33:AE:8C:BC:52:BD:C6:0E:C3:00:E1:0B:65:2A
            X509v3 Authority Key Identifier:
                keyid:AC:EC:D1:12:69:EE:A0:67:26:27:7C:E3:61:AB:51:CE:42:04:9E:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:35:9b:c2:d5:29:6d:a8:43:a3:71:6d:dd:97:1c:c8:b9:72:
         18:b0:d2:7c:2c:55:47:b3:57:3f:b2:f4:ba:30:87:e0:6e:f7:
         00:84:84:0e:e5:08:ac:5c:b9:04:ab:fa:d4:73:a2:76:df:97:
         5b:47:aa:b6:fe:94:35:e7:c3:0f:ea:9b:6a:05:6e:7b:47:dc:
         d5:96:09:74:7b:20:c5:ac:40:fd:0b:4f:b0:e1:1c:2f:83:85:
         6c:57:ba:77:98:d9:21:4a:cc:ee:53:a7:a3:4a:ab:2a:e8:83:
         af:17:0e:e2:1b:a6:df:5b:cb:9e:c3:57:0b:9b:89:59:df:bb:
         d8:61:43:27:59:ad:0b:37:42:cb:f8:c7:f5:5e:c9:82:35:59:
         e8:cb:14:d9:ef:65:8d:96:83:a8:f3:00:b2:83:21:f4:5c:d5:
         c3:f6:78:1f:ad:88:cd:4f:60:79:f1:35:5d:36:36:62:13:83:
         f6:a6:9f:74:b5:60:7e:b8:80:1a:fe:b3:5d:2a:d3:d0:d0:fc:
         78:24:42:8d:d6:7c:e6:8a:8a:9c:06:3e:ca:7a:2f:00:80:fe:
         b3:28:fc:eb:b5:1c:d2:b1:fd:90:af:f0:e6:2c:9f:fa:15:16:
         57:5d:71:be:a5:20:56:6a:15:8c:f5:fd:f7:b3:65:f1:72:e3:
         db:3d:3a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:52:34 2026 by rpki-client