Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
File:                     RZR46fHzCyT9FxmNHKyDW8Hk368.mft (raw, json)
Hash identifier:          hQg+lwGxJFVWUgOlOuiDKzXyGtA8fm5sXBnM/6j5Fc0=
Subject key identifier:   ED:D2:B0:4C:F2:FF:F6:10:70:98:7F:0F:A4:1C:AB:7A:71:FE:ED:36
Authority key identifier: 45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF
Certificate issuer:       /CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
Certificate serial:       019E30A999DFF7FAB0841D3FDB28D0930055
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
Manifest number:          09AF
Signing time:             Sat 16 May 2026 12:01:21 +0000
Manifest this update:     Sat 16 May 2026 12:01:21 +0000
Manifest next update:     Sun 17 May 2026 12:01:21 +0000
Files and hashes:         1: 7QM2KeQ3Wn7b2DM_DaBA8kJny-8.roa (hash: 62/MDcXDz4G8cxXxwlkwD2glafSnz5PZXVYHbOFIM38=)
                          2: RZR46fHzCyT9FxmNHKyDW8Hk368.crl (hash: vH0RsbDpZCWZyOQOCThiw8yDhy//Qzzbvl0+15FxuPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:99:df:f7:fa:b0:84:1d:3f:db:28:d0:93:00:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
        Validity
            Not Before: May 16 12:01:21 2026 GMT
            Not After : May 17 12:01:21 2026 GMT
        Subject: CN=edd2b04cf2fff61070987f0fa41cab7a71feed36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:82:96:62:2f:98:27:99:f2:a2:65:13:b1:fa:
                    58:90:3c:ee:79:be:f4:2d:42:27:9e:44:52:7c:b2:
                    5d:f8:58:70:d1:cd:ed:6a:ea:38:86:e4:19:0b:5e:
                    ee:80:e5:db:56:54:68:33:41:92:0c:1a:ed:2a:0c:
                    78:a3:9c:79:57:20:c5:9e:0a:73:c7:af:67:ad:9c:
                    34:b2:59:77:d2:42:06:a7:04:59:1e:8e:2a:11:d8:
                    04:b5:c5:0a:04:f1:75:c9:8d:de:bd:00:8e:3e:26:
                    bd:67:ec:63:28:5c:5c:63:97:92:e6:5e:0b:4d:55:
                    56:50:85:7d:67:2e:03:75:f2:f8:85:d5:98:8c:13:
                    c5:a4:7e:72:6e:20:b6:5e:5e:13:fc:e5:ee:e9:1a:
                    87:fa:f6:4b:e4:59:91:0b:ac:64:25:09:4f:31:b5:
                    bb:ec:c3:4f:99:5d:c2:d5:06:fe:d6:94:f7:00:c8:
                    b5:47:22:9f:28:c6:03:55:03:14:b2:e6:be:9a:c8:
                    a1:ed:52:34:57:ff:7d:b5:f1:15:93:70:76:3c:bf:
                    52:c9:8f:d6:67:8e:41:ae:b8:29:66:d3:bc:53:09:
                    c8:47:8b:c4:80:37:cc:7b:aa:e9:59:f7:ed:42:a2:
                    b9:92:b2:e2:15:21:0a:13:ac:19:99:26:5a:23:ae:
                    6d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D2:B0:4C:F2:FF:F6:10:70:98:7F:0F:A4:1C:AB:7A:71:FE:ED:36
            X509v3 Authority Key Identifier:
                keyid:45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:f8:3f:55:35:9b:1d:c7:92:9a:86:d1:b1:58:49:3d:80:9b:
         dc:af:ee:06:66:a5:ae:ec:77:b0:60:94:1c:53:31:f4:f6:fe:
         33:fb:59:d9:f8:f8:c4:37:b2:4f:2e:17:8d:38:9a:f1:17:74:
         5b:2c:b6:96:14:f3:4f:37:de:5f:9a:4c:a8:41:a8:06:0b:2a:
         ee:ec:93:01:de:17:7d:94:1c:ea:1e:ae:de:3b:f5:b7:ad:c5:
         eb:21:30:87:8d:21:0d:69:95:79:85:22:30:87:51:21:5f:5e:
         3d:22:48:d6:73:8e:da:63:b4:e1:ba:fa:96:f8:3f:64:5f:f3:
         5b:af:26:af:9a:ad:86:f8:a4:99:24:53:44:01:c1:a1:65:82:
         3a:ed:3d:73:87:4f:a4:1f:fe:94:ab:cf:ca:69:f5:70:8a:db:
         e1:4a:01:43:1b:6b:33:2a:85:e0:de:5a:54:1f:38:39:c9:f1:
         2f:19:c9:c8:ed:08:ff:21:14:16:d5:aa:c5:c5:a9:3c:12:f6:
         75:b3:3c:84:6d:8e:65:f5:72:9a:29:ad:e9:6e:bf:1c:8b:35:
         69:6d:17:02:05:3f:48:8d:3e:8f:e1:25:30:66:96:45:87:0b:
         5a:fb:ee:41:c4:44:cf:78:74:9e:cb:7a:ec:4b:89:02:fa:ab:
         b2:d0:41:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:13:15 2026 by rpki-client