Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft
File:                     RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft (raw, json)
Hash identifier:          muVHkJPkvcjx1As2XxWqSKrzklUzQ2s+Qn9vBWUMKsQ=
Subject key identifier:   48:AF:71:88:F6:B1:A6:9D:F8:F0:E7:D7:45:2D:83:72:F1:E3:9E:A2
Authority key identifier: 46:27:67:A7:37:5F:1A:C5:46:69:1A:AF:2A:51:1F:BB:62:77:03:1D
Certificate issuer:       /CN=462767a7375f1ac546691aaf2a511fbb6277031d
Certificate serial:       019E2994F683EFAE6C3A723DCA850507A2DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RidnpzdfGsVGaRqvKlEfu2J3Ax0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft
Manifest number:          018D
Signing time:             Fri 15 May 2026 03:01:28 +0000
Manifest this update:     Fri 15 May 2026 03:01:28 +0000
Manifest next update:     Sat 16 May 2026 03:01:28 +0000
Files and hashes:         1: 0ppkgAkMVUZmtvxiis_JaRg_jKc.roa (hash: hmBjjzY/GLh0BaP+YN19dWeqC0F3ldt8pYexHB8bxW0=)
                          2: RidnpzdfGsVGaRqvKlEfu2J3Ax0.crl (hash: tPtwo/oUqE14VtXBUyOwFgkFQL6Mns5p7mWTNM/zlbY=)
                          3: gFOGmZRlX2Va7a4eZJorJSldfM0.asa (hash: iWV8IrqVD+U7+lJQU0PeeR9WILJwhPNuOe7C9EI2EN0=)
                          4: hvFmobLJgv_FtphUoy5jADPJJnc.roa (hash: jnuVvbpAgeJ1NUOXj3up5SgN82P8AgWr5+BqvtU3HaY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RidnpzdfGsVGaRqvKlEfu2J3Ax0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:94:f6:83:ef:ae:6c:3a:72:3d:ca:85:05:07:a2:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=462767a7375f1ac546691aaf2a511fbb6277031d
        Validity
            Not Before: May 15 03:01:28 2026 GMT
            Not After : May 16 03:01:28 2026 GMT
        Subject: CN=48af7188f6b1a69df8f0e7d7452d8372f1e39ea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cd:4b:c1:e1:ae:75:86:03:89:34:39:6d:05:
                    ee:bf:8b:be:19:a5:59:78:f8:d6:3d:61:f3:58:40:
                    76:da:a7:cb:d0:27:01:62:34:5d:b4:c7:28:c2:a5:
                    77:95:8b:09:0e:1c:d0:43:63:25:42:da:2c:6f:12:
                    c2:e3:8c:52:4b:2e:03:93:5f:e4:e0:4c:9a:2d:b4:
                    8f:cf:60:c0:25:66:bf:a4:2f:99:99:5c:a5:9b:ad:
                    96:38:53:33:a6:55:db:50:d5:05:9c:94:f1:81:03:
                    0c:14:19:71:8e:0b:40:2c:11:c4:14:6c:eb:dd:61:
                    8a:11:ed:1b:ff:88:81:76:dd:d1:84:44:24:68:b0:
                    99:a3:4b:4b:c1:a7:87:9c:18:7c:bc:ae:14:e9:3f:
                    ab:2c:6d:54:d3:89:75:d8:1b:1c:91:ac:29:ef:d8:
                    de:a3:5f:64:63:ee:19:e7:f1:34:79:c5:da:6c:f4:
                    16:55:80:7a:94:07:ba:98:b9:7e:01:9c:9f:3d:9f:
                    c9:85:1f:0d:6a:60:8e:ac:09:82:76:80:db:7e:4e:
                    23:c8:a5:bf:71:1b:60:f1:9a:70:13:48:7f:eb:00:
                    88:c0:4f:8e:d9:6d:54:46:94:b4:a4:c1:42:94:4f:
                    64:0f:4f:4a:09:50:34:4e:d1:10:06:83:9b:a1:48:
                    92:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:AF:71:88:F6:B1:A6:9D:F8:F0:E7:D7:45:2D:83:72:F1:E3:9E:A2
            X509v3 Authority Key Identifier:
                keyid:46:27:67:A7:37:5F:1A:C5:46:69:1A:AF:2A:51:1F:BB:62:77:03:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RidnpzdfGsVGaRqvKlEfu2J3Ax0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:52:20:57:38:2f:af:11:85:2a:76:6d:2d:f0:e9:49:cf:9f:
         df:a5:19:ef:1e:3c:05:f7:96:64:79:1a:95:5a:29:9c:c0:46:
         c8:cd:dd:60:c0:93:d2:e0:4f:50:91:50:45:7a:78:82:40:3e:
         8a:7e:00:66:05:b1:a0:d9:cd:45:58:9f:32:85:0e:c7:1e:b5:
         b8:4e:94:b3:f9:4c:e4:ad:9b:c7:2d:85:e7:05:95:12:0a:8b:
         5b:d5:4f:0c:0c:37:5c:4b:73:19:9b:5a:a0:8d:f6:9b:5e:3b:
         d3:aa:c6:0f:9f:45:43:b9:e5:51:fc:15:83:dc:7e:dc:8a:c5:
         d5:85:5f:d5:d7:28:d2:6c:03:55:dd:68:52:1c:0e:49:d6:81:
         7b:18:9d:39:a7:24:0f:0d:6a:cd:12:a8:29:63:9c:31:03:56:
         e2:4f:a7:37:ed:c8:e2:a8:b3:c6:7c:d8:37:54:05:5e:e8:f7:
         4d:31:51:d4:21:22:ef:fc:4c:3e:96:f0:0d:a5:72:17:13:b0:
         d7:c7:84:6c:7b:4e:16:98:78:4f:7c:2a:9e:65:81:f7:1e:18:
         d3:28:df:5b:de:f2:c4:34:45:d2:17:74:46:0e:7e:32:dc:04:
         14:b2:8b:76:62:eb:62:31:71:ae:2e:f6:60:46:27:ad:a0:6f:
         d0:d2:37:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:01:43 2026 by rpki-client