Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
File:                     F5WshDzYupAYj3MTZSu1YSmbKW8.mft (raw, json)
Hash identifier:          2n8vt3xi6d9RDydMToHpcbm1hFjzbaz0/rwdD5/xlQ8=
Subject key identifier:   29:A3:FA:6E:42:23:8C:6F:B8:91:9B:E2:BE:C2:9E:29:2F:AD:6C:75
Authority key identifier: 17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F
Certificate issuer:       /CN=1795ac843cd8ba90188f7313652bb561299b296f
Certificate serial:       019DCF3DF330F494BE03A8B2079AA26DC947
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
Manifest number:          190E
Signing time:             Mon 27 Apr 2026 14:00:36 +0000
Manifest this update:     Mon 27 Apr 2026 14:00:36 +0000
Manifest next update:     Tue 28 Apr 2026 14:00:36 +0000
Files and hashes:         1: 4cPUtGs5z3WzM8Tbf3sj19g9kLM.roa (hash: mztLsdxtv2MnNRJ0kNvEbAIy95WSyZD1lkeM0IDqVSc=)
                          2: F5WshDzYupAYj3MTZSu1YSmbKW8.crl (hash: TjNVJZT12HI+MBc9xFgsFAW44yMek8/Ub7vA7anmOt4=)
                          3: M32l6QcCzjNP1ZvVCiymNlZeu5M.roa (hash: 7yhUf6JrLXmGYFGl+/grMfR3bznSq0e/XMOFiemHb1Y=)
                          4: djYwV2YEd2ptt8Ib5gbwyt6_PJ0.roa (hash: EPuCK1qK8rFmB6GJAaNU9eGa1ttXRJS5gr+vN0RsIxc=)
                          5: qO1xGMDRTz1c6NG2XcRW45Jlxs0.roa (hash: lXx7crxtNnNAXWSdBnarR4QfhtaUFVtePQBiE/rqIY0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cf:3d:f3:30:f4:94:be:03:a8:b2:07:9a:a2:6d:c9:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1795ac843cd8ba90188f7313652bb561299b296f
        Validity
            Not Before: Apr 27 14:00:36 2026 GMT
            Not After : Apr 28 14:00:36 2026 GMT
        Subject: CN=29a3fa6e42238c6fb8919be2bec29e292fad6c75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8c:cb:42:c0:51:c3:74:8d:87:bb:3a:d7:9b:
                    10:73:c5:75:9a:27:32:ef:86:81:54:3d:ec:28:d3:
                    d0:26:ef:b3:ee:82:fa:e9:8c:64:f2:16:a5:07:46:
                    90:e2:78:34:e5:37:b1:b7:29:9b:01:f7:b5:86:71:
                    32:fe:14:40:14:96:43:2d:f7:89:c9:62:3b:a5:a4:
                    cc:d8:97:79:f3:42:e3:88:63:21:f7:cd:5f:8d:94:
                    83:d9:e2:76:e4:bc:79:8b:4c:49:f9:20:e3:71:ca:
                    46:8e:d4:ac:03:4c:20:b8:2d:0d:f0:1e:b2:d5:6d:
                    f6:19:f1:af:e1:e4:68:8b:c9:ee:79:93:aa:90:75:
                    0e:47:d3:94:87:61:9d:63:4a:f6:fd:65:9f:77:25:
                    af:d1:ad:e0:ab:43:1f:c6:32:9d:7b:12:bc:53:33:
                    b7:3e:12:ed:9e:77:ee:8c:36:51:4c:c1:2e:74:1e:
                    a0:01:40:3f:ba:44:31:34:f9:3f:ac:85:7b:af:e8:
                    f1:f7:21:d0:b2:87:c7:45:4d:72:13:04:c3:95:b7:
                    0d:1c:a0:c8:4c:c5:e1:fe:af:66:31:51:29:fa:b7:
                    71:b9:ed:04:94:26:7e:01:de:9a:42:d6:98:43:a9:
                    f9:ea:07:d5:82:b3:10:71:27:cd:d1:d5:48:36:42:
                    e3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A3:FA:6E:42:23:8C:6F:B8:91:9B:E2:BE:C2:9E:29:2F:AD:6C:75
            X509v3 Authority Key Identifier:
                keyid:17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:f6:e3:4f:79:9a:bd:cd:a1:9a:26:8f:5a:a6:87:f1:a1:49:
         f8:0e:f0:cc:5a:22:00:e6:ae:29:3e:22:0c:74:9d:94:53:9d:
         29:ec:64:4a:08:0c:7f:28:07:36:c6:f9:4d:4e:61:73:a7:fa:
         22:04:39:3b:ad:44:e1:9f:80:9e:cf:ef:11:22:18:fb:7b:a4:
         df:de:c6:9a:47:d9:70:70:dc:99:37:75:3e:af:80:a5:a2:70:
         f4:d1:f5:a2:d6:c4:32:ac:70:82:c6:9d:11:41:32:1d:3f:03:
         2c:c3:98:63:cd:28:73:be:b2:ec:be:5a:14:5f:c1:86:8b:d3:
         94:b4:64:95:dc:e7:0e:41:af:54:54:d9:f5:f2:ef:fe:2c:0b:
         44:20:ac:3f:12:95:3c:32:7d:c9:76:e9:a9:bb:13:4d:97:67:
         86:64:a4:e4:6e:9a:b2:97:02:e9:4c:e2:64:0c:99:16:aa:a5:
         a1:06:78:19:2d:f4:98:f5:70:76:0e:47:e7:2f:11:19:a3:35:
         66:98:e6:b7:b8:81:15:ee:97:25:40:bd:91:21:15:10:08:78:
         5e:64:78:99:dc:89:59:64:7e:a4:c0:07:3a:e7:82:5f:47:31:
         2f:a7:99:24:e5:a5:6b:66:ec:9c:70:46:31:1f:4f:12:76:c6:
         0b:44:7c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:02:08 2026 by rpki-client