Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
File:                     4Gkduvo6jeBwsHAi3prfdDQftPI.mft (raw, json)
Hash identifier:          VivEIlHnuK07EHZv4IGkHFkhy4dmvH6adgf98uc2J+A=
Subject key identifier:   BB:6F:1C:02:12:25:9C:82:24:07:4C:71:64:99:BA:83:B9:8D:6A:BE
Authority key identifier: E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
Certificate issuer:       /CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Certificate serial:       019E30E05F51DFAB9B245D0BBFEE4599B4B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
Manifest number:          11D1
Signing time:             Sat 16 May 2026 13:01:11 +0000
Manifest this update:     Sat 16 May 2026 13:01:11 +0000
Manifest next update:     Sun 17 May 2026 13:01:11 +0000
Files and hashes:         1: 1OjQOklemE1c2Ofd7sEbtV6WCLQ.roa (hash: p8zMORBp4EwLrEV0pwePL8HYOl4fQLM1ray936MhnIo=)
                          2: 3gKR0cK9QoxfvHnSIiqY4bcG8ww.roa (hash: ZcGaXU4YPznoibhlbyhjzKqhwZf4BJJECm4SI2hoD/U=)
                          3: 4Gkduvo6jeBwsHAi3prfdDQftPI.crl (hash: SbR2OLzcbpygIvniSCeeenCKMYVBKPJAkfLA4zUHcPc=)
                          4: 8tAmUasl9shJmzVr02QyR9gf1yg.roa (hash: 56dLPJcjlB89ljFKBrlBrzN9saKBJC9XHbbe4kgHJpI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:5f:51:df:ab:9b:24:5d:0b:bf:ee:45:99:b4:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
        Validity
            Not Before: May 16 13:01:11 2026 GMT
            Not After : May 17 13:01:11 2026 GMT
        Subject: CN=bb6f1c0212259c8224074c716499ba83b98d6abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:68:5c:20:cc:60:bf:20:e8:d3:89:85:cc:dc:
                    df:12:9e:19:24:b9:35:3a:1a:38:f0:9a:3e:f1:a5:
                    8f:14:47:c4:51:f3:23:60:3c:a6:db:2f:47:57:c9:
                    35:a6:03:93:dd:73:6d:03:6d:51:6d:8c:f9:3d:2f:
                    ae:de:5f:66:2a:d7:b5:0f:6a:fa:74:0c:8d:39:48:
                    ca:08:c9:0d:5f:55:07:7f:77:0a:bc:fa:26:91:a7:
                    4c:34:2f:ad:5d:13:83:bf:1e:59:1a:2f:91:8a:52:
                    38:61:e2:9b:16:bd:f7:55:1a:9f:02:ea:e9:5e:44:
                    40:8f:5c:40:9b:83:ca:a3:93:bf:0e:24:13:07:73:
                    41:2c:a4:0b:96:f4:63:f3:3d:be:a7:4f:c8:2c:de:
                    51:f1:a7:71:19:86:31:85:81:49:ea:0b:c5:d9:87:
                    fc:42:ce:50:a6:ee:6f:6b:48:13:ce:31:c2:b5:08:
                    7a:a9:a4:3f:64:05:b2:b0:4c:1b:7a:26:45:c5:cd:
                    ef:bb:46:61:c6:30:5b:15:52:7f:64:5c:7e:8d:4d:
                    54:17:98:1f:cb:32:7a:54:d9:dc:64:d7:52:a3:34:
                    e8:4e:cb:93:ee:55:a3:83:dc:9f:13:d5:1f:10:90:
                    f4:f8:10:83:83:f8:d1:9b:b6:a9:be:80:70:e7:84:
                    b7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:6F:1C:02:12:25:9C:82:24:07:4C:71:64:99:BA:83:B9:8D:6A:BE
            X509v3 Authority Key Identifier:
                keyid:E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:72:38:f2:99:db:16:72:0d:17:6a:ba:73:d4:d2:2b:92:ca:
         6b:fd:1c:a8:85:e4:a0:54:5c:b9:4c:3c:5f:8b:08:51:43:5f:
         5a:e2:30:e1:4a:a4:3b:fd:c9:f8:ce:e2:63:09:d2:db:0c:7d:
         c7:8f:f4:5f:a6:1e:8a:2c:fb:d8:e1:ad:8b:3c:dc:d9:0b:3a:
         4e:a1:54:37:14:ec:40:6c:6e:b6:cd:ae:c9:ee:fb:48:ce:6c:
         8f:01:0a:03:7d:02:6a:03:d8:ba:9c:96:82:d6:4b:de:97:8e:
         e2:30:04:dc:d9:30:00:04:82:12:06:ec:35:c2:e8:45:4b:5c:
         04:d1:71:71:f3:fe:ca:98:1d:97:b1:5f:7f:48:43:1f:e4:dc:
         03:5f:c9:32:57:a3:fa:0b:3d:52:a3:ee:2a:e0:c7:ad:42:43:
         8c:37:ab:3e:fc:d9:f3:1c:4e:a0:94:9b:e7:82:3c:f5:d8:63:
         d5:2a:6c:65:9a:4c:9f:8b:b0:4e:4f:db:89:36:6c:46:a8:95:
         f4:c4:6f:92:e7:29:3a:a0:bf:76:c9:d8:92:4d:67:44:f3:da:
         53:9e:a8:a4:b6:a5:45:c8:4a:9f:9d:27:7c:f0:79:cb:8d:73:
         cd:af:4a:5b:51:a9:45:55:83:83:c8:b8:b0:51:9c:53:8d:08:
         91:21:38:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:09:36 2026 by rpki-client