Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft
File:                     MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft (raw, json)
Hash identifier:          ir+nmaxEQfLYdNmRro23C+pQaPHHdDdkw94or/yJnUo=
Subject key identifier:   55:0F:4B:1F:C5:C7:0E:86:65:6C:3C:F4:EB:03:5A:91:34:EF:93:57
Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42
Certificate issuer:       /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42
Certificate serial:       019DF8716FCC10935DB2D733ECD4CF0050E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft
Manifest number:          18FF
Signing time:             Tue 05 May 2026 14:01:16 +0000
Manifest this update:     Tue 05 May 2026 14:01:16 +0000
Manifest next update:     Wed 06 May 2026 14:01:16 +0000
Files and hashes:         1: 1-5YvMXH0hxTnFsj1sAzG_06N-p8.roa (hash: qtH86zFamX3mvPAvdw+q4UCXn4ioDZi9V1NWUgQSNY4=)
                          2: FVTkjzWbmN1CXQ1gquYHPct9ixg.roa (hash: O+F6tjESCYzZkWop7KXE+D6dIUDkHaDfPEsn4FO2i5Y=)
                          3: MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl (hash: nXlr3XMKe0pZz6akAvxHdnaZOlsbi3u67QsQYX8PBkQ=)
                          4: U_NZYpjmvtYZaAL9QOJbt18Da90.roa (hash: ImEoqLKkocpZGN3jliyG2JmnXa2NgKRx1aFT2s7Ccsg=)
                          5: XjDc2QA9m4quHMdfD5XNqmD-sRU.roa (hash: hUIq0ryrPFUtWnGVn0EVGNy126+7rvo1zZWi0URfcgg=)
                          6: b-jvFTusq2yMHvQus-EOGvQIcIU.roa (hash: UEESHc2CoqAdsZBnwreDavJ8dh67qE0F5/NXF/uJif0=)
                          7: eVf9uWw4an4J37lWXFXCY7TXLRA.roa (hash: TLeYBm2fbdmHg6RfdNeCWlTy8uamiAq/QUF9qcFVMZU=)
                          8: ossK8NVWIjYFpVS_EefAqYZy2IE.roa (hash: /y0pnw5X9uBmKvZNWFvXcQIM9KTs6u2DfBY5eqhbuoU=)
                          9: tsRs_smMGnXJS6Ngg5EdidV6amo.roa (hash: s9qZIcL7Vpb5CW9P2b/OUKeQv+DX4uJC5U3wk2Lpo2c=)
                          10: txvH1TOH6wMQ5yQgLlacwoKKBQ4.roa (hash: edU/OVpHTHKV2scSWmXngs1gD9tCdP7QXrGFexnNs6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 May 2026 14:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:f8:71:6f:cc:10:93:5d:b2:d7:33:ec:d4:cf:00:50:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42
        Validity
            Not Before: May  5 14:01:16 2026 GMT
            Not After : May  6 14:01:16 2026 GMT
        Subject: CN=550f4b1fc5c70e86656c3cf4eb035a9134ef9357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a5:58:98:a3:89:a3:e4:8e:56:e2:15:bc:1b:
                    6a:70:fa:2e:2e:84:15:b6:e9:8b:f1:8e:3e:b9:35:
                    f6:5d:69:1e:64:b0:d3:96:01:44:ae:fe:60:90:a3:
                    d4:f7:e8:12:cb:20:69:e7:8e:3d:34:32:67:c5:cd:
                    d9:b4:e6:da:73:ae:1e:87:c1:93:56:81:78:f4:e3:
                    80:f3:ae:eb:67:d7:7b:9a:0b:07:11:35:e6:ac:b1:
                    1d:57:54:e6:b1:66:c7:46:41:cd:7b:96:5a:de:36:
                    8f:27:b3:5d:56:98:15:28:2c:98:ef:db:aa:c0:9e:
                    1d:41:c6:d6:3d:96:ec:bf:9b:24:eb:dc:e4:15:c1:
                    39:a9:55:a1:c2:00:03:fd:c8:a0:e5:4a:9e:2d:f5:
                    43:11:18:d3:7d:5d:36:7e:05:f0:ad:1d:42:03:0e:
                    d2:fd:0f:cc:4f:f6:7a:a1:95:5a:bc:44:47:ca:0d:
                    1b:76:4c:3b:8b:60:ce:e0:23:cb:45:27:d0:43:bd:
                    22:61:9d:c9:e3:bd:fc:0e:53:3e:f7:67:13:13:f1:
                    62:ec:23:71:c7:2c:06:d9:3a:7b:24:a6:e3:7e:66:
                    57:27:82:7a:4b:06:1f:5c:f0:3e:a4:8d:5b:d2:63:
                    c8:fc:61:7e:f7:d7:80:4b:fd:f3:c3:36:22:1f:e6:
                    1e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0F:4B:1F:C5:C7:0E:86:65:6C:3C:F4:EB:03:5A:91:34:EF:93:57
            X509v3 Authority Key Identifier:
                keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:d4:07:3d:08:d0:a3:20:45:98:a1:36:00:41:a2:10:b2:96:
         c8:3c:21:d8:45:f1:3a:66:be:14:f3:0a:80:12:72:c3:03:1a:
         49:f6:e9:56:2c:22:e8:dd:87:f9:fc:dc:00:80:7c:3b:27:d4:
         aa:f7:a0:21:a0:fb:a3:10:d0:93:6e:67:d2:ca:d3:59:4a:74:
         2a:be:6f:43:3e:50:c7:b0:35:57:d3:43:1e:fd:52:51:67:7e:
         8a:66:61:74:df:f6:a5:cb:48:3a:75:0b:fe:8c:e6:7f:0f:ff:
         77:ef:d0:66:64:60:48:c2:14:07:77:1b:8d:de:03:77:f1:67:
         47:d4:4a:4b:b1:5c:af:7f:48:4e:23:3a:53:49:9e:13:de:8d:
         3f:0d:7b:74:05:fb:f1:19:9b:23:89:42:7e:4d:fd:fc:0a:dc:
         f3:56:ad:8c:32:07:e8:58:bb:50:4c:0e:ba:03:a4:6b:4f:68:
         89:57:26:2f:71:6d:69:58:8c:3f:c8:da:a6:69:fd:44:14:bc:
         33:51:2f:1c:d8:9a:02:77:36:e6:25:d7:e5:2d:f2:52:a6:f0:
         0d:45:40:4a:3c:47:1b:f5:89:6f:a8:81:d2:35:55:d3:b0:09:
         aa:17:5d:18:b8:9c:79:8c:d4:a5:b0:f6:3e:f9:c0:29:00:0b:
         e1:0e:78:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 00:21:02 2026 by rpki-client