Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft
File:                     mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft (raw, json)
Hash identifier:          DP/CgEQwq1svuZIF2zNspZ5w3pcatef4V9dJ0VTo43s=
Subject key identifier:   5A:D2:EC:5A:A3:5D:3B:02:8E:24:88:78:99:B7:D7:B6:05:DB:AD:AB
Authority key identifier: 98:84:55:84:AC:80:94:C1:80:6B:73:A6:F5:3E:46:B9:A2:8E:81:2B
Certificate issuer:       /CN=98845584ac8094c1806b73a6f53e46b9a28e812b
Certificate serial:       019E1E6C878F03BD780E3285A3B663D2A258
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft
Manifest number:          1906
Signing time:             Tue 12 May 2026 23:01:29 +0000
Manifest this update:     Tue 12 May 2026 23:01:29 +0000
Manifest next update:     Wed 13 May 2026 23:01:29 +0000
Files and hashes:         1: celudLIkwqQs5BVcabVek4AUA_8.roa (hash: Z6ja4JJYaOm0UOAS7DT4QbK0buCK6md62bjvBxBcr0o=)
                          2: mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl (hash: OjC6FDttwcTcWGa4kD1n4ORjCGOx7tA6yaSskKkyBI8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:87:8f:03:bd:78:0e:32:85:a3:b6:63:d2:a2:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98845584ac8094c1806b73a6f53e46b9a28e812b
        Validity
            Not Before: May 12 23:01:29 2026 GMT
            Not After : May 13 23:01:29 2026 GMT
        Subject: CN=5ad2ec5aa35d3b028e24887899b7d7b605dbadab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:39:10:79:97:e7:c1:d2:e1:18:ca:aa:46:e2:
                    54:6e:ff:20:2a:87:47:b8:b3:d9:19:1a:d1:d3:89:
                    dc:52:6a:96:cc:fc:ac:f7:78:0b:f7:57:51:03:75:
                    67:53:6d:95:da:27:07:59:a7:eb:34:4c:55:f6:cf:
                    8f:35:b7:9d:15:12:4d:0c:dc:84:1e:e0:36:54:d4:
                    88:14:70:22:4e:fb:44:c6:29:00:8b:8b:3d:1d:95:
                    64:a5:7f:89:a8:08:b4:a5:b8:3b:4c:c7:ab:1f:96:
                    b7:e3:38:f8:b6:f8:2b:4a:e0:1a:70:c6:48:56:04:
                    a2:ef:58:b8:e9:4f:31:99:2d:a3:fc:1f:33:46:d6:
                    40:b5:f1:69:2f:d0:43:7b:c5:1d:94:47:ae:a5:26:
                    28:54:fb:12:a3:f7:47:9b:b7:2f:0c:c3:f2:74:6d:
                    d6:0a:40:6f:ef:c8:72:80:3b:5a:f1:5b:f8:b4:8b:
                    04:24:1b:7e:5d:0a:46:4e:5f:c8:c2:65:9f:d9:95:
                    b7:15:c0:ee:e8:53:3b:f4:8f:ed:6e:b9:b8:d7:c2:
                    52:cc:32:f3:c2:c1:9f:7e:46:44:9f:57:82:37:18:
                    f6:b3:ba:31:49:c0:c5:74:08:e7:e2:56:4b:3d:94:
                    30:41:33:96:29:87:af:e1:2b:6e:ca:68:39:4b:7a:
                    ab:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D2:EC:5A:A3:5D:3B:02:8E:24:88:78:99:B7:D7:B6:05:DB:AD:AB
            X509v3 Authority Key Identifier:
                keyid:98:84:55:84:AC:80:94:C1:80:6B:73:A6:F5:3E:46:B9:A2:8E:81:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:25:ee:38:cc:87:67:d2:13:a8:a5:65:9c:dd:6b:3d:d5:52:
         74:b1:22:61:c1:e7:7a:1d:e3:b0:42:9e:04:c0:e0:b0:e8:b9:
         ce:74:7c:0c:46:20:0d:aa:57:89:a5:f2:a4:3d:77:4b:37:b4:
         81:5e:e0:88:4c:50:c6:8f:a1:ee:8d:a2:9b:54:52:32:f8:37:
         c0:b9:06:43:ff:04:68:c4:e4:4e:79:76:16:bf:0e:d5:34:8a:
         b4:5d:93:26:71:b4:74:47:db:d2:38:bb:45:c8:0d:27:6a:16:
         c1:69:06:85:a2:c5:80:9c:a7:98:e4:55:68:60:f3:6d:26:6b:
         3f:7b:5f:f8:2c:93:23:16:11:d2:49:0a:6d:97:85:a0:9d:00:
         09:a2:d9:f5:02:e6:ad:a6:3e:56:44:44:55:29:ca:40:3a:b0:
         2c:99:4f:b5:27:23:00:33:04:79:25:37:86:70:84:d4:73:bf:
         9b:ed:50:36:49:17:55:70:2b:08:aa:8b:f4:54:23:54:62:0c:
         5e:f8:a9:50:da:b6:d2:4a:34:fe:53:4a:f2:5e:b7:37:9f:bd:
         6a:5a:56:7b:b6:ef:4d:7f:cb:12:8e:55:6a:85:ea:ae:6a:d7:
         cf:fd:f2:0e:1e:f8:a7:de:52:28:ab:0d:3d:1f:3b:ed:b4:1b:
         a1:ac:28:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:06:57 2026 by rpki-client