Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
File:                     fINUmPNRmaFXGWTYVcOHd1FoGrk.mft (raw, json)
Hash identifier:          zCioSTNE+9AtVpFWe9FurJPF3Bq3l58x9qJPs9ZrJr0=
Subject key identifier:   67:33:89:E7:63:17:4D:82:78:61:80:74:20:50:4C:89:29:33:7F:F8
Authority key identifier: 7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
Certificate issuer:       /CN=7c835498f35199a1571964d855c3877751681ab9
Certificate serial:       019E1EA2F364556B283E2EEDAEC6D874CF50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 00:00:56 +0000
Manifest this update:     Wed 13 May 2026 00:00:56 +0000
Manifest next update:     Thu 14 May 2026 00:00:56 +0000
Files and hashes:         1: ELCDYTv3WHzsKB02ZeWjPVSl8bs.roa (hash: 5NNB0UawGRF+n/YW9EFq+myT4uZRZ/4c2by4eferMo4=)
                          2: fINUmPNRmaFXGWTYVcOHd1FoGrk.crl (hash: 0DjkSgH4vB5OgEZ+SCHaTDkv50godpR7K10Qu2iYMKw=)
                          3: wntuteFp_hWVEVUhXXzIfGeZGYg.roa (hash: COpIba0jOKYphmoFlVevEYtGvAQbqGOdq7aV51RcCa8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:f3:64:55:6b:28:3e:2e:ed:ae:c6:d8:74:cf:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c835498f35199a1571964d855c3877751681ab9
        Validity
            Not Before: May 13 00:00:56 2026 GMT
            Not After : May 14 00:00:56 2026 GMT
        Subject: CN=673389e763174d827861807420504c8929337ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1b:77:0f:23:fe:54:18:f2:eb:08:64:0c:d9:
                    bd:51:bc:ea:43:f4:da:ba:fb:64:81:50:87:33:62:
                    b8:2c:55:1d:56:74:b5:83:5c:d5:4c:41:f7:dc:de:
                    9d:f1:e0:a1:49:bc:cf:b4:c7:b2:94:8c:39:6f:e3:
                    45:da:16:63:22:5c:80:b6:41:08:6a:d9:ed:7a:ca:
                    25:b0:95:8e:bf:70:97:48:54:9e:3e:24:21:7a:da:
                    5b:45:a1:22:68:92:87:5e:ba:1d:ba:be:78:da:08:
                    2b:3d:bf:af:22:46:d1:ca:a7:5a:de:b5:f4:32:db:
                    1a:65:c2:cb:93:28:79:b4:9b:9f:19:55:6f:0c:b7:
                    2e:f9:e1:72:da:d2:37:71:02:31:a0:d6:34:07:69:
                    80:f1:5a:46:b4:16:d0:d8:89:41:99:45:27:62:dd:
                    16:7b:88:9b:d3:3f:37:34:fe:26:c7:08:be:2c:2f:
                    3e:ef:83:d4:bf:4a:d8:2f:d2:75:c5:6a:0e:63:ad:
                    4c:19:04:0b:d4:28:c9:30:1b:09:49:62:1f:19:fc:
                    86:01:84:04:a2:16:cf:ca:47:f2:37:c3:99:63:4d:
                    90:36:89:df:ea:6b:b0:1c:e7:5a:52:5f:8d:20:82:
                    52:4d:ee:aa:59:fb:de:85:67:bb:bf:4c:9f:31:dc:
                    45:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:33:89:E7:63:17:4D:82:78:61:80:74:20:50:4C:89:29:33:7F:F8
            X509v3 Authority Key Identifier:
                keyid:7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:05:6e:06:0e:02:6b:f1:4c:09:14:c6:32:a7:d0:14:d9:68:
         d7:15:47:40:7d:87:cb:76:69:ac:45:47:98:dd:b4:d3:3c:b0:
         df:d8:b3:56:40:39:7c:0e:50:a1:8c:13:14:f2:86:c1:73:67:
         55:d7:3b:d7:a8:71:75:92:98:6a:c3:5f:67:ed:a1:8c:1b:c3:
         0e:36:4d:b2:37:46:c3:4e:b2:96:ba:f3:9c:08:6b:40:67:f6:
         a5:53:2c:33:6a:cc:a5:d9:43:44:ae:a7:07:8c:1e:92:ce:a8:
         35:bd:e0:fe:25:02:a3:57:90:75:ff:12:0b:12:35:6f:21:cc:
         2a:30:05:2c:94:9b:c5:a0:a5:8f:30:0b:1c:a9:24:0f:1d:10:
         c1:2e:72:48:56:51:13:02:54:c2:89:13:d1:a4:f9:49:bd:89:
         ab:5c:37:e4:32:6e:f5:3b:5a:45:88:5d:25:8a:90:25:d0:a2:
         11:06:79:9b:20:d0:73:52:56:27:7e:c5:2a:0d:96:55:d4:aa:
         4a:21:94:d6:75:75:b8:f5:84:31:24:f0:e8:39:03:f8:4c:73:
         7c:e3:2d:d8:fb:f0:ee:b5:a4:4c:63:e8:94:28:0d:fd:f1:ee:
         ed:83:19:20:b9:4e:2e:0b:d5:e3:3c:41:0d:f5:81:87:73:12:
         5e:1e:ec:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:09:44 2026 by rpki-client