Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
File:                     U0Yz8Z9h1lRuur996ft6qYftW_M.mft (raw, json)
Hash identifier:          jEGF3lXuBOTuFB6gE1je3AyX8LMQwIV798UZ3qYMSw4=
Subject key identifier:   76:33:12:51:61:4C:46:D5:EE:46:5F:FE:A2:1D:C7:16:0D:15:05:FF
Authority key identifier: 53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3
Certificate issuer:       /CN=534633f19f61d6546ebabf7de9fb7aa987ed5bf3
Certificate serial:       019E21362070C585B998F35C80BA8A0F4A09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 12:00:55 +0000
Manifest this update:     Wed 13 May 2026 12:00:55 +0000
Manifest next update:     Thu 14 May 2026 12:00:55 +0000
Files and hashes:         1: TerM9KfzJsRRkdvjMKo5OW1_vg4.roa (hash: 4hf+yhqdXpUZCf15GpEdNxp1wNaJ6uMaWZCGmy9se7g=)
                          2: U0Yz8Z9h1lRuur996ft6qYftW_M.crl (hash: owkMnGvllGI90x8MGKUETyjuXppuLHQkuVehJuYsDrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:21:36:20:70:c5:85:b9:98:f3:5c:80:ba:8a:0f:4a:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=534633f19f61d6546ebabf7de9fb7aa987ed5bf3
        Validity
            Not Before: May 13 12:00:55 2026 GMT
            Not After : May 14 12:00:55 2026 GMT
        Subject: CN=76331251614c46d5ee465ffea21dc7160d1505ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e9:8a:14:f5:5f:59:c0:54:2e:05:80:f9:c7:
                    cb:1c:28:23:70:61:6b:e8:25:47:42:4a:38:d0:d2:
                    b3:d3:03:d6:82:27:d7:01:f3:5a:e3:e1:19:43:57:
                    a2:2f:ad:5c:b4:0d:be:62:49:f0:20:4b:65:52:39:
                    b7:da:21:46:bd:b0:1c:8e:4f:4c:69:e1:15:ab:92:
                    4e:03:31:65:d8:c5:02:ae:77:da:96:c2:82:7d:5e:
                    84:f1:82:72:56:f9:11:06:0a:f9:e3:a8:6a:5e:0c:
                    2b:51:56:da:8f:70:43:ff:77:06:88:e2:2a:16:20:
                    f6:c1:26:03:e9:a3:e0:6a:a2:91:8e:f5:aa:67:64:
                    b5:ff:ec:9c:70:6d:67:01:0b:b2:de:23:11:6c:20:
                    3d:80:9c:a8:d0:20:95:1f:d0:0d:84:01:14:55:9b:
                    93:ac:30:af:b6:86:1b:0a:d8:d9:50:79:bb:0f:cd:
                    19:57:ec:16:b3:bf:f1:c2:0f:04:83:86:74:10:a9:
                    ed:44:9f:5e:1f:68:34:fc:3d:28:b8:96:19:b2:3a:
                    b7:83:6a:9d:9e:d5:cf:ed:7d:c3:7d:be:85:7a:a4:
                    62:75:da:66:e5:cf:5d:53:c9:db:25:49:b6:96:6b:
                    f7:c3:d7:a5:41:10:ad:6a:44:10:f3:03:56:a8:3c:
                    2a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:33:12:51:61:4C:46:D5:EE:46:5F:FE:A2:1D:C7:16:0D:15:05:FF
            X509v3 Authority Key Identifier:
                keyid:53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:c1:46:df:aa:b0:d9:96:86:c5:ed:a7:20:9d:27:e2:0c:fa:
         45:a6:73:e4:9a:51:b2:05:05:26:5d:fc:ec:54:13:85:db:4e:
         5d:cc:c6:3c:ae:85:8a:bc:b4:ea:d4:ed:c5:6a:10:9d:09:ac:
         1c:3d:98:eb:12:f2:93:d2:3d:d9:51:bd:fa:69:84:5e:6c:23:
         e4:d9:6f:9e:03:ad:0a:ff:14:96:0b:ea:0a:60:fa:b2:9a:e0:
         22:9e:50:7f:51:1d:d0:05:a6:4d:0f:ea:b9:c4:2b:e3:dc:37:
         a7:b9:dd:c2:20:40:3f:29:51:e2:61:61:a8:6c:52:1c:f4:0c:
         46:b4:fd:a3:0e:d8:1c:01:26:a4:da:a0:1e:05:81:35:00:77:
         1b:34:60:6e:25:17:05:73:98:38:20:83:8b:50:b8:e7:a4:65:
         d4:15:9b:3b:52:c6:a8:95:0c:83:77:34:99:7b:cc:d5:1a:9b:
         b4:fb:37:55:39:ba:0d:85:18:4e:eb:6e:31:50:3b:59:61:cd:
         0c:db:c5:e6:b9:a4:e8:5d:2e:2c:13:ea:c6:4a:4d:91:8c:33:
         e4:98:80:d0:45:dd:c4:45:80:97:84:0b:0c:c1:68:c1:5a:37:
         38:9a:e9:0c:db:ff:5c:50:53:2d:e3:8f:9a:84:f2:c4:4a:0c:
         84:09:5c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:13:04 2026 by rpki-client