Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
File:                     6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft (raw, json)
Hash identifier:          U3XfJc56QYeWFPhalWqm/8IejiKSe7aMGNewOfyx4dI=
Subject key identifier:   37:DE:C7:53:01:4E:A7:A4:75:3E:81:84:09:7D:23:EC:E9:FA:8F:A0
Authority key identifier: E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87
Certificate issuer:       /CN=e8f239a70043734172d26378bf2106ae72552187
Certificate serial:       019E1CB46B490236409156F1E5820F8CCC6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
Manifest number:          1909
Signing time:             Tue 12 May 2026 15:00:46 +0000
Manifest this update:     Tue 12 May 2026 15:00:46 +0000
Manifest next update:     Wed 13 May 2026 15:00:46 +0000
Files and hashes:         1: 6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl (hash: Xp2JGAOPNPac2Xwrs90J5kdC4dJ3ovHhoUCQbVxpSyQ=)
                          2: 7eoO73qePtRFhoL5aoJ-lw5N7YQ.roa (hash: N75hWXU4tOfgUVgJErnnaShCfMougCipyHaXnV/7ZoQ=)
                          3: ojQoLkOKYxW9nl-zMiY8owgWzH8.roa (hash: pBaal272/3ElS+FK2cqrYkE2HZTuwNTmpIvmWFEPo9E=)
                          4: wW5JJp_Tw5DERjslA8f06nsNm_4.roa (hash: soIoaQ26jxMV+jXruEWHSU8upxFyddMWkhBFffhBkYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:6b:49:02:36:40:91:56:f1:e5:82:0f:8c:cc:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f239a70043734172d26378bf2106ae72552187
        Validity
            Not Before: May 12 15:00:46 2026 GMT
            Not After : May 13 15:00:46 2026 GMT
        Subject: CN=37dec753014ea7a4753e8184097d23ece9fa8fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:58:66:b7:d7:0e:80:93:9d:32:3d:5d:f1:de:
                    3e:ca:50:a0:83:0c:81:19:1e:3c:0b:99:e1:55:16:
                    a1:a1:bd:39:ae:12:6b:a6:3c:ff:ff:32:97:8f:53:
                    35:7e:30:ca:b7:10:7e:18:8f:f9:89:73:0b:92:a1:
                    fa:49:ad:94:90:66:8c:db:cc:c4:85:de:49:05:81:
                    81:ac:25:21:c4:56:df:e2:9c:61:a8:7a:6f:1e:de:
                    4a:b6:cc:ce:f3:78:7f:fa:44:80:8d:2f:a0:2c:30:
                    3f:9b:3f:af:57:a1:10:8b:3a:13:1d:96:64:2f:ff:
                    c6:dc:81:19:87:15:fb:e1:c8:ea:04:52:1d:a0:32:
                    d8:a8:e7:c7:49:62:79:0c:9a:fc:df:12:46:a7:66:
                    14:52:e0:4d:07:c5:cb:88:c8:ac:fb:cc:ab:c1:5c:
                    2c:33:2b:d2:f9:9a:07:f4:0a:fc:7a:05:8b:6d:49:
                    e1:95:f7:1c:3c:ba:ed:65:6a:d7:b1:c1:2d:63:f7:
                    19:31:39:1a:e0:35:14:9e:ed:24:41:f3:51:6f:b9:
                    78:19:4c:0b:f6:9d:0e:be:0e:3d:aa:75:83:42:9e:
                    67:b3:65:da:2b:67:2b:10:ab:60:3f:1b:5e:29:12:
                    c0:73:4c:98:ee:de:e0:7b:51:27:25:a0:be:f3:a6:
                    fa:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:DE:C7:53:01:4E:A7:A4:75:3E:81:84:09:7D:23:EC:E9:FA:8F:A0
            X509v3 Authority Key Identifier:
                keyid:E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:3f:d1:7e:09:9b:77:46:d6:ee:60:49:68:0a:2e:19:c0:94:
         e0:e5:23:ec:e8:7e:24:49:a6:13:5b:ca:89:f1:a5:0a:2a:cb:
         75:de:64:8e:67:71:74:33:31:3e:a5:40:73:02:81:f8:2c:cb:
         60:67:0e:bc:f7:03:89:2c:43:ca:9e:ed:5e:7c:58:bc:cf:7a:
         d8:08:cd:f7:a1:6a:c1:65:8b:9c:61:d2:60:9b:92:45:86:fa:
         1e:c6:78:b5:30:38:7b:65:37:0f:8d:de:47:e2:35:5a:bd:c4:
         00:72:31:1c:99:20:32:43:be:9c:97:61:40:20:20:a0:d8:a2:
         10:11:ec:2f:01:48:ce:00:de:8d:aa:09:bc:ee:9c:00:52:03:
         dd:5c:b4:d5:68:1b:05:60:9a:1f:31:6b:c2:e9:de:a6:26:d4:
         90:65:87:31:d4:fc:91:6c:05:62:fc:52:a5:46:cc:6b:27:06:
         1c:24:87:92:fc:a8:8f:19:ad:2c:a0:87:b3:65:1c:23:1e:2c:
         91:26:9f:44:3c:78:40:3d:70:60:f2:5c:46:75:72:7d:2f:46:
         ef:b7:c0:c3:ed:ee:7c:2d:0e:86:ce:f4:ce:bf:49:02:5d:79:
         52:af:cb:c6:2d:c5:9a:45:c1:d0:6b:87:61:73:bb:03:98:46:
         f9:2e:b2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:16:46 2026 by rpki-client