Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
File:                     PhrhW-husMTZp2TMeo9lmVv4yQ4.mft (raw, json)
Hash identifier:          rwHAG9Ug0GugRpIH5b9VpQNBwjLwVdqTt3l/wpWnKd0=
Subject key identifier:   0A:30:3E:2C:FE:0A:60:AF:DE:55:81:CB:3C:8A:F2:BD:E4:7A:6F:76
Authority key identifier: 3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E
Certificate issuer:       /CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
Certificate serial:       019E2B8302C76DC3D26467894C4AE9A1581C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
Manifest number:          1104
Signing time:             Fri 15 May 2026 12:01:06 +0000
Manifest this update:     Fri 15 May 2026 12:01:06 +0000
Manifest next update:     Sat 16 May 2026 12:01:06 +0000
Files and hashes:         1: 8kiAQtkav2NHfFCJtiBA0ERhqIA.roa (hash: F/EijD7R25vjZwA9wYF9LplNamhupuIHanpPILz4ls0=)
                          2: M_79XQ2SXAKWIFy3HNmBFX2YRgI.roa (hash: PQS0FU2tcc2qRmlqMUo4a/MCLdHlPpwQ5M9eqNDwavA=)
                          3: PhrhW-husMTZp2TMeo9lmVv4yQ4.crl (hash: 8IVPpj4VFGxCo81DRgJhIFTmxMHZ4V4ZaEHNqcCrnG8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2b:83:02:c7:6d:c3:d2:64:67:89:4c:4a:e9:a1:58:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
        Validity
            Not Before: May 15 12:01:06 2026 GMT
            Not After : May 16 12:01:06 2026 GMT
        Subject: CN=0a303e2cfe0a60afde5581cb3c8af2bde47a6f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3a:bc:db:6b:30:4e:8a:b6:28:1f:ed:a2:6b:
                    37:b4:1c:47:21:d8:73:e2:f2:eb:e8:83:9c:33:a5:
                    f9:c2:e5:bb:e1:8f:4e:85:20:c8:6d:b0:47:50:27:
                    a3:c3:5d:72:8d:71:67:fc:f7:c8:d1:1e:1e:4c:a6:
                    ca:4e:d0:4f:d1:de:dd:e7:3e:77:88:08:3f:9f:06:
                    48:51:bd:e7:6b:37:60:8d:11:cc:89:c4:d8:d7:0b:
                    8b:b8:10:72:07:b0:f7:a3:80:35:88:04:be:93:04:
                    2c:4d:93:07:fe:a3:da:b9:97:33:d7:6a:a1:46:19:
                    a3:48:57:34:13:b8:d1:58:a9:5e:e7:0b:e8:49:7c:
                    ba:29:c8:21:84:8f:d4:3a:41:e0:8f:d6:b4:af:fd:
                    3f:78:a3:b5:3b:37:34:10:c5:22:96:f6:99:59:f2:
                    18:2b:22:a1:b0:95:fe:00:86:9b:c6:03:0c:50:46:
                    a1:ea:0f:f4:ff:f3:15:f2:95:18:9a:a8:46:0b:4a:
                    fa:7e:dd:00:14:b8:c7:0a:37:cf:4b:6c:cc:60:4e:
                    c5:e2:df:ab:3a:7a:31:2d:fb:d2:f4:3b:fc:97:b0:
                    d6:62:24:09:d7:83:c7:69:9e:0b:e5:11:71:48:18:
                    c6:aa:c9:76:b8:81:b5:51:91:ef:3a:06:c2:81:04:
                    ef:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:30:3E:2C:FE:0A:60:AF:DE:55:81:CB:3C:8A:F2:BD:E4:7A:6F:76
            X509v3 Authority Key Identifier:
                keyid:3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:9a:36:9b:c6:b3:7a:fe:66:cb:09:ab:1c:87:71:b9:42:37:
         ff:27:ba:0b:a8:23:7a:f7:53:3a:bc:4d:94:3d:6b:f6:c5:98:
         8f:f8:99:bf:43:d4:f6:9b:20:98:77:82:b2:6d:91:16:1b:cb:
         bf:3f:1b:74:f6:3a:6c:21:b9:db:bf:91:5d:80:a9:f5:3b:a9:
         98:8e:6a:bc:ce:51:d9:8b:77:df:5b:d6:d8:38:a3:72:ff:a4:
         46:2c:42:6f:61:3e:a8:44:fd:f9:52:3e:bd:1c:bb:15:72:24:
         c8:48:f6:cc:0d:2c:47:af:d8:17:dc:38:3e:90:ba:b0:6e:ac:
         81:6f:6a:96:bf:65:ea:68:97:36:e0:53:12:33:2e:92:88:95:
         22:ae:6d:84:8e:b3:78:09:1b:bc:be:d2:9f:14:e1:17:4d:53:
         b5:92:71:21:ec:4c:41:0e:35:48:72:2a:ab:42:36:3a:4b:68:
         6a:a7:52:d0:3b:bc:0a:f6:fd:3f:e1:95:0d:cc:de:f7:d2:29:
         be:1c:18:eb:9b:b6:b5:dc:69:d2:86:ed:7f:a0:69:62:d1:55:
         f1:3c:75:3d:35:20:52:38:3c:43:83:b7:96:b4:a4:9f:bb:7d:
         a8:ba:98:a2:ab:85:76:61:f4:74:1c:4a:3b:cc:c5:bd:93:b5:
         99:d5:43:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 19:03:43 2026 by rpki-client