Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
File:                     tDJYoYz00SKOXHkHDfpjMRaDIMU.mft (raw, json)
Hash identifier:          DuK5XWMjwYU1INK81BH6+zj5L3EQlPik6/fdZgxsmwU=
Subject key identifier:   77:0A:75:EA:0E:5C:51:43:1A:A7:75:3C:EC:C9:D5:1F:73:94:7C:3A
Authority key identifier: B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5
Certificate issuer:       /CN=b43258a18cf4d1228e5c79070dfa6331168320c5
Certificate serial:       019DECA440EBDB6A86C08C3DE4A7F21AB97D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
Manifest number:          1730
Signing time:             Sun 03 May 2026 07:01:20 +0000
Manifest this update:     Sun 03 May 2026 07:01:20 +0000
Manifest next update:     Mon 04 May 2026 07:01:20 +0000
Files and hashes:         1: LBEwWg6NXwV0Qivix1KpxT3aiNU.roa (hash: NAmrPdbUkUwZLyDdKu29iu1NmoDceqKiDehZJJ6AYqk=)
                          2: tDJYoYz00SKOXHkHDfpjMRaDIMU.crl (hash: qCHkDNP/uJThGv1NPLn6MubiaIlQYCGhibyf9M6NeRQ=)
                          3: u3rQ39mTeV2kE1STzKrih9_L758.roa (hash: KWfkHmC+Pf41EAOenIiA1l0ufOFeet991JgGZvHoQlg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 May 2026 07:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ec:a4:40:eb:db:6a:86:c0:8c:3d:e4:a7:f2:1a:b9:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b43258a18cf4d1228e5c79070dfa6331168320c5
        Validity
            Not Before: May  3 07:01:20 2026 GMT
            Not After : May  4 07:01:20 2026 GMT
        Subject: CN=770a75ea0e5c51431aa7753cecc9d51f73947c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fc:8f:0a:fe:a3:b8:43:1c:51:c1:2e:82:30:
                    5d:a8:ff:1a:cf:97:f8:0d:26:f8:b8:4e:11:c0:ad:
                    6c:ed:93:31:a1:c6:10:c6:12:e1:ee:28:7b:8a:16:
                    4c:ed:7f:b1:a9:cb:6e:2d:05:31:d5:cf:02:de:40:
                    fa:71:45:c2:44:0e:0a:5c:e8:9a:05:fb:25:f1:dd:
                    ef:4a:ad:74:75:de:d7:aa:70:01:6c:97:0a:cf:ad:
                    81:a2:4c:65:e5:93:51:bf:75:c4:9a:73:f0:bf:b9:
                    36:b0:8b:c7:39:00:90:c6:34:32:3f:95:8f:65:d3:
                    16:aa:32:d7:ad:c8:a8:a1:48:4f:92:3b:58:43:68:
                    0c:fb:34:85:a0:ec:0b:24:cd:a9:a5:7e:05:33:c1:
                    bd:8b:b5:b4:ff:4c:39:45:a9:9b:de:2f:dc:45:2a:
                    0e:16:9e:b5:d1:e3:c2:86:77:00:55:26:f1:30:1c:
                    32:ba:12:23:c8:23:c5:59:2c:55:cf:d4:46:10:b8:
                    dd:bb:9f:ae:8a:77:f2:e0:3f:e3:25:e4:4f:f8:cd:
                    ea:a3:f9:a5:e3:33:d8:94:e6:ae:9f:5c:b0:86:f0:
                    63:e0:8c:0d:46:71:c0:e8:8f:a1:5f:3f:42:5c:ab:
                    7b:80:d1:6a:fc:80:3a:86:12:ad:0c:4b:6b:d2:d9:
                    eb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:0A:75:EA:0E:5C:51:43:1A:A7:75:3C:EC:C9:D5:1F:73:94:7C:3A
            X509v3 Authority Key Identifier:
                keyid:B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:70:51:a5:89:95:87:bd:4b:e8:43:25:2c:cf:74:9f:a8:9c:
         e9:a1:60:26:f1:af:1e:a4:c2:26:ae:0d:09:3b:c6:7d:50:b2:
         48:8b:ce:c7:b4:67:3e:dd:f4:9a:f6:0a:48:0b:b9:12:d5:cb:
         2b:00:aa:c0:ea:96:b1:b3:f5:a6:ba:58:6e:e3:69:bd:53:7b:
         ef:df:8d:5c:89:56:ec:d1:a3:cf:79:62:2e:be:1a:e4:69:1d:
         04:a0:93:ea:7f:ea:47:61:07:1c:43:64:e9:97:9b:95:89:3f:
         a5:79:3f:dc:9e:2a:28:27:f4:0e:ae:d2:f3:a4:93:65:f4:46:
         76:17:20:e4:d3:41:70:3e:ac:38:71:28:75:48:ee:cb:0c:cc:
         7d:83:7d:6c:f1:28:2c:81:db:80:e7:7c:4e:38:00:9b:01:2b:
         8c:23:1b:9d:1f:95:76:b9:cd:af:db:3f:2c:2b:53:b4:6e:b8:
         6f:7c:b6:47:c1:1c:90:d3:57:9e:d5:f2:1a:43:05:d0:82:55:
         9e:a0:0d:fc:e2:ec:79:db:02:1f:92:c8:1b:88:f1:be:b1:ba:
         1d:e9:72:22:31:0e:1d:0e:75:02:9b:c1:d9:44:6b:37:26:68:
         1f:69:d9:0e:42:e4:e3:c6:6f:31:38:7f:af:30:86:e1:fa:d3:
         55:67:b2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:08:01 2026 by rpki-client