Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
File:                     fhFniG2oFSRDG78u-wVykUtobrw.mft (raw, json)
Hash identifier:          UUbR0joAXW4F0KXS/LEcjT+ET9voMN3psMAX3Cb3fkA=
Subject key identifier:   B4:B3:4E:AB:05:9A:33:FC:63:E3:C3:D0:B2:1F:DD:B8:D7:8D:9A:29
Authority key identifier: 7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
Certificate issuer:       /CN=7e1167886da81524431bbf2efb0572914b686ebc
Certificate serial:       019E2D3A8B9ACA40E0069EF4460048379094
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
Manifest number:          0F05
Signing time:             Fri 15 May 2026 20:01:11 +0000
Manifest this update:     Fri 15 May 2026 20:01:11 +0000
Manifest next update:     Sat 16 May 2026 20:01:11 +0000
Files and hashes:         1: 6TdIaoE-7jQiTNh_dWHlpwe6UDo.roa (hash: j4t4I6cY/9eHSVrCrZ3KgotxYKtqwlRdd6z9B4fKbI4=)
                          2: 8jiMmtjBP-Nl5CilvW2gvoNo4Kk.roa (hash: wwioWnWaBsWC9aXvqkrOolVE9wvD6iqSMIbgZIUy8Z0=)
                          3: M-CNQ4sKZCkmxmSMpP77FW0ZRzE.roa (hash: UdJnYqAMGHmI8rbxklRX18DI3O/ycqsbsTsYHZeAV1g=)
                          4: bPn6Pnrnq_fR0whtvig8NC0wE0s.roa (hash: h+p2mlfebNvV+IBAlzDzoCLea72ZuA/UCOZBu/ku9aE=)
                          5: fhFniG2oFSRDG78u-wVykUtobrw.crl (hash: ilmPOBtB8n5FuSpGNqxOvWVw7v0AvKloOcSgRRSi3co=)
                          6: ywfKrP4cRTy2QlVvbLFd6cmyt18.roa (hash: Gmr+SV2YTd76CuhRcbMnXPX7jhYpfpofEYm1FZomnvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 20:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2d:3a:8b:9a:ca:40:e0:06:9e:f4:46:00:48:37:90:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e1167886da81524431bbf2efb0572914b686ebc
        Validity
            Not Before: May 15 20:01:11 2026 GMT
            Not After : May 16 20:01:11 2026 GMT
        Subject: CN=b4b34eab059a33fc63e3c3d0b21fddb8d78d9a29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f7:12:71:80:26:8c:fd:36:ed:34:5c:f8:f2:
                    40:91:68:17:4b:ee:c2:9d:59:2e:c4:aa:e7:27:c2:
                    47:03:24:ae:2c:89:ed:13:29:54:5c:50:33:02:68:
                    6a:0c:02:8b:dc:7a:dd:90:bf:ea:8b:83:0c:ef:ab:
                    e2:fc:23:cf:d1:90:8f:d3:5d:14:97:56:71:4c:7a:
                    12:22:df:2d:10:69:f9:ed:13:fe:8f:ec:63:95:7d:
                    91:13:d9:bb:cb:d2:fb:4f:41:69:ad:df:b7:57:b5:
                    e5:96:54:18:ff:fb:88:84:f4:9a:38:ec:1d:06:44:
                    39:40:fb:e1:a1:ce:1a:ed:ac:9b:69:50:df:f2:88:
                    77:2e:75:ed:6e:8f:31:1b:e5:6a:bd:dc:dd:50:fc:
                    e6:e2:2c:2f:0e:75:cc:8b:fc:44:c3:8f:06:41:4f:
                    c1:e6:3e:5a:c7:09:0c:18:f0:4a:1e:ce:b8:a6:48:
                    31:30:7a:df:63:66:4c:d5:5f:f2:5f:13:40:06:6a:
                    4d:b1:67:9b:1a:59:dd:fb:c0:2e:00:d4:89:2c:df:
                    49:7a:4c:21:54:be:05:4c:a0:36:f4:51:64:e2:88:
                    30:c2:88:e8:17:dd:93:ce:5d:cc:c6:c8:c4:0f:66:
                    fd:da:25:2a:46:6d:b9:3c:1b:57:2e:5d:96:e9:bf:
                    67:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B3:4E:AB:05:9A:33:FC:63:E3:C3:D0:B2:1F:DD:B8:D7:8D:9A:29
            X509v3 Authority Key Identifier:
                keyid:7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:47:ff:75:e5:7e:05:ed:43:56:b2:27:59:82:f5:1e:aa:0b:
         22:32:f1:f1:b7:d5:4e:13:74:02:f3:84:12:97:39:15:f6:c1:
         7c:bb:1d:84:25:51:dd:cf:af:18:63:6f:3e:4c:f2:f4:5d:be:
         6f:22:a4:bd:27:63:9e:bc:6f:41:39:e1:b1:57:3f:27:96:c7:
         bf:c8:46:53:79:44:1c:cf:47:56:4f:67:58:a1:c8:91:15:b8:
         70:61:60:63:95:14:3f:16:70:94:63:d4:49:26:73:42:11:b7:
         79:72:d6:c1:a1:66:83:49:1f:cc:df:0e:f4:b8:6b:22:89:e3:
         c1:5b:73:67:fa:04:7d:e5:e2:e3:82:64:06:00:9d:30:e4:c9:
         64:75:bc:77:a7:bd:a1:78:be:1f:1e:2d:79:2b:9a:8d:b8:d9:
         a1:bb:75:0d:ab:b5:7d:4f:52:71:3c:d1:d4:57:41:ca:41:86:
         ef:e0:74:04:61:81:22:bb:0e:4e:bc:11:7f:be:1f:60:f9:48:
         9f:16:cb:43:13:47:8a:19:a9:c0:a5:60:f3:8a:f8:bb:38:f6:
         28:67:77:48:e2:0e:54:3b:17:02:59:96:8b:a2:ff:5c:6f:5e:
         6b:8c:10:1b:e6:a0:18:84:6d:d4:e0:2c:76:46:de:b8:cd:6a:
         7b:38:d5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 02:32:09 2026 by rpki-client