Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft
File:                     TphKWkt4CLtOoy0xC90H7MlXURM.mft (raw, json)
Hash identifier:          nuMV14l8Fb+iv5DYMB+sBBNtjVq9QmQe5XkVLpnayj8=
Subject key identifier:   8E:4B:B5:69:93:7A:C8:6B:9C:BA:42:BF:1C:79:3B:59:4D:2B:49:C3
Authority key identifier: 4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13
Certificate issuer:       /CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113
Certificate serial:       019E2B834D498CDC4FAA4BB4C3864E645327
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft
Manifest number:          1911
Signing time:             Fri 15 May 2026 12:01:25 +0000
Manifest this update:     Fri 15 May 2026 12:01:25 +0000
Manifest next update:     Sat 16 May 2026 12:01:25 +0000
Files and hashes:         1: JZQkADNXuVdgoYFqB8dJihxFMqw.roa (hash: v2lJ8edD4J6npHAAgT5bKgjMcgZZ0T4RA8FIeChON/I=)
                          2: TphKWkt4CLtOoy0xC90H7MlXURM.crl (hash: cJzSdsORijPLeh8cemDFe0KvqVoppJlrmYdZ7FHcrto=)
                          3: Y4syH6UzjjHJV7JuJcxsHndTEBM.roa (hash: JfIRoO3yinIldqjXRJFR4+uBQRShxpVbREXLMon+oyc=)
                          4: _hFABtqDrMHoR6yceaa4n6HnFLY.roa (hash: RUYxYGOzRDiabfY65jWe0OVYiku/zny/wdDlEwYqRXU=)
                          5: nAZ9GYyRtDryRUMqgM2oxm7bnsw.roa (hash: Curfm/lqD1xZHwiMDPx7ObFQjKY3PZ5mZYaISZH60CE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2b:83:4d:49:8c:dc:4f:aa:4b:b4:c3:86:4e:64:53:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113
        Validity
            Not Before: May 15 12:01:25 2026 GMT
            Not After : May 16 12:01:25 2026 GMT
        Subject: CN=8e4bb569937ac86b9cba42bf1c793b594d2b49c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2d:92:ba:04:57:e3:6d:ff:2e:9c:37:16:26:
                    25:d3:33:e0:ec:f8:cc:c8:7c:ac:1f:3d:a8:73:39:
                    58:f8:52:f0:20:00:97:09:5a:54:cc:ee:8c:37:9c:
                    e8:c1:2e:9f:c6:d8:24:5c:70:ff:3a:8c:1e:82:11:
                    97:70:b8:18:cb:fb:48:96:7a:80:08:94:a7:2a:78:
                    20:80:41:8f:be:e5:18:d5:f1:3e:bd:2f:66:f8:a7:
                    40:74:ba:fc:81:13:ea:64:1d:54:45:52:d9:b0:65:
                    14:bf:10:53:af:ae:c9:db:a6:08:52:3e:50:2c:5e:
                    98:ce:bd:0b:ae:42:72:78:fa:f7:19:54:8b:2f:d8:
                    17:1e:bd:0a:9d:57:d8:1b:12:4e:7f:88:cc:ac:58:
                    d5:c0:34:db:9f:af:7e:a8:3d:10:cd:2f:4a:e5:d2:
                    d8:41:e7:94:49:52:a5:29:b4:49:8f:d2:d5:43:85:
                    4b:df:b3:d8:41:aa:df:39:a2:a4:0f:37:c2:6e:a1:
                    9f:08:45:a5:da:69:fb:3b:16:b0:54:13:f5:1f:d1:
                    51:f6:0d:d1:f6:79:c7:1b:3b:07:b7:99:af:1a:0e:
                    72:0d:19:5f:aa:ee:e9:db:f2:65:d5:77:54:7c:32:
                    de:7c:b9:f5:18:4a:ec:1a:75:39:91:b9:e0:e3:47:
                    fa:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:4B:B5:69:93:7A:C8:6B:9C:BA:42:BF:1C:79:3B:59:4D:2B:49:C3
            X509v3 Authority Key Identifier:
                keyid:4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:fd:d3:79:c3:18:b2:ed:10:d2:e9:2e:39:82:fd:fa:e5:a7:
         34:b5:e9:42:e9:04:85:b3:3d:0d:31:8d:62:52:29:10:51:ee:
         ee:f9:ee:51:36:f3:d0:08:a7:38:5c:0f:43:7a:3e:b5:ba:fa:
         de:87:da:c2:4a:2a:07:a8:57:67:23:7d:28:6a:55:2e:ca:ff:
         0b:23:dc:a1:c2:e7:5a:67:86:3b:ea:27:af:74:04:44:79:a9:
         d8:d5:6f:71:bf:a3:a8:82:1f:49:24:6d:36:99:7b:f9:e5:34:
         3d:63:47:2b:0d:ae:5c:13:e1:56:ae:fe:64:de:da:45:ef:0f:
         cd:d5:16:82:71:3f:f1:6a:ee:75:50:44:f1:8c:c3:70:8b:5c:
         7e:97:ce:57:df:a7:da:4a:a5:37:a8:51:3e:79:84:49:aa:6e:
         5d:aa:7b:52:c6:d3:22:e4:50:3b:0e:3e:ca:a1:d5:6a:ba:30:
         4e:a6:6d:d7:cd:d4:68:de:9e:87:3d:40:a9:cc:89:a5:0c:40:
         95:87:89:4b:27:19:48:db:cd:ec:d0:f3:66:a0:26:c7:3d:41:
         cf:2a:02:b4:1d:83:71:63:8d:4c:3d:62:d8:2b:74:50:b4:6d:
         48:81:12:82:50:a8:46:58:1e:24:21:07:cf:e4:4a:2e:bd:d2:
         3d:f5:dc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 20:45:19 2026 by rpki-client