Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
File:                     4xnQzWVZPZaejUU4KhlKqnPA_4w.mft (raw, json)
Hash identifier:          KFgFuOrPYQcQmem+rFGcxwEd5mdvIP/HC3ldkGxG+Fs=
Subject key identifier:   C2:70:7D:CB:A9:B4:6F:BC:BF:80:02:DD:84:A4:6A:FB:AE:E4:1F:0A
Authority key identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
Certificate issuer:       /CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Certificate serial:       019DF9618A829956065801A86987D04AC104
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
Manifest number:          139D
Signing time:             Tue 05 May 2026 18:23:32 +0000
Manifest this update:     Tue 05 May 2026 18:23:32 +0000
Manifest next update:     Wed 06 May 2026 18:23:32 +0000
Files and hashes:         1: 4xnQzWVZPZaejUU4KhlKqnPA_4w.crl (hash: +39kPglJtN9BaPXAbFQGG2Io19kZioE2Ho3DFBhlpkE=)
                          2: B4XqtMRju7ct1VHWSys1ZmsVDvA.roa (hash: dT4gZYld/5NxZfQ/re1cqoiLPKYDPvy18QhmjeiLxrE=)
                          3: JdAcrT3uln-8JiCxgK6oIqzKTOA.roa (hash: dIb2jT3iWQNSuT3k4NrPPXV/I/Z0OOjAmtCYJBKtyMs=)
                          4: RsA_UVwxWQ-J9JIZmxgOKVrijeU.roa (hash: JBuYTD0WubZn6moVgquEFt/qvUgskccLt/1IQgz3zQw=)
                          5: _biLnM_coqEwA_A8eVlJQZHQt48.roa (hash: 5mMri1uaYw577nOuv+pbuYsKwcFaxTbTyFZQFkO22x0=)
                          6: cvu881wX1J1NkelwvHsakF8V-nk.roa (hash: 3p0KxNsFZi7KD2HoriAn/X0d7O0pV7iqm6G3fj1N+gg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 May 2026 18:23:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:f9:61:8a:82:99:56:06:58:01:a8:69:87:d0:4a:c1:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
        Validity
            Not Before: May  5 18:23:32 2026 GMT
            Not After : May  6 18:23:32 2026 GMT
        Subject: CN=c2707dcba9b46fbcbf8002dd84a46afbaee41f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6e:84:ee:c4:ef:54:98:bd:ff:3c:90:76:46:
                    27:09:ed:24:96:fd:d3:b0:b8:a6:41:d3:14:1f:bb:
                    64:82:85:0a:92:f9:81:21:52:76:6b:11:5f:4d:5a:
                    22:27:29:14:82:a9:bb:0c:79:84:38:98:d6:de:f3:
                    f0:bd:71:a8:60:b9:68:f6:06:fa:40:f7:9a:ec:8e:
                    aa:d4:9b:09:3c:9e:f0:76:13:65:78:96:bb:56:e3:
                    e5:9c:70:80:e9:ca:13:19:9a:f0:da:7f:a6:80:41:
                    8e:bd:5a:6b:fb:b9:90:41:f5:70:1d:6f:fc:21:27:
                    99:47:15:68:c8:b9:ea:ec:b0:14:3a:37:c5:30:97:
                    20:b3:63:48:43:85:9f:a2:20:78:d9:fa:71:c6:52:
                    a4:94:cc:32:e9:d3:d5:fa:ad:94:cb:fc:ee:13:68:
                    f5:00:5f:3d:64:d4:27:7a:34:38:46:7a:fd:7e:f3:
                    b6:0f:59:ad:8f:d0:18:7b:62:ce:1d:26:66:15:19:
                    3a:86:03:4d:ec:d6:fc:f8:72:2b:30:de:43:ff:ef:
                    86:55:f2:43:2e:4d:51:88:03:2a:4c:c1:a9:e8:0f:
                    96:03:8c:0f:81:08:e9:4c:b9:9c:23:6a:48:6e:95:
                    5a:ab:df:df:8f:70:3e:51:4e:a3:70:f7:cb:e7:b4:
                    20:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:70:7D:CB:A9:B4:6F:BC:BF:80:02:DD:84:A4:6A:FB:AE:E4:1F:0A
            X509v3 Authority Key Identifier:
                keyid:E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:c1:90:d7:25:81:6c:bc:68:80:94:95:36:6b:93:b8:ca:9a:
         c5:ca:52:9e:41:76:94:5c:4f:62:c8:fa:e7:90:e4:50:3a:cd:
         32:db:cf:ce:e3:b1:32:a3:80:72:85:c9:e5:20:9d:89:d5:50:
         1b:e5:73:15:c6:2a:79:be:cd:e6:36:9f:a8:38:29:5e:68:c4:
         9a:0b:94:1b:65:e2:1f:e5:62:9a:90:53:bc:38:e4:6f:55:18:
         5f:19:9d:a0:b9:b7:49:dd:77:36:89:37:2f:a7:ba:d9:52:71:
         0e:8d:c9:54:c8:d6:26:ab:b4:93:61:7e:cb:a6:a6:7c:60:40:
         1e:63:f4:2f:05:4d:bb:de:09:60:e8:4e:02:15:d1:8f:e7:1b:
         09:94:b2:e0:9e:b4:a1:21:27:8b:ca:c7:46:91:ec:00:55:b3:
         f3:f4:99:0e:ea:b9:9c:3b:1d:01:47:f5:9a:01:9d:fa:05:f0:
         76:84:84:3f:12:a1:dd:b0:1d:64:db:2a:30:f3:0b:20:e7:2d:
         4f:f9:f5:eb:32:53:21:fd:d6:5e:28:5f:19:06:cf:4d:36:96:
         93:49:9e:34:13:0f:af:94:f9:f0:d2:52:05:5a:7b:f0:49:a9:
         e9:2d:48:03:f9:2a:31:57:50:7a:51:d4:24:4b:e8:13:c5:59:
         bd:f1:9f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 00:20:51 2026 by rpki-client