Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
File:                     Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft (raw, json)
Hash identifier:          6hkpqqATp81cDi5Oppevf0Y0v8OeY4pxK9T86BSvz/0=
Subject key identifier:   1E:9C:47:57:1E:8D:B9:D3:5E:84:34:C9:BD:A2:7E:41:F4:3D:2D:A4
Authority key identifier: 3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
Certificate issuer:       /CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Certificate serial:       019E5147396DA3B757B2F9131876C4912CBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
Manifest number:          0854
Signing time:             Fri 22 May 2026 20:01:22 +0000
Manifest this update:     Fri 22 May 2026 20:01:22 +0000
Manifest next update:     Sat 23 May 2026 20:01:22 +0000
Files and hashes:         1: 2LqMB6nAP53p9Mx5BUqCY2aP11w.roa (hash: CXwqScjDeWDjJQZWhT8XIJc7YrmcrC7QUMyXMb9Frso=)
                          2: Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl (hash: d64gkWkjT/MslJPvFrNVyvK4eIRyo83ubhVtxQjp6DU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 May 2026 17:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:51:47:39:6d:a3:b7:57:b2:f9:13:18:76:c4:91:2c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
        Validity
            Not Before: May 22 20:01:22 2026 GMT
            Not After : May 23 20:01:22 2026 GMT
        Subject: CN=1e9c47571e8db9d35e8434c9bda27e41f43d2da4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:de:46:b0:7c:14:6b:cf:bf:a4:f0:a9:08:c4:
                    f3:bd:38:7d:92:54:d2:cc:9c:ac:7c:28:c5:dd:6a:
                    cd:2f:09:c5:de:09:47:75:47:2b:a1:12:48:4d:e6:
                    43:98:36:60:a1:5b:04:67:27:25:f5:36:71:d2:ec:
                    ec:cc:0d:55:6c:e4:ff:50:ee:f2:f3:91:f3:cf:ab:
                    c0:f1:4c:4b:43:5f:52:cc:f8:6d:d6:24:19:39:49:
                    95:d2:73:2e:5d:e9:36:6a:cb:17:4e:a0:c0:b7:09:
                    b8:f2:70:1a:26:a9:cb:ce:88:a4:91:1f:35:a6:e5:
                    78:9e:83:86:41:44:61:ce:d9:82:1e:1e:c5:67:c3:
                    28:c9:37:c2:44:81:5b:e8:2f:ce:3b:fe:d7:32:4f:
                    a1:2f:c4:24:2e:61:d2:b6:ac:ed:81:97:79:86:77:
                    67:c4:f7:76:cd:f4:e1:f3:b4:ca:0b:09:95:15:80:
                    c3:1b:d8:e1:0c:3a:be:7a:08:41:29:c5:8c:63:a9:
                    1a:66:54:f6:ca:ca:04:1b:2f:f3:93:e3:91:d6:cd:
                    33:90:e3:86:cf:af:b4:49:21:e2:dc:49:c5:53:a7:
                    8b:a6:7d:64:04:e8:63:c9:9c:92:21:76:ce:ea:62:
                    9f:7d:29:64:df:42:45:22:6e:f4:40:fe:71:15:2c:
                    e6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:9C:47:57:1E:8D:B9:D3:5E:84:34:C9:BD:A2:7E:41:F4:3D:2D:A4
            X509v3 Authority Key Identifier:
                keyid:3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:44:57:69:39:a0:36:4a:96:23:98:8a:3f:bb:ce:68:4c:ee:
         2a:6a:c3:26:e1:cf:6b:37:d6:01:5f:af:59:ce:93:7b:5f:09:
         05:90:e6:4f:21:3b:62:1c:90:af:82:e1:f2:82:68:72:e2:91:
         84:e6:68:0b:74:37:5d:01:6b:20:a6:1e:be:b4:fa:b3:ee:4b:
         b2:9a:67:b0:47:98:71:da:9d:77:7a:3e:03:36:42:b3:43:7c:
         4c:fa:9d:6c:54:6d:2f:95:78:4e:97:59:04:bd:b5:09:44:00:
         98:c2:d1:23:05:5f:63:2b:a6:3c:9f:4e:da:f7:9b:b3:4b:77:
         3c:1e:e3:c3:e3:8b:5a:91:22:d5:45:2d:da:a4:39:1a:c8:58:
         dc:ad:43:f9:62:4d:a0:49:dc:1e:e4:ff:8b:1d:7a:17:ef:e8:
         04:3a:0f:51:9a:be:8a:6c:5e:7f:f9:61:d4:52:38:31:49:93:
         67:d3:3e:d2:65:96:5c:a1:3a:f2:74:e8:45:77:c0:ad:17:a6:
         04:35:e2:63:f2:47:01:66:de:0e:a0:dc:99:4d:38:be:f4:74:
         18:77:c8:03:e4:a5:07:b5:b0:47:18:9b:57:fe:3e:c3:f6:63:
         39:b8:91:a0:aa:e8:dc:42:e8:2c:11:b8:15:6e:6a:ef:84:53:
         a7:ee:c4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:48:00 2026 by rpki-client