Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
File:                     dz4yeLqiScFN5gXclkssJ1Xf7Po.mft (raw, json)
Hash identifier:          Mt95+nT59OijxgfSrFJdYit5gFUCBn5KI6kYA+V1lEM=
Subject key identifier:   4B:7E:4F:38:11:76:EF:C3:12:78:71:3D:86:B6:47:AD:D6:3E:67:4D
Authority key identifier: 77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
Certificate issuer:       /CN=773e3278baa249c14de605dc964b2c2755dfecfa
Certificate serial:       019E3260B6955E002039A6A3858C48DFE5E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
Manifest number:          1912
Signing time:             Sat 16 May 2026 20:00:59 +0000
Manifest this update:     Sat 16 May 2026 20:00:59 +0000
Manifest next update:     Sun 17 May 2026 20:00:59 +0000
Files and hashes:         1: Y_fqc1nYjxTRaHLL2ccHIWZVkc0.roa (hash: OwxH8E+Mnn4pbwr5I/vFQZ5F7TZIKEUW26OHA8q7WcM=)
                          2: dtT-U90eIRyxx5lsS__59NnNKf4.roa (hash: 5Ql6EQRlS1tFtGixp+Tf3oCCuYt86aZDSF1fLpUGr2A=)
                          3: dz4yeLqiScFN5gXclkssJ1Xf7Po.crl (hash: MjxvMn06lGGrK3WBaO17S93DPZz3dj6v/eOhUe8HswM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:60:b6:95:5e:00:20:39:a6:a3:85:8c:48:df:e5:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=773e3278baa249c14de605dc964b2c2755dfecfa
        Validity
            Not Before: May 16 20:00:59 2026 GMT
            Not After : May 17 20:00:59 2026 GMT
        Subject: CN=4b7e4f381176efc31278713d86b647add63e674d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f3:99:20:4a:96:c5:e7:b2:88:bd:7d:45:a5:
                    0b:5d:82:58:27:f8:d5:fc:36:10:d6:44:af:dc:45:
                    7c:6e:c3:7f:89:e8:09:75:cf:cc:ea:a2:d6:39:c7:
                    5f:d3:e0:2d:f6:6f:8a:91:6a:bf:6f:0c:8e:6e:15:
                    77:51:66:d6:ae:3f:a6:dc:b7:c1:9d:1e:6c:be:f3:
                    26:d4:59:9a:23:fc:38:98:61:76:50:31:cb:31:ec:
                    54:2c:21:eb:99:08:c3:4e:69:68:46:29:61:56:63:
                    54:32:05:81:08:dc:4e:77:7f:ec:5e:32:20:d3:74:
                    5e:68:1e:0e:d6:23:8a:76:f1:d2:9f:04:31:28:8b:
                    38:df:fd:a5:79:3e:0b:90:fd:c3:ff:e9:5d:49:5a:
                    d0:8b:ba:ac:f5:e8:31:e7:c3:6d:28:3c:8a:8f:0d:
                    33:06:83:5b:a4:1d:2a:62:dd:45:a6:54:12:28:b9:
                    1f:b9:0e:19:cc:b3:00:42:97:d9:d1:e6:a2:bc:a8:
                    ab:4b:87:d7:e8:95:dd:cb:31:70:df:03:ab:87:a0:
                    07:7e:de:e9:20:89:68:cf:c4:3e:d0:78:8e:ce:22:
                    b5:71:a6:dc:09:89:c3:1f:1c:65:6c:48:bc:a3:d4:
                    15:40:e9:0f:6f:8e:58:5d:d4:5f:84:2a:81:4e:bd:
                    ea:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:7E:4F:38:11:76:EF:C3:12:78:71:3D:86:B6:47:AD:D6:3E:67:4D
            X509v3 Authority Key Identifier:
                keyid:77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:7f:9b:3c:38:c9:12:6b:c2:ed:7d:59:b1:a6:8e:8c:c8:8a:
         4a:c6:ce:bd:3b:2d:eb:5c:5c:1d:30:f0:41:ee:49:f8:c4:57:
         bb:74:ff:47:40:66:b4:9b:e6:69:cc:17:f4:3a:e5:49:05:54:
         2d:5e:1e:e2:a1:c2:33:bb:da:ea:69:bf:79:65:ab:01:c3:74:
         f5:a7:b3:cc:3d:2c:28:84:5d:48:1b:68:d6:e5:34:6c:92:ec:
         c4:4e:a2:87:60:da:af:72:92:47:ba:1f:96:11:e9:21:16:09:
         ad:63:5f:34:2a:e5:ee:9e:0f:47:09:a5:68:c9:de:45:b1:64:
         d0:e7:e0:02:34:95:40:a7:36:43:f7:fe:19:c2:dc:c0:14:49:
         7e:17:0c:0a:82:d7:c5:c2:2a:e1:7c:36:c0:68:9b:b7:5a:87:
         87:a9:21:14:01:fd:21:ac:d6:6e:33:95:1b:82:3e:97:d6:59:
         c1:1c:49:e8:14:fb:41:80:96:c3:43:b0:85:1b:ed:64:ce:a1:
         a5:47:4d:b3:96:1e:2b:81:8d:d5:6f:2c:ab:0f:f8:fb:8a:c1:
         5b:a0:ad:9e:b8:4b:2f:14:5f:b0:57:0f:5a:f8:28:0d:2b:2c:
         3b:7b:be:bc:af:6c:1b:4b:94:8a:b5:15:22:b8:94:02:8c:1e:
         5a:66:45:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:29:54 2026 by rpki-client