Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
File:                     dE4TPKDK2fH9FhWAWQspbbIjCM4.mft (raw, json)
Hash identifier:          X0e2alDQgyf0aGg5xef/fFfbzUxjSYv36Ih9Fvhs5So=
Subject key identifier:   F5:78:29:0D:23:D7:DD:BD:13:67:BD:62:C9:EF:E9:AF:DF:EE:55:C4
Authority key identifier: 74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
Certificate issuer:       /CN=744e133ca0cad9f1fd161580590b296db22308ce
Certificate serial:       019E284B379FD54514D4714E33B26FAEA98D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
Manifest number:          0CC6
Signing time:             Thu 14 May 2026 21:01:18 +0000
Manifest this update:     Thu 14 May 2026 21:01:18 +0000
Manifest next update:     Fri 15 May 2026 21:01:18 +0000
Files and hashes:         1: CWBx_YaW55wp0Q8nHPmUDJfmm9g.asa (hash: sICMwCqCa7TLjDMZRJ5VqSQf7cfIQN96H4gFU0ZqRjs=)
                          2: a3t44Injkb3R_GXSuc0dS5CiLrY.roa (hash: zbUvHz7MU2Z+aJkIb7Yi+6/dp3AtOWPuD0S1MFlgedM=)
                          3: dE4TPKDK2fH9FhWAWQspbbIjCM4.crl (hash: 5/CUkFrrqS9fl/wc3DYK8dl/MHOE3pNJjXlnGcFI0yE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 21:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:4b:37:9f:d5:45:14:d4:71:4e:33:b2:6f:ae:a9:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=744e133ca0cad9f1fd161580590b296db22308ce
        Validity
            Not Before: May 14 21:01:18 2026 GMT
            Not After : May 15 21:01:18 2026 GMT
        Subject: CN=f578290d23d7ddbd1367bd62c9efe9afdfee55c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:75:97:f9:95:51:d6:68:a5:83:70:e5:08:12:
                    3d:82:2a:9d:b0:c2:53:36:21:e9:9a:aa:a2:ad:7a:
                    86:5f:a7:4b:62:7e:4e:03:0a:e1:06:34:73:cc:ed:
                    dd:f4:34:88:69:68:1a:f2:62:bb:c8:92:2e:30:cb:
                    93:37:44:07:ab:67:82:6c:4d:e3:03:0b:ea:c0:3d:
                    22:80:8c:68:1b:6d:2b:66:bc:39:e4:a2:be:20:f7:
                    4c:55:c0:4d:52:3e:c6:e3:15:62:69:61:31:74:0c:
                    b5:9e:9e:06:b8:80:0f:02:b7:1e:7b:d2:30:82:65:
                    e8:f0:3d:c6:37:f0:26:f0:4a:ae:fd:90:c5:66:5d:
                    b0:20:d4:f0:d0:7a:ac:59:a2:65:d6:f3:33:79:9d:
                    1c:9e:93:16:f4:ef:98:b3:9b:07:42:0e:2c:c6:b7:
                    f7:d4:a6:dc:92:8f:12:a6:b0:7a:17:2f:08:77:f5:
                    52:82:94:61:45:43:da:ac:42:21:8e:74:b7:eb:29:
                    46:d3:a5:0c:49:c8:0e:8b:de:2d:c2:5a:0f:e3:75:
                    99:e7:ba:4d:7d:05:7f:7a:1d:98:12:ba:5a:94:79:
                    2f:82:01:23:d7:25:d5:03:a1:7b:38:74:a0:3e:fd:
                    ee:36:8e:17:73:fe:d5:ce:a4:26:c3:53:96:8f:30:
                    0e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:78:29:0D:23:D7:DD:BD:13:67:BD:62:C9:EF:E9:AF:DF:EE:55:C4
            X509v3 Authority Key Identifier:
                keyid:74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:67:0c:88:d7:ea:41:c8:51:79:54:50:5e:2f:c6:40:f9:27:
         5f:0a:74:30:05:4f:29:fb:69:9e:e3:9b:d0:44:f3:84:6a:68:
         55:9a:c3:e3:59:26:46:d9:dd:4e:6b:94:71:45:fe:50:79:fb:
         ca:e6:93:a8:3a:63:45:d6:1a:1c:b0:69:65:08:f3:8b:0e:36:
         34:5c:0a:30:ef:3e:68:8a:dd:03:2a:20:de:46:da:7d:66:71:
         9c:1f:b6:90:d8:58:1d:84:36:f6:92:fb:de:42:80:c6:9a:3b:
         57:be:a7:00:89:8e:c4:51:9e:1c:af:64:b7:34:97:46:c3:0e:
         99:ff:a0:58:56:b7:87:9e:ac:fa:50:0d:90:c1:7e:de:20:a5:
         d1:64:99:dc:6f:21:37:a8:5b:e3:20:52:a2:55:7f:a9:15:53:
         75:ae:6d:10:5a:b9:a0:23:e0:78:2d:28:11:9d:95:ca:70:0a:
         b0:db:e6:54:34:c1:ee:5a:bd:f1:f1:c8:c8:d6:74:96:5a:e8:
         96:1f:88:c4:64:92:10:11:d7:99:b4:20:ea:0f:c0:bb:53:60:
         95:c3:a6:26:f8:36:a5:37:31:eb:33:7e:35:44:2f:26:09:2a:
         11:3f:99:07:27:4b:5c:5d:4d:7c:60:1d:43:7e:5d:21:dd:74:
         fc:ed:2d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:19:31 2026 by rpki-client