Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
File:                     45Dy7gpwvK7-AZWj2LN300KXqUM.mft (raw, json)
Hash identifier:          iE9MT75N1TxeW7+SVZXGwsszjFERW+wf91yvNM17V6g=
Subject key identifier:   05:04:0D:11:F9:C2:34:E2:8F:1A:EB:A2:BF:7B:D6:18:8A:20:52:38
Authority key identifier: E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43
Certificate issuer:       /CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943
Certificate serial:       019E30A90147EEEBB7901CE8EBD79381B37A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
Manifest number:          1911
Signing time:             Sat 16 May 2026 12:00:42 +0000
Manifest this update:     Sat 16 May 2026 12:00:42 +0000
Manifest next update:     Sun 17 May 2026 12:00:42 +0000
Files and hashes:         1: 45Dy7gpwvK7-AZWj2LN300KXqUM.crl (hash: wIluSO/AQ8ssOgu1JGW/iVw+kdM/+nnQP5m/2IVTuTU=)
                          2: acUHfVCy5j8WfhXBkKrvtIIZ6u4.roa (hash: A0ZoDSyXeoOjiHDBQQXTi7qUdiWgsEQgspWWgoPcjbU=)
                          3: mY4iCleNhrzf8aXMLmHiJ52ay4A.roa (hash: XzaZ+/TpO1ZESBFBMtwiRlJAL9YVrFYukINjmUNi5KQ=)
                          4: mflNPwnPi4f5wBAod8r23N6IFVQ.roa (hash: eCHOBETtrQl/yFYeuqvktndVXTn5G2F5otfDMkWdMXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:01:47:ee:eb:b7:90:1c:e8:eb:d7:93:81:b3:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943
        Validity
            Not Before: May 16 12:00:42 2026 GMT
            Not After : May 17 12:00:42 2026 GMT
        Subject: CN=05040d11f9c234e28f1aeba2bf7bd6188a205238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d1:d4:3a:dd:b4:55:88:b6:ab:9e:6a:d2:5b:
                    90:1d:a4:2d:5c:7d:0c:3f:f2:e7:d9:eb:b1:8d:37:
                    71:f9:43:92:da:98:11:b8:5e:81:f0:a0:85:5d:6d:
                    30:6b:75:cd:ed:b4:4c:f3:ac:ec:99:ea:4e:e0:b5:
                    2a:00:82:7a:33:b5:99:3f:bf:89:40:12:5f:27:05:
                    d0:49:5e:bf:87:db:63:83:75:52:ec:db:74:1a:56:
                    40:f7:19:77:05:61:94:54:b7:22:48:78:c2:4c:b8:
                    03:e6:c5:df:b2:e5:ef:7f:84:89:a5:6b:a2:b1:82:
                    bb:9f:77:81:60:90:b7:f2:de:52:66:fd:ee:32:03:
                    e9:ee:07:53:c5:0a:8d:40:b4:a2:ea:ef:53:5d:35:
                    c3:6c:b1:61:0d:dc:3f:dc:30:3c:5f:0e:ec:76:81:
                    b3:8e:37:74:f7:68:e3:fe:23:49:49:3d:5c:f6:42:
                    77:d8:ca:9e:b0:72:7b:2e:1f:c4:39:2f:77:71:3b:
                    76:40:b5:4a:58:2c:f7:ee:bf:c8:62:c6:14:30:57:
                    8d:16:6e:3e:bd:48:2c:0d:43:6c:0f:b8:f9:01:77:
                    4c:1e:a2:10:3d:3a:9f:87:59:f6:73:1d:68:43:67:
                    a3:7a:50:2e:bd:6f:ea:84:81:39:7b:af:0c:1b:ff:
                    0b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:04:0D:11:F9:C2:34:E2:8F:1A:EB:A2:BF:7B:D6:18:8A:20:52:38
            X509v3 Authority Key Identifier:
                keyid:E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:c2:ec:98:5f:32:cd:f2:ce:a2:2c:32:d0:46:7d:15:aa:1c:
         f9:01:86:c1:e0:e3:d7:dc:83:08:3d:0c:ff:29:c0:fb:5a:b6:
         a5:ff:92:02:7e:22:e9:6d:3d:d3:ed:1b:f4:9e:bb:79:75:ec:
         a0:7f:e3:e3:df:c3:dd:81:e7:b6:8e:5a:99:9b:d0:38:5d:45:
         b5:94:c3:a0:d7:dd:8b:0c:9f:9a:b6:01:73:e3:1a:28:0b:ca:
         1d:fe:10:96:55:13:b8:93:da:50:d8:8e:4f:e5:17:79:4b:f0:
         76:11:d2:0d:f9:14:9b:18:13:a7:06:48:32:ac:06:30:47:85:
         45:a2:65:27:f4:85:64:d0:ed:43:d8:cb:2d:8f:b0:ec:09:f4:
         25:df:7e:a9:3e:6c:4f:18:79:61:cc:0b:0b:f3:4c:ca:8c:49:
         b8:e7:49:0f:49:5d:ad:29:25:28:cc:d6:1a:ea:bd:aa:2c:b7:
         50:66:b0:59:50:38:56:9c:f2:2a:70:a1:78:c2:1b:71:08:da:
         a4:6a:8f:e3:b2:a8:ba:2d:9e:d1:19:83:5d:17:57:ae:4d:0a:
         e7:a4:00:7b:af:2e:34:94:f3:32:f6:d8:3d:3d:4b:aa:78:7b:
         b6:e0:7a:1c:55:29:84:a4:c1:32:1b:05:2e:44:47:52:a2:92:
         f3:aa:d2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:59 2026 by rpki-client