Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
File:                     tKkPaJZnhEKvruG6qqayot7KzTs.mft (raw, json)
Hash identifier:          e7DquwW4xSoL0oMqvPrzcudIIsLGY6ralXnxmes5kkk=
Subject key identifier:   15:A1:8A:43:11:D5:34:A8:57:DB:F5:F8:AA:C6:B9:35:52:77:AB:E7
Authority key identifier: B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
Certificate issuer:       /CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Certificate serial:       019E322A4DF7E2C6A98D3AD9A91360C2F5D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
Manifest number:          1916
Signing time:             Sat 16 May 2026 19:01:33 +0000
Manifest this update:     Sat 16 May 2026 19:01:33 +0000
Manifest next update:     Sun 17 May 2026 19:01:33 +0000
Files and hashes:         1: DjRcKjGf481KpSn3dS8opbsCTRQ.roa (hash: q4qSCDk+u7QWlYigOct6W9NgvEFiQbOazsiPpD4B9fE=)
                          2: KMdcbWWp5MyTzP2tDi5ljSFkPgs.roa (hash: rr/RZr6IyiOAVd9654gWzYqEL3pIM32RlUlY8qv46PE=)
                          3: eNHn6hiUVOxJ-_Y5SJktOte6hXk.roa (hash: jPd38RvXr6qVEzTNTT/Ft+c1V1MvmsnZDnEJANdwKuo=)
                          4: tKkPaJZnhEKvruG6qqayot7KzTs.crl (hash: GJqAQUzHFl+qQS2VuUz+04kYDhrss78nXTx7dNoPvT0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:2a:4d:f7:e2:c6:a9:8d:3a:d9:a9:13:60:c2:f5:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
        Validity
            Not Before: May 16 19:01:33 2026 GMT
            Not After : May 17 19:01:33 2026 GMT
        Subject: CN=15a18a4311d534a857dbf5f8aac6b9355277abe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:22:bc:b6:dd:ae:cd:ce:5f:62:e8:0f:5d:c5:
                    4a:f8:82:99:f1:85:25:5f:f9:77:65:89:3f:c4:ac:
                    97:6c:a7:02:98:cd:fd:c5:48:1c:70:40:2e:17:d0:
                    65:e5:7c:2e:29:90:1b:8e:62:37:19:0c:12:4b:dc:
                    99:3a:50:3b:07:92:11:3a:2c:a1:fc:d0:87:ac:4d:
                    11:fe:f3:39:1e:49:66:67:6c:2e:23:55:9c:bd:d2:
                    69:32:1e:c6:23:65:45:b9:31:94:41:ed:7f:4d:2d:
                    36:58:65:6a:9c:e6:68:61:78:47:06:79:b7:3e:17:
                    44:c1:5b:db:91:d4:ce:9b:af:76:8d:28:62:de:14:
                    b2:50:7b:21:75:c5:4b:51:1c:f7:16:cf:81:83:3c:
                    36:28:6f:4b:fb:fd:de:22:c8:3d:f2:93:26:06:dc:
                    0e:56:c8:53:77:e9:96:e8:f9:9d:2e:4e:60:5a:b2:
                    51:50:ce:bc:8c:31:9e:40:cd:f5:34:45:0f:8b:e3:
                    80:21:9a:8f:48:5c:03:a5:f6:77:3b:d4:a5:4e:ce:
                    0a:1a:35:e3:53:f7:67:e8:6c:45:d8:88:a5:b4:12:
                    98:1d:58:c4:ed:ce:83:21:22:75:e8:2d:39:95:1b:
                    ea:ff:1e:8e:a6:b9:3b:71:f1:de:d4:aa:3b:e9:ba:
                    50:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A1:8A:43:11:D5:34:A8:57:DB:F5:F8:AA:C6:B9:35:52:77:AB:E7
            X509v3 Authority Key Identifier:
                keyid:B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:6f:64:75:4d:84:39:3b:15:36:42:8f:e1:4c:33:48:83:f9:
         d7:30:dd:44:c7:06:0e:1b:c5:da:f1:31:45:b0:e5:c6:8c:ee:
         d9:8b:7b:fd:ef:f6:1a:e3:29:65:9e:9d:b5:7a:e5:b2:b0:ef:
         98:10:78:b2:c7:78:da:38:5d:2c:76:21:0a:53:06:6d:fb:9e:
         fd:48:84:bd:f6:eb:a5:7c:38:70:d5:01:a9:90:2b:02:66:20:
         9b:e4:16:7d:64:73:8b:6c:e5:57:fa:a5:9f:67:4f:98:78:db:
         f1:5c:3d:0e:8d:94:ed:b2:1c:13:94:af:ea:d3:9c:88:ba:6c:
         4e:5d:2e:2a:06:be:39:f0:d5:d0:c2:f5:9c:49:9a:11:a3:36:
         b0:92:4c:49:4e:50:05:36:e1:af:02:d3:f7:d1:d1:4d:6f:a4:
         10:34:2a:48:76:d1:0c:f4:64:2f:76:e8:48:7d:64:92:07:f8:
         53:c6:a3:12:fe:92:58:00:1f:f4:73:51:cd:3a:82:5c:48:6b:
         a2:47:85:52:6f:c2:aa:c0:7a:e0:47:aa:58:c9:48:1d:96:ee:
         38:3e:8b:01:32:36:08:25:a5:8d:9d:d2:3f:c0:2e:12:60:95:
         bb:1c:65:6b:1a:35:1b:97:2d:17:73:b6:58:0a:58:46:02:38:
         a5:ce:e5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:42:36 2026 by rpki-client