Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft
File:                     5PKoZiAvS4y8MzgtboLYHYlkyA4.mft (raw, json)
Hash identifier:          xq6AZTdr9mfiMbNlmmARE4tg7xVUcmmFr7GU0j7EF28=
Subject key identifier:   8A:0E:C5:42:D0:C1:AF:49:74:77:F6:FF:58:61:63:D2:F3:13:59:61
Authority key identifier: E4:F2:A8:66:20:2F:4B:8C:BC:33:38:2D:6E:82:D8:1D:89:64:C8:0E
Certificate issuer:       /CN=e4f2a866202f4b8cbc33382d6e82d81d8964c80e
Certificate serial:       019E28141B8295BAE87F52E082D8341DFDE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5PKoZiAvS4y8MzgtboLYHYlkyA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft
Manifest number:          1915
Signing time:             Thu 14 May 2026 20:01:06 +0000
Manifest this update:     Thu 14 May 2026 20:01:06 +0000
Manifest next update:     Fri 15 May 2026 20:01:06 +0000
Files and hashes:         1: 0w4XcBQywwl1teApjX6VHSPuvgg.roa (hash: /EcXOS7UzKKs89buMydMe2QfoMOWxkfJCW82u93ztaw=)
                          2: 5PKoZiAvS4y8MzgtboLYHYlkyA4.crl (hash: +4nMkHAu204dnpxN02oRfk5CHGOwt7WAyCLENmg+dw0=)
                          3: av_HZf6EAwlDsvNiqOK233RQvoM.roa (hash: GY5qM+O2sWQRx1EcDLewr4LGFVQxjYE9jkUci4HJmic=)
                          4: ullWMQMNWNs2m-qavM2ZaH0wLLY.asa (hash: Hs+EUjaBHhmBRRhyoMI5LyzKTqwRJd2HGRT6RAN80K8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5PKoZiAvS4y8MzgtboLYHYlkyA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 20:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:14:1b:82:95:ba:e8:7f:52:e0:82:d8:34:1d:fd:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4f2a866202f4b8cbc33382d6e82d81d8964c80e
        Validity
            Not Before: May 14 20:01:06 2026 GMT
            Not After : May 15 20:01:06 2026 GMT
        Subject: CN=8a0ec542d0c1af497477f6ff586163d2f3135961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:fe:bd:71:6f:28:1f:13:df:b5:e1:8d:d3:d6:
                    cb:b7:0f:71:44:40:81:76:0f:81:aa:5b:2a:4f:08:
                    86:3f:da:9c:6b:98:ac:dc:92:dc:05:d4:63:65:25:
                    04:5b:56:8c:98:50:d8:b5:41:ce:ed:80:fb:01:1f:
                    46:f4:a1:4c:6d:f6:9e:93:d1:cf:65:90:f8:c3:71:
                    8c:04:dc:10:02:c8:84:31:50:56:3a:75:a5:ed:83:
                    ec:c9:21:d0:85:79:40:11:16:73:eb:88:ca:48:83:
                    ae:03:62:1c:29:5c:b8:4b:00:a2:ca:72:9d:a0:56:
                    45:95:16:35:38:be:b8:84:44:ac:58:c6:f8:99:7c:
                    ca:da:71:57:78:77:24:ef:97:6e:c2:ab:36:50:ea:
                    d6:22:06:e3:ec:a2:89:3c:a2:c4:60:fb:48:83:ab:
                    b9:a0:ec:80:38:45:6c:0a:ca:b8:34:d2:66:77:71:
                    71:13:82:c4:f4:03:13:4e:3b:e7:92:de:5f:62:48:
                    cb:b5:b3:5b:68:e3:2d:9f:01:8e:5d:93:4d:0c:d5:
                    a2:69:84:92:c4:23:d1:dc:2e:0d:87:d6:76:5f:b3:
                    6a:6e:c6:62:a7:eb:cc:2d:33:27:b4:75:11:41:1f:
                    d1:44:0b:47:be:0f:7e:a2:38:45:8e:64:b2:5e:0b:
                    fa:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:0E:C5:42:D0:C1:AF:49:74:77:F6:FF:58:61:63:D2:F3:13:59:61
            X509v3 Authority Key Identifier:
                keyid:E4:F2:A8:66:20:2F:4B:8C:BC:33:38:2D:6E:82:D8:1D:89:64:C8:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PKoZiAvS4y8MzgtboLYHYlkyA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:6e:67:97:13:27:6f:b0:41:7a:1c:e2:f3:5a:5f:25:c3:f7:
         a6:f6:2d:1e:34:01:6e:9c:e9:b3:da:38:80:b6:3c:85:95:e1:
         1d:c1:6a:71:d6:b2:d2:bb:47:3b:ef:0e:f4:7c:6e:d6:aa:c5:
         0f:7d:70:86:9a:56:5e:b0:12:3e:ca:d8:1a:21:7e:45:5f:0f:
         d3:e8:34:e0:75:aa:65:6d:78:9a:cf:37:f8:4b:fd:8a:18:02:
         4b:dc:f4:9b:09:6f:b4:8c:86:f7:0b:bf:af:04:11:c5:8b:77:
         25:1c:3e:79:e9:e6:af:c5:8f:76:9a:f8:88:d3:99:8f:a7:4b:
         99:5d:7f:a8:57:0f:d2:08:dc:65:b5:a4:80:4b:9d:1b:9c:40:
         3a:56:b2:93:2d:47:06:77:b3:e9:14:b3:3a:02:7e:c1:a8:0b:
         e9:da:08:9b:30:3e:cc:35:ec:40:55:ff:12:8a:24:2d:bf:81:
         72:71:27:46:b5:a0:9a:60:c5:89:eb:26:b5:5b:dc:a3:9e:03:
         ef:7c:02:95:96:5e:b4:2a:a8:60:ee:cd:f7:a1:4d:3c:35:9f:
         93:d8:a7:27:e9:a1:04:e8:29:27:0d:c5:54:60:61:7c:03:4a:
         45:02:45:b4:48:25:57:2d:aa:57:7a:5e:cd:3a:35:1e:52:e9:
         27:5a:85:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:16:37 2026 by rpki-client