Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File:                     s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier:          eLqWcoJ+V9sSQYbBaLodY72HULjIdPPiaW8vK6OuPjo=
Subject key identifier:   41:E8:16:A0:B5:F1:20:A5:39:5C:F1:10:A2:2C:13:DF:39:B1:A7:79
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer:       /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial:       019DF0B87A2192EBC2CF3108DEE1A83ED0C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number:          1905
Signing time:             Mon 04 May 2026 02:01:54 +0000
Manifest this update:     Mon 04 May 2026 02:01:54 +0000
Manifest next update:     Tue 05 May 2026 02:01:54 +0000
Files and hashes:         1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
                          2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
                          3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
                          4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
                          5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
                          6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: Nme/1CeyQ2RDe17QbLhDVktA4HY9/1FwvIpdJAbQVNY=)
                          7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 May 2026 20:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:f0:b8:7a:21:92:eb:c2:cf:31:08:de:e1:a8:3e:d0:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
        Validity
            Not Before: May  4 02:01:54 2026 GMT
            Not After : May  5 02:01:54 2026 GMT
        Subject: CN=41e816a0b5f120a5395cf110a22c13df39b1a779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a6:ca:1b:92:ac:1a:bd:dd:b5:a9:1c:63:dd:
                    34:07:52:5b:92:7e:70:83:d7:a8:da:b8:85:5d:1e:
                    16:00:32:9e:84:22:b5:08:cf:e4:a4:f7:ef:c0:ff:
                    d9:31:5f:dc:ec:55:76:e4:2d:16:48:64:fa:80:f3:
                    1e:4c:26:1e:8b:aa:3d:5f:e3:c5:97:31:e8:17:26:
                    35:9c:a7:23:82:f3:b9:ee:2a:92:09:58:54:86:ac:
                    91:75:3d:26:11:98:e8:cb:66:1b:ff:41:e9:4c:a2:
                    d8:59:c5:76:2b:d9:1e:ba:ee:6b:0f:10:3f:df:15:
                    e8:42:bd:46:dd:57:68:93:e1:c8:d7:98:ac:ee:b7:
                    7c:06:ed:8b:89:c9:b5:02:e1:1c:88:28:5a:e3:5d:
                    0b:11:48:56:94:4a:b3:3d:a1:20:1a:4d:5e:02:75:
                    0c:38:74:d7:46:00:77:39:53:02:c9:82:3e:59:e6:
                    81:33:44:19:cd:69:3c:01:13:c3:da:d8:16:a4:df:
                    09:eb:08:99:96:eb:e4:e2:ee:09:96:15:bd:e7:c7:
                    29:1d:e8:1c:15:3f:08:4b:55:25:05:f5:ec:d5:e8:
                    08:c0:35:de:32:3c:13:e4:19:07:a1:b9:d7:b1:cb:
                    3f:67:04:fb:fb:78:f6:2e:26:ac:51:78:c1:4b:3e:
                    87:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E8:16:A0:B5:F1:20:A5:39:5C:F1:10:A2:2C:13:DF:39:B1:A7:79
            X509v3 Authority Key Identifier:
                keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:e9:11:63:e9:08:b2:53:e4:bd:6f:6f:82:7d:a9:5c:2a:b0:
         45:0b:23:7a:f6:51:2b:32:d6:87:2e:86:56:ff:27:5b:d6:7f:
         17:3c:ad:2f:43:9b:28:29:d9:c1:24:04:38:56:ac:ae:4c:d8:
         bd:f8:cb:83:f3:ee:45:8f:7c:79:71:87:00:b4:52:9e:93:e9:
         3b:24:22:c2:f5:e9:d3:17:12:5a:0d:4a:22:35:01:68:a6:33:
         14:a1:0e:c2:2e:dd:07:1e:73:04:71:a0:b0:8b:11:e9:df:b6:
         02:c2:62:cc:e1:22:ff:83:98:b5:d7:66:ba:47:17:6d:38:94:
         f3:44:d0:05:dd:7f:e1:66:6e:82:9f:62:09:2f:b0:8e:60:81:
         9e:3a:35:23:6c:dd:3c:d6:94:af:9e:da:30:da:a7:dd:fc:5a:
         8e:8b:df:97:28:94:11:04:b5:00:a6:1c:6d:f8:15:e7:bf:fb:
         8d:46:a6:35:23:fb:18:89:37:59:80:25:97:9b:f8:72:f6:fc:
         0c:ff:ef:f8:91:d9:eb:f2:cb:38:cf:75:b5:36:7e:00:21:57:
         cc:c5:ec:45:fa:c6:0d:5f:9f:61:09:31:b9:5a:8f:2a:4b:8b:
         92:7d:e5:eb:a3:32:0c:0a:88:1e:a3:22:f9:f1:a0:56:01:bd:
         8f:61:50:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 06:42:34 2026 by rpki-client