Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft
File:                     MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft (raw, json)
Hash identifier:          omXKJKmq6ZUSMpwWJ5WkBdhwcSlxCSO3ksDVp9PdGvU=
Subject key identifier:   C2:DF:15:9C:C9:6A:E6:AB:34:74:C8:AE:F9:E1:46:53:1B:9D:AC:8E
Authority key identifier: 33:34:32:29:DE:25:1C:C8:82:5A:7C:44:C8:FE:93:E4:AC:DB:C1:15
Certificate issuer:       /CN=33343229de251cc8825a7c44c8fe93e4acdbc115
Certificate serial:       019E3305C0D8663C13677ECA5ADA4A85A7B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MzQyKd4lHMiCWnxEyP6T5KzbwRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft
Manifest number:          01A4
Signing time:             Sat 16 May 2026 23:01:15 +0000
Manifest this update:     Sat 16 May 2026 23:01:15 +0000
Manifest next update:     Sun 17 May 2026 23:01:15 +0000
Files and hashes:         1: KK2v8jbRzNSix0weCfB4skmPx1c.roa (hash: IiO9IAaVWkqsheg2TwTcJmbBFyNTvk8JujR9HRPRERw=)
                          2: MzQyKd4lHMiCWnxEyP6T5KzbwRU.crl (hash: encsQksIvm3W5uIZ6lhE8ggjVAlmua4n/nOBdXpnfdc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MzQyKd4lHMiCWnxEyP6T5KzbwRU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:33:05:c0:d8:66:3c:13:67:7e:ca:5a:da:4a:85:a7:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33343229de251cc8825a7c44c8fe93e4acdbc115
        Validity
            Not Before: May 16 23:01:15 2026 GMT
            Not After : May 17 23:01:15 2026 GMT
        Subject: CN=c2df159cc96ae6ab3474c8aef9e146531b9dac8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fa:f4:61:55:ea:5d:15:97:84:69:e8:2d:a0:
                    9d:1c:87:42:52:fb:9d:ed:1a:b3:99:7c:c8:bb:df:
                    5e:d0:4f:8e:d2:c0:e9:8d:30:cc:70:3e:9f:2c:51:
                    27:30:4c:9b:be:3f:8a:b1:33:64:92:31:7f:0f:2b:
                    61:f6:d3:09:2c:fc:80:8c:7d:5b:0c:3b:09:13:ba:
                    13:41:57:db:ae:4d:ca:ab:10:68:b8:e6:23:a0:5f:
                    47:c0:a7:c6:a0:88:42:4d:db:44:fb:b6:15:18:36:
                    71:c9:32:78:6b:eb:81:27:82:74:1c:4f:79:fb:de:
                    73:13:a9:ab:d2:ed:d0:65:33:b8:9c:8a:92:8e:6f:
                    98:02:e3:b6:f8:14:46:ca:d1:40:b7:1a:41:4c:e8:
                    9d:76:0b:3e:64:8c:16:6b:d5:94:84:b7:09:c3:2c:
                    d1:8c:91:11:33:de:80:f8:d7:53:8f:76:22:72:ca:
                    3a:84:42:2e:91:c7:e4:26:7f:15:da:68:f4:10:34:
                    de:32:93:f6:d1:32:ba:53:fb:22:fa:3a:6a:f1:35:
                    28:43:b7:44:8a:04:b3:f1:79:4c:d3:69:03:3b:fb:
                    8a:d0:af:77:ea:a2:3b:a0:41:13:e5:d7:88:73:55:
                    b1:79:fd:99:95:01:37:9d:8f:5c:72:68:be:de:c7:
                    e5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:DF:15:9C:C9:6A:E6:AB:34:74:C8:AE:F9:E1:46:53:1B:9D:AC:8E
            X509v3 Authority Key Identifier:
                keyid:33:34:32:29:DE:25:1C:C8:82:5A:7C:44:C8:FE:93:E4:AC:DB:C1:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzQyKd4lHMiCWnxEyP6T5KzbwRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:9f:86:8e:21:48:d4:25:da:c5:d9:07:e9:b7:88:b5:d0:f4:
         bb:3c:8b:fc:1e:32:be:6b:9f:b8:9c:34:00:3a:9e:6f:61:81:
         23:8b:b2:b2:81:8f:fd:8f:01:2c:d1:06:0a:85:4b:dc:1f:7b:
         dd:b4:8e:ed:25:c7:c7:78:8b:12:5c:fd:59:04:ec:fb:d5:f3:
         a4:48:37:88:ed:d0:28:2f:fd:69:d0:f6:d6:18:83:a8:c9:f4:
         a0:3d:79:f6:f6:b5:ce:dd:d6:e3:e2:cf:de:b5:e1:ff:18:d6:
         75:41:dc:91:04:80:71:76:d1:8d:14:7b:19:b1:89:07:b4:00:
         ab:26:76:85:c0:1f:cd:17:ad:ab:b6:a1:18:49:74:25:3c:04:
         53:f9:4d:d5:29:d4:cc:7f:cc:f2:de:23:cc:95:f3:45:7e:aa:
         f4:ed:4b:aa:f1:b3:de:6b:5a:18:b1:42:f0:61:38:a7:1b:8f:
         30:39:40:6b:49:5c:18:b2:98:c9:60:71:df:1d:9c:10:59:af:
         92:09:4f:4f:1c:1e:76:07:6c:34:77:0d:a5:58:f1:75:4e:7d:
         fa:da:ca:fd:ec:59:c5:42:e3:18:1e:76:4d:2e:2d:61:e5:85:
         45:79:31:59:4b:38:0d:fb:8a:c7:a9:8f:5a:cd:f7:62:b3:d1:
         72:23:18:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 03:02:33 2026 by rpki-client