Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
File:                     dzalyFoI2AdJBBy5z6UX-31Ym6g.mft (raw, json)
Hash identifier:          Bl9RSz6m8G8kXNfwCqVrxwJQfL105twq4iZQJa782OI=
Subject key identifier:   92:6A:29:6D:32:DB:73:FB:9F:7E:A2:D6:44:82:FE:C4:13:49:81:4D
Authority key identifier: 77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8
Certificate issuer:       /CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
Certificate serial:       019DF9F263EAEBABF8462F878B61C7EAE484
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
Manifest number:          18FE
Signing time:             Tue 05 May 2026 21:01:45 +0000
Manifest this update:     Tue 05 May 2026 21:01:45 +0000
Manifest next update:     Wed 06 May 2026 21:01:45 +0000
Files and hashes:         1: 7zdL4YQGJFDUNgolkXTpwhIf2Fw.roa (hash: ZFZpl3XDKuuhGmPsndE03Wv8sKTzQDPR9YKcisjI36I=)
                          2: F-CmXISe8_wy3eRoL0KRLsrxsXE.roa (hash: UCcyvZA9JM0sa9RbXSB/RJ7CyrNNZcFxjhxeu1LfJcA=)
                          3: PAja4hjsJ8MQANg3sK1YfTlvaJQ.roa (hash: FIbqd2XK2BTIGA9oFREaVlM92WRa45cXlUCU71SKJfk=)
                          4: dzalyFoI2AdJBBy5z6UX-31Ym6g.crl (hash: lB+J7gmuyIWBKcgFbkWfz6ZxYgiklTDotndCf1iAIxE=)
                          5: gYsdgAs4KIaJroqJZMhZmwRNn38.roa (hash: t90AwEAZ729TPglZyxHbnIWUY3pMyQTtaWuzn+iV9DQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 May 2026 18:48:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:f9:f2:63:ea:eb:ab:f8:46:2f:87:8b:61:c7:ea:e4:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
        Validity
            Not Before: May  5 21:01:45 2026 GMT
            Not After : May  6 21:01:45 2026 GMT
        Subject: CN=926a296d32db73fb9f7ea2d64482fec41349814d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3e:8e:3f:00:3c:47:1f:ca:38:de:3d:d4:fa:
                    e9:85:d0:98:93:38:9f:c9:b5:73:ea:a1:15:97:ec:
                    a4:c2:6e:81:75:a0:7d:7b:a4:32:52:69:41:ba:41:
                    7b:4b:0a:e0:c9:e1:09:26:49:4d:de:7f:17:73:9a:
                    77:e3:c1:17:a3:1e:57:73:d6:84:11:7a:bc:c2:c6:
                    da:3a:76:e8:a9:81:05:55:b8:11:96:8c:68:b4:3d:
                    26:0a:4d:b8:7f:94:40:e0:5e:12:10:69:2b:24:91:
                    f7:6d:c0:68:e1:90:d6:2f:2e:f7:99:6c:c6:5d:62:
                    2e:18:da:d2:62:69:b1:61:30:77:a2:d6:6b:f6:ce:
                    c2:a2:ec:e3:e7:ae:99:9f:76:f0:f7:3e:4c:f9:8c:
                    02:1a:5c:07:5b:80:d8:87:4b:e3:65:6f:30:8b:c2:
                    08:b5:63:ee:2b:89:58:41:09:8b:3b:10:93:1a:b0:
                    3d:01:74:47:14:7b:e9:c2:dc:2c:2e:ae:9e:f3:4a:
                    e2:f5:8f:76:f9:45:d6:20:fe:b9:e1:6c:76:ac:22:
                    83:0e:e2:6d:36:7b:99:f9:b0:ad:7b:9f:4a:07:ce:
                    7c:69:50:08:0f:f9:5c:f8:13:ca:ca:58:51:1e:fe:
                    d7:5d:da:03:d1:60:bf:18:5f:2f:47:c7:0c:05:2a:
                    74:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:6A:29:6D:32:DB:73:FB:9F:7E:A2:D6:44:82:FE:C4:13:49:81:4D
            X509v3 Authority Key Identifier:
                keyid:77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:7d:b4:1a:b7:ef:c4:fc:9b:94:97:dd:92:73:ca:53:b0:d8:
         c6:e9:61:14:75:ec:2e:56:a1:22:2b:5c:81:65:ba:ef:5e:de:
         61:ae:b3:9a:ef:57:1b:b7:7b:e9:4b:2a:4d:4f:84:d2:2a:89:
         91:21:d0:ce:fc:98:6a:f2:2d:62:57:ca:57:f3:87:60:e2:21:
         fa:fe:e7:75:07:6b:88:06:00:31:ae:3e:d8:ac:45:13:13:04:
         ed:d8:f8:92:ef:bd:2e:2d:17:aa:fc:0a:16:46:f3:d1:cd:cc:
         9e:78:7e:31:a6:56:52:16:e1:27:bf:80:e4:3c:d4:e4:38:bf:
         71:16:5b:6f:b4:4b:da:b4:b6:4e:ab:48:90:a1:4c:65:e1:a2:
         36:87:8d:95:ee:c5:d4:b2:62:5c:a4:e0:ad:af:1b:bc:f4:4f:
         0d:e1:a8:9c:77:39:4d:4c:87:4c:e2:f0:d0:26:d8:6e:51:d1:
         da:47:14:e7:6f:36:57:f9:67:4d:49:9e:e1:d7:37:6d:ee:58:
         53:05:3a:c4:cd:c5:eb:86:5e:78:c8:2c:5f:03:97:57:02:05:
         fd:5e:a8:54:0c:be:32:3c:35:48:10:3c:15:06:3a:77:35:36:
         9a:20:5f:92:10:5e:71:96:9e:1f:01:08:b9:69:c6:93:ac:2f:
         3a:81:01:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 00:20:23 2026 by rpki-client