Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
File:                     PiTH7Po30khxUvubu6tQvnneJhk.mft (raw, json)
Hash identifier:          PPBj4YBeqh74kLEVBfjEbnfhOOIz1bI+tWRbbWUFx8M=
Subject key identifier:   FF:1F:87:78:61:A7:13:7B:F0:89:32:40:19:22:C6:35:A7:AF:F1:21
Authority key identifier: 3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
Certificate issuer:       /CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Certificate serial:       019E4E4590692866B8EDB321E610220958AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
Manifest number:          192F
Signing time:             Fri 22 May 2026 06:00:42 +0000
Manifest this update:     Fri 22 May 2026 06:00:42 +0000
Manifest next update:     Sat 23 May 2026 06:00:42 +0000
Files and hashes:         1: 5ktFpVoHtcv-4PVj4xQGVTm6rZs.roa (hash: Zqkw6KvI8acX/aUr49KfIKqTAKRlHDvQQG+hF6oNumM=)
                          2: L1LuXNyLmddWoquATgiWDCkvIvc.roa (hash: 4bMlcyRakC1GsgwgHN92wea/CUU4Dqc8/FL+CIWH9ng=)
                          3: PiTH7Po30khxUvubu6tQvnneJhk.crl (hash: K6x/TNPwAnZryMb1yghdqKS7umfhU/Jz8tWPJZogWoA=)
                          4: buVJFABq-VX2RQkDd31Tz6ZBBxg.roa (hash: 8On1Egu0eUygZ7HokkyA20vdkdxcvN29qQbkjTPI5rE=)
                          5: o5xjwD3RHYwZb8BGUpI8BsGBfV0.roa (hash: GZFTwMUyNntUts8RndeOn9OC9VYkHxusfe9yub/gTL4=)
                          6: t48mXkmHCqZPmvOXE_EaAv0d4IU.roa (hash: kn+opPbME6YgDhBuXcQLf7UfJNA4/7anLklPax/nt4w=)
                          7: tl_q-hSPqgL5VpoDk8C2Ua5xTVc.roa (hash: P7Vo08T4BVo4faac/Yk9jWiigRql2vSCBoh+fxrW89w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 May 2026 06:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:4e:45:90:69:28:66:b8:ed:b3:21:e6:10:22:09:58:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
        Validity
            Not Before: May 22 06:00:42 2026 GMT
            Not After : May 23 06:00:42 2026 GMT
        Subject: CN=ff1f877861a7137bf08932401922c635a7aff121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e8:1b:30:98:04:f7:de:0d:85:01:bf:6c:35:
                    f8:b5:9a:06:b8:2e:76:61:a8:cf:57:f0:5b:bf:63:
                    ed:2b:d2:d0:cc:3b:5d:93:86:da:54:a1:73:97:b2:
                    86:87:c2:85:a5:68:a2:95:b2:f8:4b:36:f3:d7:7f:
                    02:b3:3c:dd:a5:03:65:4c:e8:2a:53:d6:b4:11:b2:
                    04:83:6d:a5:a9:04:58:cd:15:6a:b2:11:a2:2c:de:
                    fa:26:02:7e:0f:a0:1f:b3:9d:c7:d9:52:b1:1e:fb:
                    a7:c5:0a:a6:9f:08:31:19:cd:b6:7b:7e:94:48:fe:
                    f2:02:00:05:6b:b1:dc:36:d2:7a:00:28:1c:fc:de:
                    ca:98:33:1f:75:f8:41:8c:41:76:ac:0d:a4:7d:68:
                    a3:90:8e:34:2f:d0:69:be:2b:8f:7c:48:1f:22:d5:
                    08:e5:22:72:16:02:57:45:69:2c:b0:70:07:57:ec:
                    77:9a:0e:3d:7b:bc:d9:92:fa:a0:2a:62:24:89:5f:
                    e9:26:f2:77:a1:56:7f:73:b8:88:f5:f7:23:64:d1:
                    c9:8f:11:55:2d:28:6d:fb:7e:0d:d8:45:2e:ac:c8:
                    ff:16:c6:f5:fe:16:a6:61:6b:00:06:4d:b6:30:ab:
                    0b:fb:78:cc:75:d9:74:f3:d9:95:08:e9:bf:07:17:
                    43:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1F:87:78:61:A7:13:7B:F0:89:32:40:19:22:C6:35:A7:AF:F1:21
            X509v3 Authority Key Identifier:
                keyid:3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:fd:e5:da:ca:77:59:06:9d:cd:1c:a6:98:34:79:63:77:8c:
         4c:4e:aa:55:8e:4f:2b:3a:70:da:05:b2:d6:a8:a6:3a:28:7c:
         83:cd:6d:da:a6:b3:46:3a:67:8e:10:5d:49:3c:dc:c2:12:e3:
         65:c2:37:fd:e3:0d:95:06:23:3a:8d:80:0a:9f:bf:7d:da:7b:
         01:dd:f7:36:71:10:63:a3:bc:6d:59:18:d2:e4:95:b2:3e:88:
         08:74:77:6c:74:54:3a:4e:d2:1f:b8:cc:1a:ba:f0:7a:0e:de:
         6e:62:1b:c3:20:17:61:54:b8:f4:ce:4e:77:7d:85:13:ce:34:
         e2:39:42:82:3a:c2:bd:81:d8:cd:64:42:da:79:ff:a0:fc:2f:
         23:9e:98:2b:4d:8f:35:89:0c:19:1a:b1:b8:9e:73:03:05:a9:
         8f:29:f5:2b:e8:c5:85:98:8e:1f:2b:4e:2f:fb:d5:ac:a6:5e:
         ef:87:34:15:23:a4:1d:0e:ac:b9:9a:b0:2b:66:e3:3f:cf:bd:
         e7:6f:0b:5e:6f:71:65:86:0e:c8:7e:cf:9e:c0:68:33:05:53:
         18:32:f3:10:3c:76:03:69:c2:ef:18:27:2d:8d:3e:6c:bf:cc:
         bc:60:1c:88:52:0c:d6:1a:6d:e3:5d:64:b5:dd:23:f6:e1:0b:
         59:7f:74:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:09:50 2026 by rpki-client