Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft
File:                     MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft (raw, json)
Hash identifier:          LOfA1P6HFxVqa5aXhU3Gjii9EAhwihDfgkJHrA+ii5k=
Subject key identifier:   62:44:6A:2E:EA:AB:52:24:78:9F:66:F6:87:BB:A9:82:AA:F7:C8:8C
Authority key identifier: 31:D4:EE:4A:FF:F5:5E:67:44:4D:47:D4:9B:51:2A:83:68:BF:9E:F6
Certificate issuer:       /CN=31d4ee4afff55e67444d47d49b512a8368bf9ef6
Certificate serial:       019DECDB0C05949B5492FD8FE75301C7CEB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft
Manifest number:          13D2
Signing time:             Sun 03 May 2026 08:01:11 +0000
Manifest this update:     Sun 03 May 2026 08:01:11 +0000
Manifest next update:     Mon 04 May 2026 08:01:11 +0000
Files and hashes:         1: 6JYQqrzS3UTPcgvWPbO4TgCoS3k.roa (hash: iOMk6cfEftH8+M5zAq6J+7nYiKbK2CplnfrSukCWdkM=)
                          2: KiViUlRdp1iVIBpAgxyCpxxK3gQ.roa (hash: Yk/aBj6tG6In28XxnbyhWgRKpfIGrGy/o9iiuy0VDDg=)
                          3: MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl (hash: hYi4P5CGh021J95RAPaUmBuEBRBL+A5ST09xPsHQ/jU=)
                          4: aZwxLLe27uK7ns0bAgvQ0s7Mqt4.roa (hash: IJFNHlYozh1R/6V0WKyYnkoCMR+po4mStHpa7SQZbq4=)
                          5: qM92mL8g634Yh9KwZjRzI5vZ9l8.roa (hash: f+n6LoAwAduArbfX5BlVpkBMLZF56N90CkVkSMu7mrU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 May 2026 08:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ec:db:0c:05:94:9b:54:92:fd:8f:e7:53:01:c7:ce:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d4ee4afff55e67444d47d49b512a8368bf9ef6
        Validity
            Not Before: May  3 08:01:11 2026 GMT
            Not After : May  4 08:01:11 2026 GMT
        Subject: CN=62446a2eeaab5224789f66f687bba982aaf7c88c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1f:51:dd:c4:e3:4b:31:ec:e7:2b:11:30:4c:
                    6b:8a:80:18:a8:24:ec:cd:ca:72:f0:c3:6c:73:ad:
                    ed:17:af:a2:3c:0d:c1:43:2f:ce:ed:11:65:f4:6f:
                    66:28:e2:c6:02:44:2f:49:ac:fb:01:57:25:f2:3f:
                    dc:72:b9:21:3a:40:c4:ce:1e:a3:e9:44:e7:c6:12:
                    d5:d4:d5:df:f0:d6:27:7d:68:12:6f:c6:2a:04:27:
                    90:46:83:bf:5e:c8:ae:9c:9e:08:7d:94:bd:dd:7e:
                    e6:b9:0a:59:50:07:1d:ca:d0:74:34:41:d9:96:28:
                    9f:05:5a:03:e6:ee:97:5e:a9:9a:aa:0d:43:8b:c5:
                    bb:1b:54:ba:59:dc:f5:1e:ab:00:77:12:f5:82:1a:
                    06:46:ee:88:c7:55:a7:a9:e9:b7:99:16:f1:7c:de:
                    8a:4f:22:0b:3b:e4:96:94:0e:7f:71:00:98:a1:22:
                    6c:11:b4:a2:71:38:1b:c4:72:ae:66:12:7c:d9:ed:
                    d8:26:b7:e3:21:93:c8:2c:1e:b7:8b:a7:fb:36:e1:
                    33:f8:68:b0:ed:35:af:8c:f2:76:8d:19:c6:69:7a:
                    8e:13:3c:61:73:12:ab:d3:4e:71:b1:eb:4b:64:ac:
                    19:8a:9f:7b:7f:ec:82:d2:0e:d0:f6:c2:6f:4d:d1:
                    50:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:44:6A:2E:EA:AB:52:24:78:9F:66:F6:87:BB:A9:82:AA:F7:C8:8C
            X509v3 Authority Key Identifier:
                keyid:31:D4:EE:4A:FF:F5:5E:67:44:4D:47:D4:9B:51:2A:83:68:BF:9E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:9b:9e:c1:f4:6d:8b:cb:b8:6f:f8:44:64:5c:a6:9a:2e:30:
         da:54:bc:68:6d:a3:3c:b4:a3:62:80:86:da:39:ec:4d:d9:57:
         5d:b4:6f:44:9a:7d:4a:6b:94:63:8d:14:73:a6:02:86:4a:dd:
         25:ef:08:6c:a6:b5:d4:6b:44:38:5f:88:80:82:d7:80:ed:dd:
         58:a7:52:33:1f:de:52:a3:30:5e:a5:f3:f8:b0:e5:f2:88:e3:
         13:71:5b:db:f8:7a:20:42:ec:a7:7d:d7:36:c7:2d:b9:ee:b4:
         11:2e:68:2f:c9:6e:1e:44:fe:04:5d:81:26:12:af:1f:7c:d0:
         73:0d:8c:0c:d0:97:94:f7:23:fb:f0:13:1a:0b:22:77:fb:24:
         44:34:e6:15:41:cd:43:31:e4:64:32:14:c3:7b:3b:dc:0c:1a:
         cb:d5:8d:b7:08:3f:fc:71:e5:5c:39:7f:f6:19:b1:74:89:5a:
         a6:41:7d:09:27:33:6f:cb:e7:6a:34:a4:f6:4c:59:be:1a:69:
         06:e4:b1:d1:24:06:dd:da:d2:10:b8:c0:42:18:fc:e0:4e:56:
         8c:bd:22:36:07:e5:46:0d:7f:ad:08:18:f1:44:d0:29:4c:2e:
         78:39:dc:3c:d1:79:03:f9:56:6f:e3:e3:3d:97:87:00:4b:59:
         7f:d9:17:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:08:05 2026 by rpki-client