Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
File:                     1-RqCIwAuMSTluwboLU9go3m5Pc0.mft (raw, json)
Hash identifier:          A1iIF8eB+QKpKbxNXJlPMLkA2lMrHjZSX5kvjsCno7E=
Subject key identifier:   92:FD:DE:D9:84:E0:84:32:B3:EE:C2:1C:9A:66:58:2E:90:42:CE:19
Authority key identifier: F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD
Certificate issuer:       /CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
Certificate serial:       019E1CB512AFDE63A542FB168B42BC390E52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
Manifest number:          13B7
Signing time:             Tue 12 May 2026 15:01:29 +0000
Manifest this update:     Tue 12 May 2026 15:01:29 +0000
Manifest next update:     Wed 13 May 2026 15:01:29 +0000
Files and hashes:         1: 1-RqCIwAuMSTluwboLU9go3m5Pc0.crl (hash: 4eKIlWGTGd0VITVwqaiMyFOG1PcB88xnZ9ZpzIk3lvQ=)
                          2: ysWkHcC4m8dES9G1oMzcknx5ywc.roa (hash: XtvZJNZbz5U46btMQCpXBJcIu+lpBGoaLYth/6jGpzQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b5:12:af:de:63:a5:42:fb:16:8b:42:bc:39:0e:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
        Validity
            Not Before: May 12 15:01:29 2026 GMT
            Not After : May 13 15:01:29 2026 GMT
        Subject: CN=92fdded984e08432b3eec21c9a66582e9042ce19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f4:99:57:eb:c2:fd:8a:e9:28:0d:ce:f7:d5:
                    a7:ec:c3:2e:09:3b:0f:87:b1:cc:f7:5a:ba:48:34:
                    97:c0:dc:01:73:f5:91:aa:ed:00:f8:0c:d4:a6:24:
                    4a:ac:51:05:82:85:ad:1f:8f:5e:02:63:eb:d9:cc:
                    76:95:74:a6:61:85:8e:df:1a:09:be:f1:75:85:df:
                    19:5c:7b:1a:d1:8b:78:74:77:f0:7f:12:2b:fd:bc:
                    58:57:34:1a:18:4a:0e:bb:c1:b2:de:85:7f:8b:71:
                    ba:3d:8b:ae:06:a1:b2:53:66:78:c1:bd:21:30:5a:
                    13:85:4d:44:ab:c4:8c:c4:2e:68:e2:d7:82:a8:d5:
                    c1:bf:6e:e1:78:37:77:97:7e:08:6f:76:f1:56:13:
                    c9:0e:0e:00:fe:8d:ac:0c:51:67:7a:57:96:bf:60:
                    e9:8a:16:f1:1b:22:0b:a2:9b:49:b5:c0:27:bc:b7:
                    ad:97:99:5a:93:9f:4e:d2:00:8a:8c:2c:7a:a3:7d:
                    d5:f1:5b:d2:fa:85:71:d2:b0:e8:f6:af:3b:7e:91:
                    95:0d:79:9d:51:e1:c7:50:e1:c5:e5:39:35:11:ec:
                    4e:0e:8b:a0:d1:b2:1a:35:cf:52:8f:31:1e:7b:75:
                    d3:fa:6a:29:6c:d2:06:28:8b:6a:ed:99:07:ab:9a:
                    e3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:FD:DE:D9:84:E0:84:32:B3:EE:C2:1C:9A:66:58:2E:90:42:CE:19
            X509v3 Authority Key Identifier:
                keyid:F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:5a:aa:96:ea:15:92:ed:2b:12:1a:8d:19:20:58:23:34:bf:
         22:db:2e:15:92:59:d6:17:9a:f3:4c:59:ee:63:46:ca:5e:ba:
         7e:03:fa:39:c2:db:11:49:52:99:fc:e8:b3:55:2a:7a:18:b2:
         bc:7e:0f:2e:96:8e:01:b2:5c:25:91:94:3a:a7:b5:de:14:9a:
         2d:7b:4c:8f:94:9b:51:74:00:ce:53:b0:c2:15:51:11:6a:f0:
         12:92:ca:bc:4c:93:de:f5:eb:88:59:81:ab:39:6a:0d:3d:80:
         81:c8:65:78:4a:96:23:34:e9:16:e0:68:9e:7a:4b:c3:e6:f1:
         d5:69:52:72:af:83:df:f5:36:33:fb:fe:88:8d:e2:51:24:1e:
         9b:27:f6:60:0c:77:09:71:e4:10:56:a8:9d:a8:71:f8:7f:6b:
         b5:6f:70:22:2f:5c:76:d1:67:53:24:c8:8a:33:50:f6:d5:4f:
         90:d9:ba:9f:0d:f0:7f:d3:64:9c:50:98:62:63:8b:b3:40:1f:
         56:74:b2:74:69:30:24:5c:42:ce:af:69:a0:dd:20:32:4d:7d:
         8f:cb:a0:e5:7b:a4:34:69:cd:ba:b6:ce:ea:4b:55:0e:80:38:
         53:99:2b:4e:c4:09:b7:ca:b7:a8:68:cc:9c:35:dd:81:c2:6c:
         60:49:f0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:24 2026 by rpki-client