Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft
File:                     3E5FOv_olbZFK4QCdDfFwA_TcGc.mft (raw, json)
Hash identifier:          FcheZ08en/FLfRdq2bIyoOdKGnlUOGj2M/1FxRJBYI4=
Subject key identifier:   A7:C2:02:CB:7E:62:50:6F:EF:B0:2E:D9:3B:94:4E:F1:FE:28:A1:2C
Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
Certificate issuer:       /CN=dc4e453affe895b6452b84027437c5c00fd37067
Certificate serial:       019E2FCD4377A7D5D2B4D657B356F726BE04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft
Manifest number:          1929
Signing time:             Sat 16 May 2026 08:00:41 +0000
Manifest this update:     Sat 16 May 2026 08:00:41 +0000
Manifest next update:     Sun 17 May 2026 08:00:41 +0000
Files and hashes:         1: 3E5FOv_olbZFK4QCdDfFwA_TcGc.crl (hash: o+gkjLGroSYpnnvFOIMiVUFdOjZzW+Ia2UURJ6AuE4w=)
                          2: 4SNFp6iYtBMi4zD2eo7t1Q8ufcI.roa (hash: 0dpWI2PXhik+N7S7lz0H4gx+qXCOtuPMoys6zPW4AAE=)
                          3: EB7WqqxXodos-Bnfwa3U1V_EWyk.roa (hash: mUbVMHBEzz3yLOktyc5V1n031Bt7w2ivVLElxz97H04=)
                          4: LR-gOJTdtI8bzPduiQVCYwkMZFA.roa (hash: bVwiIJwDd0Bu+uS+HlMtLfyphNhcg2aLcVX98Jb8Wj8=)
                          5: Ub8GbvDA35aTIzVecXGmXtHsXEc.roa (hash: elt6C1OboYliVZXwfhYgZV3fxNGiHeY3wGhmbW2ynL4=)
                          6: yW8TWZLrtFaFqiAuiN0m0gWF_fI.roa (hash: 9L+sA1TE/tnPgnqt0eplM+GhjWLDs24P3usFFtq4BoU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:cd:43:77:a7:d5:d2:b4:d6:57:b3:56:f7:26:be:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067
        Validity
            Not Before: May 16 08:00:41 2026 GMT
            Not After : May 17 08:00:41 2026 GMT
        Subject: CN=a7c202cb7e62506fefb02ed93b944ef1fe28a12c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e0:e1:4c:0d:7f:79:fc:dc:0a:4d:c9:27:f2:
                    81:65:40:f7:80:aa:dc:23:79:27:35:23:a2:5f:8a:
                    7f:9c:cc:bb:68:bc:12:9d:6f:a3:77:f4:b7:a9:c7:
                    6e:94:83:d3:6b:4e:4b:12:ed:9a:ab:cc:2a:f3:6a:
                    5c:59:f6:51:9a:8c:a1:94:a9:71:1c:0e:e8:b4:69:
                    34:cd:41:d6:c9:fe:7d:93:fe:92:40:45:17:29:15:
                    a3:94:1f:6b:d3:9b:6b:89:2d:af:f2:9c:5b:58:0c:
                    17:8f:f2:d2:18:b2:34:02:dc:1f:5c:72:3e:3f:0a:
                    63:d8:d1:09:60:eb:19:e7:f7:49:60:f0:c8:5f:2c:
                    01:27:f6:8c:de:52:9c:4d:cb:98:4d:94:6d:b0:47:
                    99:b1:52:3f:9a:94:c9:4e:dd:8e:ef:e9:13:55:66:
                    1d:0e:df:39:1e:52:24:3a:3d:77:86:22:e7:c0:05:
                    37:ce:9f:0b:04:46:68:ae:b8:84:83:cc:43:bc:a2:
                    67:06:65:72:15:f5:cb:72:25:57:df:57:fc:57:79:
                    a7:83:c2:07:f8:8b:08:a2:d4:6c:95:e1:f6:d2:1c:
                    46:6a:bb:fc:ff:a2:44:88:f3:43:4d:cb:49:a3:8c:
                    ed:fd:1b:2a:b9:07:ff:ca:69:7c:7f:80:50:14:04:
                    93:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C2:02:CB:7E:62:50:6F:EF:B0:2E:D9:3B:94:4E:F1:FE:28:A1:2C
            X509v3 Authority Key Identifier:
                keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:0d:94:bc:d6:c3:4f:1d:c3:77:1b:a4:f3:1e:99:37:82:cc:
         48:9a:16:07:c4:be:8a:1f:e5:5e:62:cb:9c:05:87:b8:55:d1:
         bb:89:f9:b6:11:48:53:96:67:61:58:2a:57:58:41:de:85:e4:
         23:88:73:16:14:25:85:00:df:93:28:ce:68:93:81:3f:2e:7f:
         df:e1:36:2a:09:70:ba:5c:f1:c9:1a:8f:2d:01:c3:b7:56:d9:
         b3:b6:e1:11:ce:a6:c1:79:2a:84:84:00:15:44:75:b7:cf:81:
         ec:2d:b9:87:f1:10:5f:b9:a9:89:c8:8f:fb:10:88:6d:47:89:
         2d:e8:7d:c0:ac:5c:75:6c:94:f2:6a:66:77:63:70:6e:02:da:
         31:c7:0e:5b:f5:d0:17:3f:14:1a:ee:d1:2c:13:9c:c9:ff:5b:
         a1:09:15:88:18:b3:1c:0f:4b:44:93:99:98:02:fb:6b:62:46:
         3a:4a:2e:e6:8a:b6:9f:96:7a:46:6f:48:f6:57:12:c7:34:ba:
         3a:39:13:9c:e0:00:0d:12:34:3b:d9:56:7b:ff:da:33:25:12:
         84:e5:76:50:a6:2a:14:c2:69:e7:21:91:4a:99:88:f8:67:f9:
         d0:05:40:61:9f:50:ff:64:a8:94:d7:fa:86:4c:81:56:98:0e:
         cb:ce:6a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:25 2026 by rpki-client