Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
File:                     pPhDYAPTdgICa2VTF1XKj80xvtI.mft (raw, json)
Hash identifier:          yYzYc2obRlEHh+4ozK6pYyBVvgr38iXPZpxGGRr/mAo=
Subject key identifier:   8C:3D:56:12:C6:13:9C:87:9C:44:2B:05:10:DB:9C:B7:6E:92:F4:79
Authority key identifier: A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2
Certificate issuer:       /CN=a4f8436003d37602026b65531755ca8fcd31bed2
Certificate serial:       019E322A3758A6ED9AD4EA913765DE6DF774
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
Manifest number:          1930
Signing time:             Sat 16 May 2026 19:01:27 +0000
Manifest this update:     Sat 16 May 2026 19:01:27 +0000
Manifest next update:     Sun 17 May 2026 19:01:27 +0000
Files and hashes:         1: 1ZJlssHe1cqgH6uhHrvZ5q1B_44.roa (hash: a7NHnkscG6OzvwBm8NXSANt6871rXlNEhgTw4CrzMQc=)
                          2: MH0ePkGiqUNJj92Th9uz7ESBLuY.roa (hash: zEMC++4x++17MQ2QaYX26EoR6rGR9XCEMskuWanLEDo=)
                          3: TL6-YQoL6bM9YzZkFooupL9SKZc.roa (hash: fDKbKxnCCglM7bDeEH0JDX6y2HKlL0aR2oegXj3HyjY=)
                          4: ZSy9I3udyb1w0usAvKavWUhYUuM.roa (hash: NjrlIizcsmC5vnXJgYJk87Yv2k+U89uwtXh718Ex2Oo=)
                          5: lilRXnQbhAs_T-urB33KZ2t0KZQ.roa (hash: U6hwfDfpC6+pNA9h6WSEbMtCWXO/blanxBm4f8SHiVE=)
                          6: pPhDYAPTdgICa2VTF1XKj80xvtI.crl (hash: ff6cCvQiIWjSzz+CZMKoofVJtR/F+W36G3eT74meb9U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:2a:37:58:a6:ed:9a:d4:ea:91:37:65:de:6d:f7:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f8436003d37602026b65531755ca8fcd31bed2
        Validity
            Not Before: May 16 19:01:27 2026 GMT
            Not After : May 17 19:01:27 2026 GMT
        Subject: CN=8c3d5612c6139c879c442b0510db9cb76e92f479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c6:a3:09:29:4b:b8:6c:0f:42:94:25:a5:68:
                    02:64:9e:54:44:56:25:b8:52:74:c0:d8:15:98:b9:
                    54:6c:9b:75:84:a0:e6:8a:b3:e9:c0:3b:a3:8e:cc:
                    91:ff:0a:b0:64:12:4b:f2:40:57:bd:f4:e9:f8:0c:
                    42:f9:b8:30:92:14:c2:c9:20:3b:56:eb:65:ef:a1:
                    3f:31:f0:c4:ff:ab:6e:38:de:fd:6a:90:2a:0d:a4:
                    50:64:30:f5:5d:fc:d9:4d:e1:6e:e4:99:7c:bd:9f:
                    a8:d6:1b:c9:1a:59:dd:bc:fd:0c:91:65:13:79:a6:
                    47:d8:99:1f:89:00:ce:92:08:4b:77:7d:f6:38:07:
                    2b:dc:df:e8:b5:a8:9a:2c:14:ef:fc:fc:ca:38:93:
                    32:81:30:b6:90:95:6e:d5:b3:cb:d3:47:6a:68:3c:
                    ad:b8:74:41:b9:13:e6:2f:f1:bc:b2:85:d2:48:55:
                    ae:86:59:f1:15:f5:30:60:9b:b7:b5:fa:bf:a2:31:
                    98:e2:fd:96:58:a1:ee:84:76:fe:db:28:18:26:31:
                    71:d5:fb:66:2e:1f:4e:70:02:ed:7e:50:cf:b1:41:
                    69:8f:dd:25:5e:e0:c6:38:45:05:f3:c2:5e:cd:3d:
                    b5:de:7a:9c:6e:4d:cf:e5:a3:69:c8:81:78:2d:ba:
                    31:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:3D:56:12:C6:13:9C:87:9C:44:2B:05:10:DB:9C:B7:6E:92:F4:79
            X509v3 Authority Key Identifier:
                keyid:A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:05:d5:ac:89:a0:8e:dd:61:83:5c:f4:3c:82:44:cf:bf:0e:
         ff:7b:ff:f2:ba:c3:7c:b9:60:5b:82:d8:f5:27:13:e0:07:77:
         6d:0f:22:81:46:ca:28:33:13:05:19:26:2d:e9:68:9c:37:1c:
         91:38:fb:4b:e5:38:c6:83:46:04:16:b8:e5:41:ac:78:4c:b5:
         f7:0b:24:6c:cd:da:4f:a1:74:6a:90:fc:2d:4d:a9:30:3c:1b:
         55:94:26:a5:ea:2b:a0:e1:bf:68:8e:bd:b1:51:36:37:e2:77:
         3b:2b:6c:cb:4b:3f:1e:65:c7:ae:89:c2:bd:97:30:c5:d2:46:
         b2:46:fa:0d:ba:cc:c8:35:13:58:10:b3:12:4d:e9:13:0a:67:
         a3:03:91:ac:ca:a8:c2:27:34:2a:af:80:fd:02:d2:0d:23:2b:
         ca:47:ec:de:4a:3b:5f:3f:01:b0:bd:25:4e:d0:ce:20:5c:f7:
         90:89:76:e1:49:31:fa:04:4f:1e:f2:05:ee:90:b6:3e:50:6c:
         87:4e:b8:f2:a3:44:35:77:c1:81:33:6f:34:8e:54:99:6e:4a:
         ce:c6:7e:90:09:ae:30:0a:85:14:be:bb:67:04:b9:79:34:92:
         6b:d4:bb:ed:0d:5e:15:24:2f:c8:73:bf:1a:db:04:8b:22:2e:
         b6:7a:7a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:40:27 2026 by rpki-client