Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
File:                     dPEFnCc8UO3PPc7fxYABUuyR26I.mft (raw, json)
Hash identifier:          WtfehurqDz2baMgAZxxtnN6Nd4aDz125rLI+7Lfk+Js=
Subject key identifier:   EC:45:BB:FB:A2:7D:80:6E:1F:DB:F9:BE:23:59:AB:CD:CE:2B:EE:C3
Authority key identifier: 74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
Certificate issuer:       /CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Certificate serial:       019E3297B3F9B8F7303FB6EA840513B787E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
Manifest number:          190F
Signing time:             Sat 16 May 2026 21:01:03 +0000
Manifest this update:     Sat 16 May 2026 21:01:03 +0000
Manifest next update:     Sun 17 May 2026 21:01:03 +0000
Files and hashes:         1: 4zHqkXwTdPpErUuwool8-zX-SB4.roa (hash: LHnM5v5Sz1IzlHeFp2joapwPeszU3VAj2kHXfdYdwu4=)
                          2: dPEFnCc8UO3PPc7fxYABUuyR26I.crl (hash: wJcuchBl984Vl5VlmDex5kNBh5vnueMr6meHP9IbcwM=)
                          3: f_myMJMSIIWO9m-PmHiygg0XXSs.roa (hash: 3LE3GccOE6KqVlj9DZ+EFPId6e66LFjW7NsGN3ZdmPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:97:b3:f9:b8:f7:30:3f:b6:ea:84:05:13:b7:87:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
        Validity
            Not Before: May 16 21:01:03 2026 GMT
            Not After : May 17 21:01:03 2026 GMT
        Subject: CN=ec45bbfba27d806e1fdbf9be2359abcdce2beec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d2:83:de:4f:02:f7:cf:61:62:91:dc:a4:4c:
                    ca:25:f7:fe:69:92:c6:54:2d:83:38:04:0e:62:4d:
                    13:69:7c:7f:92:f7:db:a4:56:4d:0e:eb:06:f5:80:
                    46:d4:12:b0:0e:a1:35:10:4f:be:00:27:9b:f1:85:
                    3b:3b:f3:3b:99:dc:dc:f4:3e:7f:c1:74:f8:80:95:
                    7a:72:5e:24:c6:a2:ae:46:d3:89:4c:e7:dd:31:9d:
                    44:61:f4:3f:96:01:db:71:83:d1:42:55:e3:62:0a:
                    d6:a0:fe:16:3a:54:ed:90:9e:54:02:1f:8c:b8:47:
                    b9:72:e2:98:29:a1:57:90:14:49:f0:fb:45:ae:e3:
                    d6:34:e8:68:88:a8:d6:24:83:5d:c6:86:41:4e:ac:
                    e8:77:86:c2:4a:db:1e:db:ca:34:9d:f4:c6:22:32:
                    df:3d:97:69:ba:a1:c5:1b:97:0f:ff:c9:e0:c8:3d:
                    33:6b:d5:7f:26:2b:1f:17:a9:b7:69:a4:cc:49:93:
                    8f:03:01:bf:ac:b5:c8:f5:53:42:84:81:55:72:4c:
                    6f:f4:26:11:ae:97:bb:f5:90:8a:f1:73:a8:10:a1:
                    f9:12:6f:71:45:09:27:41:91:ba:75:a5:bd:f5:5a:
                    64:2e:a0:11:81:a1:eb:eb:81:2e:1d:42:a0:8b:59:
                    7b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:45:BB:FB:A2:7D:80:6E:1F:DB:F9:BE:23:59:AB:CD:CE:2B:EE:C3
            X509v3 Authority Key Identifier:
                keyid:74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:a1:b2:e3:6b:d8:93:65:10:b7:94:f4:94:69:77:e5:87:42:
         14:08:a4:ff:05:6c:18:c6:ff:89:a8:e9:59:9f:48:b5:a1:11:
         4f:54:6d:1a:f9:54:24:55:c1:68:ba:84:86:78:05:e5:d8:ee:
         dc:26:40:b1:85:62:b9:f0:25:42:14:e0:06:9b:ef:67:4a:6d:
         e1:23:c9:35:fd:a3:18:73:85:80:97:77:8a:5a:bc:26:48:3a:
         b5:c6:6a:2c:ab:70:6b:aa:4b:21:51:2d:cc:10:23:c5:15:93:
         be:be:53:eb:40:0e:3b:4b:eb:af:e0:bf:82:62:19:ba:f2:96:
         6f:61:62:5e:8f:ad:65:34:ee:f3:b2:59:ca:1d:f6:a7:01:2d:
         8b:a3:2e:88:74:4b:df:9b:06:df:03:0e:21:d1:48:65:ff:2e:
         37:6b:e4:aa:de:44:64:04:b6:ed:12:0b:67:0b:9a:58:04:a6:
         e1:bb:e0:6e:d7:5d:79:24:a1:e2:b5:17:db:b2:6d:d1:8b:e2:
         21:56:94:b4:ec:ca:69:cf:9d:4d:83:4e:2b:73:dd:ef:13:d1:
         7e:5c:04:cd:eb:7f:b7:dc:5b:ef:3a:49:41:52:06:c9:82:54:
         f1:c9:fa:22:26:19:95:5b:45:bb:03:c9:51:97:c4:5e:47:ad:
         3d:eb:43:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:40:19 2026 by rpki-client