Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File:                     s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier:          Hf3+fPrj+QDEdIqMi3Sw5bmGcQo+yL4EO9jGkN1JnNY=
Subject key identifier:   C3:DE:A9:FC:96:EB:F9:90:BA:A2:42:B0:8F:90:27:28:30:9C:0C:63
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer:       /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial:       019DEAECC99C58291AA08735970BC80A59D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number:          1902
Signing time:             Sat 02 May 2026 23:01:19 +0000
Manifest this update:     Sat 02 May 2026 23:01:19 +0000
Manifest next update:     Sun 03 May 2026 23:01:19 +0000
Files and hashes:         1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
                          2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
                          3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
                          4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
                          5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
                          6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: 2mLEm/yFSvkIhOiVsI4ioUjCXrQ5cYNJRmXAWSOcQvc=)
                          7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 03 May 2026 20:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ea:ec:c9:9c:58:29:1a:a0:87:35:97:0b:c8:0a:59:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
        Validity
            Not Before: May  2 23:01:19 2026 GMT
            Not After : May  3 23:01:19 2026 GMT
        Subject: CN=c3dea9fc96ebf990baa242b08f902728309c0c63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a2:34:22:9f:7f:90:d6:63:d1:89:15:bd:69:
                    8c:25:59:29:4c:ec:6f:c0:60:5a:82:aa:a0:07:86:
                    27:c7:16:32:7a:ca:cf:c7:aa:a2:7e:5d:b0:0d:5a:
                    8c:4a:85:61:34:68:dc:c6:ce:1d:29:52:7a:d1:7a:
                    da:15:fd:67:7e:08:21:ab:e3:d0:38:d9:fc:1c:49:
                    e1:3c:b5:5d:3c:4d:da:02:49:1d:97:02:37:e3:87:
                    9d:57:b1:0e:90:25:9c:24:fa:a4:64:c2:7f:92:b7:
                    4e:5c:3f:87:26:f0:cc:61:c3:8f:f1:e6:7f:00:90:
                    24:ae:1c:56:24:cb:88:00:e0:ec:94:59:50:03:02:
                    0e:72:4a:a3:11:25:a3:eb:aa:af:a3:05:3c:86:c5:
                    ed:d9:71:1e:71:86:b2:10:c0:d4:65:a4:62:20:7d:
                    7a:be:33:36:23:d7:57:8c:1f:cc:0c:55:99:b0:c4:
                    53:04:ab:2e:ea:2c:d8:94:79:01:66:13:7d:f6:2e:
                    54:37:3e:c4:f7:56:44:cd:73:24:b8:56:d5:5f:29:
                    2b:67:85:0c:6d:bf:43:0a:9e:27:29:62:07:50:fb:
                    7b:59:3e:ff:67:8f:82:18:92:08:87:79:72:4b:1a:
                    77:66:f4:03:29:4a:d4:9a:0f:a7:06:b9:b8:3c:ab:
                    a5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:DE:A9:FC:96:EB:F9:90:BA:A2:42:B0:8F:90:27:28:30:9C:0C:63
            X509v3 Authority Key Identifier:
                keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:3a:12:69:9e:c0:04:15:b7:c5:62:25:e3:e1:59:ee:67:a2:
         08:89:35:1b:08:8c:9e:9d:89:a1:9a:0b:85:0e:be:5b:1a:0e:
         63:5a:01:22:b5:86:76:9c:7a:c3:1f:83:b7:aa:72:50:ab:51:
         c9:00:1e:3b:15:f7:32:7c:99:5e:ac:e5:48:1c:87:d7:c4:a0:
         04:89:1b:9f:e1:81:bf:eb:ff:b3:c0:0a:30:ba:8c:ed:b6:17:
         0a:e1:d5:d8:2d:a0:6f:81:ab:5d:73:75:aa:eb:0a:85:c8:84:
         b8:67:1f:a5:c2:d9:da:22:a0:82:5e:44:a2:59:aa:25:c4:00:
         eb:b3:8e:77:cc:99:4b:5b:36:17:ff:fd:fe:ce:1f:c9:25:79:
         7b:33:f8:81:64:f1:4e:06:69:e6:06:6e:8c:90:e7:71:44:46:
         ab:4c:3b:d3:e1:37:1a:7e:5d:6f:3e:8c:98:79:3c:00:c2:86:
         b0:fc:eb:29:92:dc:eb:3e:81:bb:56:cb:c7:ad:ce:e6:b2:58:
         a0:1a:b2:75:78:43:54:41:5b:94:f9:66:34:8f:82:a9:5b:8b:
         5f:06:fd:4c:41:89:0d:22:2c:92:34:6f:0b:77:1f:f4:f7:46:
         be:92:01:77:76:ff:37:cc:86:32:54:44:c2:75:b5:5e:f6:4d:
         f3:68:36:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 05:49:30 2026 by rpki-client