Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
File:                     1DySR0_tODyV-izNg9YU9X5WPYI.mft (raw, json)
Hash identifier:          xijI/IOIuxBhfXzdgjmDZev/NmniqwG/49WfXK3ZDxM=
Subject key identifier:   D9:D1:6F:1E:DB:63:8C:B7:FF:0E:E7:34:E9:53:6A:A7:0D:D9:21:2D
Authority key identifier: D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82
Certificate issuer:       /CN=d43c92474fed383c95fa2ccd83d614f57e563d82
Certificate serial:       019E1D5996B75A33E5082C58E3C887F082E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
Manifest number:          1906
Signing time:             Tue 12 May 2026 18:01:10 +0000
Manifest this update:     Tue 12 May 2026 18:01:10 +0000
Manifest next update:     Wed 13 May 2026 18:01:10 +0000
Files and hashes:         1: 1DySR0_tODyV-izNg9YU9X5WPYI.crl (hash: fiLO+3Z50WuHkRgJUpl7fyr53X/jaPxRkrzOuFEk7a4=)
                          2: ZtLevkUDeSsHUXqGG47X0OZSfDw.roa (hash: 1v1351MYA0xtMfbN9thfHMsePTGwzyiZtU+ILH4KvII=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:96:b7:5a:33:e5:08:2c:58:e3:c8:87:f0:82:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d43c92474fed383c95fa2ccd83d614f57e563d82
        Validity
            Not Before: May 12 18:01:10 2026 GMT
            Not After : May 13 18:01:10 2026 GMT
        Subject: CN=d9d16f1edb638cb7ff0ee734e9536aa70dd9212d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:07:f8:fb:4f:46:0f:15:d1:10:8a:16:d1:4b:
                    62:01:f6:3e:08:99:15:1a:53:af:95:d1:78:b9:3b:
                    c8:b5:3c:b0:bf:8e:fe:1c:64:af:4f:ca:ea:18:8d:
                    b6:21:c7:da:3e:09:64:c1:de:d7:05:af:82:7e:b3:
                    35:6a:ec:0e:9f:d9:5d:39:93:70:37:bd:15:4d:63:
                    02:e1:55:80:e9:23:aa:c2:5b:c8:75:d8:ee:ba:b8:
                    9c:82:f6:74:dd:f1:90:20:49:b8:56:71:a3:7c:46:
                    b3:6a:00:2f:f8:b2:99:03:99:12:d0:66:1a:21:18:
                    c5:71:4e:c0:94:85:5b:72:0d:02:17:05:39:1c:ab:
                    fe:5f:42:61:07:e9:39:eb:a4:c6:d8:cb:5d:38:fb:
                    a1:e3:ff:73:f1:eb:c1:06:a1:78:5f:ad:bb:72:52:
                    4c:6c:9c:7a:32:8b:60:32:52:de:aa:0f:bc:43:5b:
                    ee:b1:41:ab:af:d8:5c:db:9f:2a:6a:8e:45:8a:bf:
                    f0:93:43:86:b7:05:b9:cd:ca:a4:ea:53:6d:4f:a4:
                    9b:79:46:ee:6b:05:48:01:36:66:ec:ac:85:c4:8c:
                    28:c4:f3:76:82:49:f4:35:1c:00:41:33:1a:6f:32:
                    2e:9d:9f:bf:35:be:3f:e4:a7:f8:f5:f4:cf:12:a4:
                    53:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D1:6F:1E:DB:63:8C:B7:FF:0E:E7:34:E9:53:6A:A7:0D:D9:21:2D
            X509v3 Authority Key Identifier:
                keyid:D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:f6:96:63:09:bb:3d:3d:9b:03:f3:69:62:70:8f:34:11:b0:
         ab:a4:35:0e:01:24:23:db:73:be:a5:55:37:18:fc:ab:55:44:
         17:1d:35:24:3f:39:cf:f4:e2:d0:c0:b3:f2:5a:9a:af:54:0a:
         58:28:57:fe:d2:5b:b1:d6:b0:5b:3b:a0:0f:ea:bf:06:21:7f:
         1a:90:f9:83:69:c4:01:49:16:28:93:d2:70:b6:35:e1:30:1d:
         fa:da:ae:26:33:b2:f9:4c:a8:e0:9f:cd:ad:e5:b0:3b:55:bf:
         b8:a7:0d:3c:f5:50:47:07:4b:c1:ff:00:db:37:e1:e6:a2:f1:
         8b:38:73:a3:0e:10:b1:2f:c9:f5:e7:b4:d2:67:36:86:53:75:
         19:bb:f4:f8:38:13:5b:15:42:aa:76:bf:23:2d:f0:38:50:7e:
         1d:d2:d0:ae:f1:c4:ae:c6:57:01:17:7c:09:4b:eb:2c:10:12:
         20:76:99:f0:54:43:8a:d7:be:c1:34:86:53:8e:fb:de:59:52:
         2a:3b:ed:6f:73:40:ac:57:aa:21:2f:9b:76:83:5c:ba:12:b1:
         3f:fc:e9:0a:49:b8:04:1a:9a:ce:f7:d5:58:4e:7e:36:81:d7:
         e4:83:8b:61:8a:51:75:06:d4:08:46:8c:09:90:b5:f8:5a:35:
         2d:32:88:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:37 2026 by rpki-client