Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
File:                     mBPi9jUdO00eYapAFvGyz6YtfN8.mft (raw, json)
Hash identifier:          4ChWbw5MOeSYty9gAjKdN6SBVSggJYg9Hg2wtIipsZ4=
Subject key identifier:   25:6C:C3:31:09:3C:AC:76:7E:FA:8E:5B:9F:95:C6:79:5B:C7:30:33
Authority key identifier: 98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF
Certificate issuer:       /CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
Certificate serial:       019E333C6B4DC1DDD053E3F69264AAEA3A02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
Manifest number:          05D4
Signing time:             Sun 17 May 2026 00:00:57 +0000
Manifest this update:     Sun 17 May 2026 00:00:57 +0000
Manifest next update:     Mon 18 May 2026 00:00:57 +0000
Files and hashes:         1: NfO8TWIkaxE4DaKwNuYvhzbmi90.roa (hash: 07eBVlhSt2pE8VL0qAd29LqwR9jHDzCkLPkg8sdeyGk=)
                          2: TRd3PwWjN2N6i0kSV548d4vlbt0.roa (hash: ZKnbwzmBAX2zhMCQGg8pdlTxO8b68gKUxXEWzkBH4eI=)
                          3: mBPi9jUdO00eYapAFvGyz6YtfN8.crl (hash: MRs0PgawPlS5JBIVWBb1zGa7duLvlJoUUVwMTlMQ6t4=)
                          4: o04EKVPaSCdYlCxT4efK6vx9Qwk.roa (hash: tNYBjaANlJOuYZAK5FkLTFbNd6zPpcROskpJuIE9NLA=)
                          5: xWwqlVqWd0iRwMTuQO8eVNoCWHU.roa (hash: yQKukILLOQx8xluWCSSZQ2VF3E7ijyBr1SeiIVBdBeU=)
                          6: xulzqcYhIs7PWGHWVfL4YmNhVq8.roa (hash: WAG1ujb3pAhI/q7UcuSpjvhOpci45QogtqTPG/JOxEE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:33:3c:6b:4d:c1:dd:d0:53:e3:f6:92:64:aa:ea:3a:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
        Validity
            Not Before: May 17 00:00:57 2026 GMT
            Not After : May 18 00:00:57 2026 GMT
        Subject: CN=256cc331093cac767efa8e5b9f95c6795bc73033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a8:01:ec:80:6b:b2:08:aa:86:be:5a:8f:ea:
                    87:f5:0b:9f:cd:bf:93:89:ea:a2:20:1b:8a:66:6e:
                    fd:84:6b:c7:e8:e3:fb:d2:fb:0c:44:fe:fb:19:43:
                    1a:53:12:32:58:57:7a:26:ec:38:bc:b3:4c:e5:4f:
                    44:88:c5:93:a4:c4:84:91:e7:95:17:fc:5f:f4:99:
                    93:e1:2a:1b:b7:5f:cc:88:3d:f5:bb:ba:0f:98:66:
                    d6:06:a8:54:dd:57:92:ba:e9:aa:f3:40:4e:90:bc:
                    bd:eb:4e:b9:c4:92:e2:42:55:78:c5:53:2b:52:93:
                    18:9f:05:3b:3f:02:19:64:db:b9:bf:37:56:51:5d:
                    c0:db:2e:2b:cb:81:35:f7:8b:cb:9d:dc:68:fc:1d:
                    6f:55:46:ba:82:5a:00:d4:f4:09:df:fc:2b:cd:71:
                    65:26:f4:7c:28:af:51:dd:de:8b:23:b4:a8:20:19:
                    15:1e:70:5d:43:8a:b6:01:10:b7:8d:16:fe:e0:d8:
                    20:cb:99:3e:42:05:f4:d9:d2:bf:3a:71:cd:9f:39:
                    6a:96:f8:36:a1:be:f6:fc:3d:49:03:30:03:40:09:
                    53:45:a4:fb:a8:22:87:03:a5:9a:eb:89:67:ec:c4:
                    e3:66:81:40:35:de:f9:0a:95:f2:18:d0:f5:f6:dc:
                    51:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6C:C3:31:09:3C:AC:76:7E:FA:8E:5B:9F:95:C6:79:5B:C7:30:33
            X509v3 Authority Key Identifier:
                keyid:98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:1e:01:c5:6e:34:92:07:d7:59:00:25:47:50:0b:f3:20:e1:
         77:d6:a1:06:6e:8d:46:6b:31:94:0a:8f:71:d9:47:dd:3a:b9:
         a2:f0:37:7b:a5:d4:b3:91:f4:3c:33:5a:55:71:f3:63:df:12:
         b0:51:8d:ae:e6:8a:98:4c:18:cf:d9:26:dc:ab:7e:85:7e:0e:
         69:da:be:af:a5:c0:6e:f5:55:56:62:06:cc:2b:52:a8:46:35:
         60:eb:0a:22:d8:f3:df:3d:d7:85:7e:7d:89:19:82:b3:52:3c:
         26:ec:b7:6b:91:2f:a5:a6:d6:e7:82:4e:9a:4b:df:0c:e3:83:
         51:e4:17:2e:cf:47:18:cb:85:ed:b7:ab:de:0a:ec:4e:08:e4:
         de:43:4e:86:9b:5c:ce:84:17:bd:46:7f:37:62:e9:51:e2:d1:
         3c:50:43:3f:48:cb:83:0b:5f:53:89:35:3c:77:62:b7:87:dd:
         75:f3:fa:b0:ad:8f:5d:73:4b:4a:18:be:da:b5:b3:45:3a:2f:
         e8:02:76:e1:dc:33:6b:a3:49:cb:00:84:1f:9a:b6:0b:a2:58:
         59:2c:c7:64:b9:cb:1b:6e:29:a5:7d:cd:8e:9e:55:29:0c:68:
         15:62:4a:4b:dd:ef:c0:c8:d4:38:d5:f8:dc:76:9a:52:24:43:
         9f:46:9f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 03:02:06 2026 by rpki-client