Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
File:                     1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft (raw, json)
Hash identifier:          BaaBJ+mrNohjdkcOPAMtKBtFCug2t7ShGaEJpLgYX2g=
Subject key identifier:   C2:12:E5:21:E4:0C:DD:04:BA:2A:6A:87:72:0C:2F:EE:4F:12:0A:2B
Authority key identifier: F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF
Certificate issuer:       /CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
Certificate serial:       019E1C46B5D0717870C21FC9365B43AF04BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 13:00:56 +0000
Manifest this update:     Tue 12 May 2026 13:00:56 +0000
Manifest next update:     Wed 13 May 2026 13:00:56 +0000
Files and hashes:         1: 1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl (hash: Hm0IvIM8SpkVnx3BVVFtw3a90QB8nwza1k8FEPKEuAE=)
                          2: _WoEsqjGda06FNvYzNcE2_IEZYM.roa (hash: goW3pvaXPQUMEleV0Ier3m35JeMofiuKmtRcD80IT5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:46:b5:d0:71:78:70:c2:1f:c9:36:5b:43:af:04:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
        Validity
            Not Before: May 12 13:00:56 2026 GMT
            Not After : May 13 13:00:56 2026 GMT
        Subject: CN=c212e521e40cdd04ba2a6a87720c2fee4f120a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a2:40:f7:77:47:73:6c:e3:a1:fb:a0:c8:07:
                    57:95:4a:2e:7c:4f:ab:48:7a:67:59:c2:7a:9b:8c:
                    0b:13:c1:bf:83:d3:66:a4:83:18:d4:f9:36:ce:b5:
                    3d:21:dd:24:e3:53:58:e1:fa:51:93:9f:31:34:90:
                    f4:a2:aa:b8:3d:d3:81:e2:fd:ef:94:60:37:ec:32:
                    fb:25:72:af:0a:d2:7a:7c:39:a9:2d:46:3e:92:3c:
                    d7:11:f0:11:c5:52:08:06:8f:a0:a4:1d:a6:29:92:
                    ec:93:5b:8a:e1:0a:e0:2c:be:80:43:8e:71:67:9f:
                    2f:a1:3e:52:22:c9:98:65:03:33:ee:94:24:cc:7e:
                    b3:d8:90:3a:fa:37:23:8d:7b:73:c6:18:38:99:35:
                    16:4b:13:92:f9:1a:5d:0a:53:0a:d8:e5:c4:94:0d:
                    f0:f9:ba:5b:da:2b:ff:95:12:9e:1e:f9:6e:0e:11:
                    eb:34:51:43:4e:77:8c:1f:ef:72:32:6f:33:f8:0c:
                    01:e8:39:82:2d:a4:53:79:fe:89:90:26:0a:8a:1b:
                    84:c8:6d:17:63:6d:59:4b:63:70:0b:b6:dd:63:9c:
                    93:93:fe:4c:d9:cf:5b:e9:b3:69:7a:53:26:19:7a:
                    5d:4c:ee:75:90:da:f2:0a:2a:d2:29:f7:f5:97:17:
                    b6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:12:E5:21:E4:0C:DD:04:BA:2A:6A:87:72:0C:2F:EE:4F:12:0A:2B
            X509v3 Authority Key Identifier:
                keyid:F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:f9:bc:88:69:24:36:8c:a0:61:1f:e6:05:29:c8:c2:00:22:
         73:46:dd:72:14:d8:cf:ee:a7:7f:4f:20:a2:5e:91:27:5a:65:
         cf:e6:d8:be:f7:b7:74:cd:b2:21:c6:63:ed:52:8f:f0:82:7f:
         0e:70:6d:06:92:d4:cd:59:da:0b:58:0b:ab:8e:59:ec:25:30:
         91:82:f7:6d:c8:60:4c:0f:1c:f8:99:19:bc:be:98:6b:ae:d4:
         ac:d2:c9:f8:b2:f7:75:58:c1:eb:77:1a:bb:07:a2:1a:fe:6a:
         65:d9:f3:32:39:32:76:61:88:55:bd:5e:63:7f:89:24:00:17:
         6d:7c:78:bd:a1:02:7c:97:81:81:41:82:b3:09:e0:48:d6:d7:
         bf:c5:b8:76:ef:b5:e6:0f:39:e6:7e:77:68:01:3d:8c:99:7b:
         4c:e3:6f:d5:23:b3:f0:e4:46:55:98:c7:7b:b3:85:4a:06:84:
         f5:c7:be:f1:c1:1a:02:d1:d2:ee:be:43:b7:40:ff:02:3f:3c:
         16:e4:89:65:f0:47:85:9d:f3:68:5e:14:c9:a0:a8:51:d4:b5:
         c2:a9:70:05:51:19:bd:6f:55:b0:68:63:3f:b7:d5:e2:93:c5:
         34:10:49:cd:f3:03:64:60:4b:45:1f:79:6d:28:44:96:b6:65:
         9a:08:f1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:09 2026 by rpki-client