Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft
File:                     RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft (raw, json)
Hash identifier:          8NJpoSMSd3r35PA1o0oSX/6Lwp/l8bm1t2RPnZxCyQw=
Subject key identifier:   66:3A:AB:A7:FD:47:C8:9F:07:F8:45:E2:74:3F:15:2C:5D:16:79:87
Authority key identifier: 44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8
Certificate issuer:       /CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
Certificate serial:       019E3229AF723D5C856056E20B3636641775
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft
Manifest number:          191D
Signing time:             Sat 16 May 2026 19:00:53 +0000
Manifest this update:     Sat 16 May 2026 19:00:53 +0000
Manifest next update:     Sun 17 May 2026 19:00:53 +0000
Files and hashes:         1: 8fhYtKpVakt0uV4ZHUTjU4fIbFw.roa (hash: BUVZIDRFer90z5xzSe7ir9WDKqZ/aWAGvB26nEQK32A=)
                          2: RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl (hash: lEu8gLJPMc04MMOwKxImLOPPzCMQ36wWu9eZKP0YrRA=)
                          3: TCAQGPQ0BZ8ud4Gm8UguZYpuzms.roa (hash: +Kmb6BumaUGSfi8TJeQxjsoBcMk+3PlRsvjbV5UF/c8=)
                          4: _xGsVJQeBzbBLpCkFLNfOvZbW4U.roa (hash: Y4500/iUXADzSRR+OyCO6ojWBN6EGiCPjwgXlWxzhhA=)
                          5: vcbEzvx1zie9dwpRKaaVwvTw4d4.roa (hash: s7dhy3Ht7fPj270WhKJcSmby6GyMwW0TOLWlYMocDDE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:29:af:72:3d:5c:85:60:56:e2:0b:36:36:64:17:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
        Validity
            Not Before: May 16 19:00:53 2026 GMT
            Not After : May 17 19:00:53 2026 GMT
        Subject: CN=663aaba7fd47c89f07f845e2743f152c5d167987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9a:2f:37:2b:0a:84:a3:0d:ec:d6:46:a9:91:
                    2c:b9:64:a8:20:53:52:31:40:94:1f:63:2a:64:73:
                    58:6c:95:d5:06:9c:19:41:94:85:93:3f:e5:5b:99:
                    54:0d:90:b2:54:f4:57:b2:98:57:b8:0a:22:8b:7a:
                    0f:8f:8e:54:db:6e:e3:10:b7:11:54:f4:0b:3d:88:
                    ab:e0:f6:be:9e:aa:ec:20:f2:8e:64:10:5e:d4:76:
                    f2:9a:94:26:a1:b2:62:e7:1a:9c:dd:67:a2:39:7a:
                    1e:b9:08:e3:52:9e:93:85:66:74:02:3c:bb:78:2b:
                    e0:82:f7:ad:53:16:ec:be:ee:b8:2f:15:99:82:13:
                    17:6f:99:60:36:7a:4e:23:3c:1f:ce:14:d6:d3:ca:
                    d6:71:60:9f:e5:3b:66:88:0c:91:9d:e0:5e:d9:34:
                    87:d5:11:e5:93:6c:f3:ae:0e:49:05:26:36:0f:07:
                    a8:5e:44:52:b9:0f:e9:92:88:42:f3:40:d9:ec:24:
                    69:67:f2:8b:bc:11:da:e5:a0:c7:9c:98:36:ed:37:
                    a5:6e:e3:5c:69:0a:73:b2:41:83:67:73:5c:70:93:
                    5a:63:c4:d7:d0:d9:c6:58:c2:60:bf:a4:54:dc:2d:
                    2e:cf:98:8e:6c:8c:73:c4:a7:46:57:e3:ca:d6:91:
                    56:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:3A:AB:A7:FD:47:C8:9F:07:F8:45:E2:74:3F:15:2C:5D:16:79:87
            X509v3 Authority Key Identifier:
                keyid:44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:52:f6:b7:d5:e0:4e:d2:8e:f1:3e:df:3d:6f:b4:5a:0a:a5:
         d5:95:9b:f6:a9:38:77:63:49:b5:88:00:c6:5b:50:c7:9f:4e:
         fc:ed:ed:94:4f:56:d0:3b:ba:c2:da:c4:3d:c2:3b:ea:9c:dc:
         f4:49:b8:3c:b1:48:3c:8b:9f:f5:f3:72:f0:cd:3c:19:24:21:
         be:7d:19:91:da:97:cf:12:59:96:5e:1e:ef:28:2f:7f:79:0f:
         ee:46:96:11:6b:36:4e:31:3e:35:e0:ef:2c:9a:48:9c:15:6e:
         ec:d6:13:33:89:c8:82:16:6b:3d:55:3e:d3:e0:a2:e0:5b:ec:
         46:45:0d:d6:65:7b:4c:a6:19:70:c2:e5:ab:7d:33:f4:cf:3b:
         c0:1c:36:97:ae:7d:bb:99:c2:af:92:74:56:9f:86:53:d8:d6:
         9b:4e:7a:3f:28:6b:e5:98:87:1b:1e:e3:4f:f0:c7:af:6d:23:
         28:69:be:2b:59:01:7e:de:02:38:94:eb:3a:e9:db:fd:9a:78:
         ac:40:c1:32:64:00:fe:9c:0e:90:98:2c:e0:57:f4:53:16:3b:
         9f:92:d9:4d:15:27:82:21:d8:44:57:13:91:80:2d:d2:39:c4:
         49:d8:1a:7f:92:18:b0:5a:20:fc:6e:19:4c:bd:7d:3b:54:2a:
         59:44:cf:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:01:09 2026 by rpki-client