Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File:                     s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier:          naA2PTAhmPUYlYlYN7zb0+p+aAV3c5o4M6FUAe082Fw=
Subject key identifier:   24:33:55:91:71:0C:2B:71:A6:87:94:C4:CE:42:9A:34:32:F5:67:27
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer:       /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial:       019E2AA73E629FB6F814A2D73EF1FE59F252
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number:          1923
Signing time:             Fri 15 May 2026 08:01:03 +0000
Manifest this update:     Fri 15 May 2026 08:01:03 +0000
Manifest next update:     Sat 16 May 2026 08:01:03 +0000
Files and hashes:         1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
                          2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
                          3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
                          4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
                          5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
                          6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: Kcr1jqHfDctA5O4hoUUaBii9jl08zjaA3aWcwbMrVUY=)
                          7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:a7:3e:62:9f:b6:f8:14:a2:d7:3e:f1:fe:59:f2:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
        Validity
            Not Before: May 15 08:01:03 2026 GMT
            Not After : May 16 08:01:03 2026 GMT
        Subject: CN=24335591710c2b71a68794c4ce429a3432f56727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:31:e2:56:78:4d:20:cb:54:72:a6:53:e0:f7:
                    db:44:b6:ef:a9:99:03:06:8c:f3:1a:0d:a0:50:99:
                    a3:22:3c:4e:35:e8:40:d8:1c:ad:d5:fd:5d:23:32:
                    99:fd:33:ee:bd:de:bc:d1:fd:0f:57:aa:5f:87:9d:
                    dd:7c:cd:37:16:d2:e3:57:d5:0f:03:a6:30:ab:59:
                    f2:8f:cf:9b:7d:28:34:5b:91:57:13:42:44:c5:46:
                    22:67:7c:76:e4:4f:b9:a7:12:da:c3:ef:02:b0:63:
                    2a:41:ec:cd:ed:f6:3a:c2:5b:53:3f:6d:21:e4:7c:
                    c7:82:d7:33:46:95:b4:55:bf:0a:ba:c3:13:91:ed:
                    bd:de:c7:13:94:01:6a:67:59:21:32:84:4a:73:6a:
                    0f:53:56:d7:63:71:26:10:61:a8:1e:f2:f3:7a:3a:
                    fb:b6:b7:4a:66:f8:43:3e:ef:17:61:3f:7f:0a:3b:
                    63:98:8b:78:e2:13:dc:f5:e5:26:07:82:e4:18:04:
                    3f:95:f1:e0:84:c0:26:5e:5f:d7:2e:38:b5:f7:70:
                    96:4e:8d:bf:c1:dc:6b:fe:eb:d4:e0:ec:b9:cb:3a:
                    b7:36:9f:1c:40:01:98:7f:fc:77:0f:52:eb:ae:ce:
                    89:6a:32:1e:80:25:2f:3c:3f:ab:71:09:ae:dd:c7:
                    bc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:33:55:91:71:0C:2B:71:A6:87:94:C4:CE:42:9A:34:32:F5:67:27
            X509v3 Authority Key Identifier:
                keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:6e:a7:70:90:3e:ac:3c:6d:27:64:54:24:a7:d7:28:5c:9c:
         44:50:c9:11:41:ff:77:75:be:86:33:a9:e9:3f:c4:43:72:56:
         fc:bf:73:67:8b:95:0f:93:e1:54:8b:82:8f:12:26:6f:74:6a:
         98:12:c8:d8:98:e5:0b:51:44:04:40:39:35:80:27:e6:e6:b3:
         4a:1e:0c:d8:22:a8:d3:db:c0:73:32:af:4f:33:7b:1f:97:ce:
         9e:9f:b4:74:cf:87:d2:15:8c:ae:0b:ba:1e:4c:0f:52:35:de:
         f0:fc:50:46:20:ad:9f:ac:2a:14:fd:16:54:e1:75:51:38:40:
         e7:8c:17:40:66:00:aa:ef:c9:90:02:d5:a6:e5:b3:9b:6f:00:
         e1:7d:f8:ec:8e:ac:a7:f5:c4:56:8e:2f:f3:a6:52:54:39:bc:
         0c:13:1f:d4:7f:1e:de:f8:fa:a9:9d:e6:f4:14:ca:b1:e4:a7:
         5c:9f:c6:8c:dd:07:73:0a:d1:c4:26:5c:10:f1:02:56:66:53:
         80:37:87:ae:53:d9:00:16:9a:aa:85:c1:a5:56:67:3a:ef:45:
         6e:ea:ad:0c:e7:21:81:4c:45:6b:43:c6:a5:44:7e:d7:88:f9:
         cc:da:03:77:3d:f4:d8:94:5b:b6:a8:5e:25:db:dc:89:e1:81:
         08:bd:87:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 11:02:56 2026 by rpki-client