Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
File:                     aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft (raw, json)
Hash identifier:          HOxmhm2Yy5yqdqbwjRWja4h3qkX8c+Vg+FuF1cZ57/8=
Subject key identifier:   CF:10:D1:02:FC:65:42:DB:E7:D7:D7:C6:7E:E3:5C:28:92:52:83:44
Authority key identifier: 69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B
Certificate issuer:       /CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b
Certificate serial:       019E50A2781DCB59BB8D6284E9FFEC170DB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
Manifest number:          040D
Signing time:             Fri 22 May 2026 17:01:25 +0000
Manifest this update:     Fri 22 May 2026 17:01:25 +0000
Manifest next update:     Sat 23 May 2026 17:01:25 +0000
Files and hashes:         1: 9JzTDncsepWBIyeXDgZbgzh-hNA.roa (hash: EEJ8BD1UQFBZFgZQFrtwhkvF1euS2AFglnhzeTI1Kl4=)
                          2: CBsDO18mnRAZhs0rFe-oIGwGZeQ.roa (hash: v+64R9Yuvs5nMKSViq5julUttSHyjyUAvPmFlDm28JY=)
                          3: Q-ZhLXGU3V7WMJf_F4jA-hfVPCo.roa (hash: Ad4i58VjKhwdfxFqTtK2L0c60TXelJ6/sX2iLUaz7Lc=)
                          4: aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl (hash: aQIAh2vJzEGdhuPTwMZDGpVZTudPqcfiWg+Kct5FRQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 May 2026 17:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:50:a2:78:1d:cb:59:bb:8d:62:84:e9:ff:ec:17:0d:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b
        Validity
            Not Before: May 22 17:01:25 2026 GMT
            Not After : May 23 17:01:25 2026 GMT
        Subject: CN=cf10d102fc6542dbe7d7d7c67ee35c2892528344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:be:1b:57:1c:90:dd:9b:1e:4a:1c:9f:98:7b:
                    3c:f1:8a:69:6c:ad:6a:0c:e5:6f:9f:22:c7:30:b9:
                    9f:6e:48:2b:83:dd:32:7c:71:25:a0:e6:ca:6e:7a:
                    d5:8e:8f:69:86:f7:7d:3e:bf:da:51:b7:95:f9:a8:
                    40:d2:2e:92:0c:76:b2:d9:ab:86:88:d2:1b:e5:ab:
                    11:8e:0b:80:4c:f8:e3:9b:1d:f7:eb:d4:e7:ab:3e:
                    ea:2c:d4:ac:ac:9c:a0:6f:fd:db:e3:58:f9:e1:85:
                    51:3f:ec:ae:15:ad:cf:93:ed:88:b9:99:19:a0:ad:
                    19:f0:bd:a9:86:15:a0:e8:04:5b:bb:19:cd:b3:7b:
                    69:d8:c5:1c:42:43:6a:4d:3a:59:6f:68:3f:06:a8:
                    6c:8e:63:96:1b:d5:51:60:5b:f6:82:d4:49:7b:1b:
                    09:99:ea:77:21:36:8e:8e:b8:4b:4d:62:dc:6a:05:
                    d3:3d:3c:ca:65:26:f0:60:dd:a9:44:4c:81:86:97:
                    5f:a5:c4:cc:bf:2a:5d:71:66:6d:44:62:62:52:04:
                    7a:7c:9a:f2:bf:b2:15:ba:63:8a:38:ba:bb:a7:9f:
                    a3:99:d5:ec:8d:92:78:b9:62:d4:a8:05:1e:d1:79:
                    82:93:f0:c7:21:ed:e9:e9:d3:ed:7c:1d:09:46:9a:
                    e3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:10:D1:02:FC:65:42:DB:E7:D7:D7:C6:7E:E3:5C:28:92:52:83:44
            X509v3 Authority Key Identifier:
                keyid:69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:8d:7f:06:8e:3e:ee:01:ad:ed:f0:4c:0c:f7:90:36:85:0c:
         4b:a6:c8:98:79:ca:d4:aa:94:59:3f:ac:78:90:66:a7:9d:1e:
         d6:9f:9d:a9:87:67:8d:35:24:12:83:6f:92:9a:bb:19:ae:ec:
         e7:7c:37:6b:21:72:c0:af:f2:9e:73:0f:e2:b4:9a:b4:bf:6e:
         2d:b2:7f:ed:06:fe:3a:19:8e:d6:db:79:7d:8b:b2:ae:2c:a6:
         fe:b6:55:82:b9:a7:86:44:fa:ee:a0:1f:08:53:c5:86:52:bd:
         1c:30:a5:98:70:1f:7e:43:04:8b:4b:ba:17:d0:e2:a2:39:e6:
         15:92:73:1c:c8:7a:6f:4d:f8:a4:60:d3:8f:31:0e:26:a3:d3:
         b5:43:1e:07:38:39:dc:0d:6f:4c:07:5f:7a:93:8b:e5:45:d2:
         e6:4e:0e:77:fd:33:e7:21:a8:78:5f:2d:2c:49:06:47:15:31:
         b6:16:89:16:eb:be:7c:09:8f:d1:e4:f6:33:0b:55:44:1c:8a:
         1b:3e:36:2f:4c:56:f6:d1:cb:25:96:08:8d:48:c9:82:d8:18:
         31:92:f0:63:e7:13:fa:59:26:d4:2e:00:10:72:08:45:17:c6:
         f9:50:33:3a:1a:01:ee:21:b4:5f:8e:35:e8:6b:19:d1:80:f9:
         6b:81:68:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:48:22 2026 by rpki-client