Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
File:                     R-lMy3tgHaDKCUafYPZTZA_tjBw.mft (raw, json)
Hash identifier:          3XQPSiOxZtiGFNU03eynyzjrxORVQjAlUtrJJt57MCA=
Subject key identifier:   44:C2:09:FA:CC:B1:EB:F5:36:F1:BF:68:EA:CA:09:25:0B:DA:83:63
Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
Certificate issuer:       /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Certificate serial:       019E2B4CA654D82A55B79E28B83AA8245717
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
Manifest number:          1921
Signing time:             Fri 15 May 2026 11:01:43 +0000
Manifest this update:     Fri 15 May 2026 11:01:43 +0000
Manifest next update:     Sat 16 May 2026 11:01:43 +0000
Files and hashes:         1: AFEWredyAjvqwTGptAJ8OUVB7P4.roa (hash: 2m1v01Idcr237fiGD0VAWcDdfdXlJYmgXEBaQhLhLnM=)
                          2: NDSds1zweD0ntatyUwleIAzeIJM.roa (hash: +ZrwYT4v0e9jZWWQ6oW4TJF+kc5mZHurMYfZvW1kcaw=)
                          3: NG0J62IT4TEYyBuMqKM6OpYG_0Q.roa (hash: 0M3OIOezZ3BNzW0tJgVErTfGfdQ/cL0eGWBKnFHK6bA=)
                          4: R-lMy3tgHaDKCUafYPZTZA_tjBw.crl (hash: eBXSkendAi86MJ6P9p5rc/z4xvAg0WiKugONkKKYsCE=)
                          5: c4vO0T2N1wxzMzxlgtz0m8cOMRE.roa (hash: 8oVfciD817bSEs2qpkUByGlM63u7F5Is6kgsu7Ks33U=)
                          6: eUCYKUszQzKLl5y0TD_e2TpUs_M.roa (hash: sXPTK8NFfl134JTfg8VQ0nOUGTnLwDMaXmy5yBYZ7ag=)
                          7: ydzz4qC4IHTCEdAs_sR3u8QA-U0.roa (hash: BxYGaauFkfj9FqWYAmJGU+STO4UuDXKQhKUEiwoFjr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2b:4c:a6:54:d8:2a:55:b7:9e:28:b8:3a:a8:24:57:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
        Validity
            Not Before: May 15 11:01:43 2026 GMT
            Not After : May 16 11:01:43 2026 GMT
        Subject: CN=44c209faccb1ebf536f1bf68eaca09250bda8363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:70:72:8d:39:44:37:a4:e0:4c:70:78:a7:2c:
                    56:6d:8a:2f:51:a3:66:fb:4c:ae:57:20:7c:f0:23:
                    fb:6f:cb:b1:55:e6:d3:4c:8c:48:d0:5e:b6:8e:19:
                    17:46:9a:17:30:8f:92:12:80:00:0f:58:ed:97:59:
                    8e:f6:55:e9:c1:dc:93:a5:7d:f3:bd:89:bd:fe:a7:
                    44:e1:3a:d1:6f:46:ea:aa:51:12:30:9a:b5:03:ef:
                    e3:88:29:c8:58:db:16:d2:2e:9e:c0:1f:f9:26:d4:
                    c9:cf:af:60:51:8d:91:d4:84:74:75:c6:2a:90:1c:
                    b5:e4:43:90:92:4c:23:c8:f0:6f:b9:f1:0e:ad:fa:
                    a1:e2:43:d9:6a:64:7b:69:6b:8f:5f:ae:87:36:57:
                    ae:1f:30:93:12:91:e1:f1:0e:d7:3f:a4:fe:29:2c:
                    0b:c2:9e:0c:f3:72:9a:dd:47:b2:53:6f:4e:37:68:
                    03:03:ad:5b:aa:55:c8:04:df:19:f9:cd:46:3a:02:
                    40:40:16:b8:a6:95:3d:62:ea:0f:b9:70:f1:6f:ca:
                    6e:1c:26:07:e2:51:c0:0b:a5:1f:45:2a:ce:f7:eb:
                    9b:70:d3:a4:03:0d:13:d9:d7:23:3b:6d:d7:2a:b9:
                    bf:fa:e6:f0:2b:a7:b1:25:dc:0b:29:70:ca:34:51:
                    b1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C2:09:FA:CC:B1:EB:F5:36:F1:BF:68:EA:CA:09:25:0B:DA:83:63
            X509v3 Authority Key Identifier:
                keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:5e:66:70:c4:00:27:17:52:1e:7c:4e:92:5f:d8:db:35:05:
         f9:d4:84:25:57:19:c6:61:e2:69:0e:28:71:24:9f:f5:bb:45:
         b2:33:9b:7f:ad:0f:58:a8:6c:d8:d6:91:6a:71:e4:f9:28:8d:
         03:88:7a:fa:20:ec:37:e5:f3:82:4a:91:82:79:55:32:f7:b9:
         fb:c5:dd:6b:f5:0e:51:06:5e:bb:79:92:21:e2:bc:d7:86:44:
         37:42:64:1f:10:31:6e:a3:30:b5:ce:9f:aa:a8:c9:24:5e:59:
         33:ee:05:84:59:b5:ad:6d:ab:d3:34:83:05:30:42:2f:84:db:
         18:b0:aa:44:7b:10:73:0c:ce:7e:fb:a8:6d:5a:dd:ec:ea:75:
         75:38:e1:fc:11:97:df:da:3f:97:1a:4b:a2:e1:81:0b:d5:64:
         11:89:1d:1c:4c:88:52:a3:35:77:ae:f7:8d:79:bc:81:f0:94:
         74:4b:ca:56:47:78:4b:04:fc:5e:e0:75:f1:18:5c:c0:34:5f:
         16:f0:a0:bc:e8:19:a7:62:2b:24:03:53:02:89:a5:a8:63:a6:
         e1:0f:03:13:53:32:51:b0:91:0b:1c:68:05:b5:20:c0:fb:4d:
         b8:e1:bb:01:47:af:8f:7a:e2:a0:75:d9:37:c5:98:1a:c3:a5:
         b5:2b:aa:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:31:04 2026 by rpki-client