Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
File:                     rf_xvXcSh87UxN1tioUdKtdwZh0.mft (raw, json)
Hash identifier:          59t3Dm6S/MGf2eBMQ/qikfpxnvCbl2JxQC7v9J1LT4k=
Subject key identifier:   96:5B:53:3E:D9:50:A7:5D:3C:7B:A9:3F:80:B2:48:D1:9C:55:31:42
Authority key identifier: AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
Certificate issuer:       /CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Certificate serial:       019E1DFE3531B208D5B1EB64DB4536CE12C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
Manifest number:          1909
Signing time:             Tue 12 May 2026 21:00:59 +0000
Manifest this update:     Tue 12 May 2026 21:00:59 +0000
Manifest next update:     Wed 13 May 2026 21:00:59 +0000
Files and hashes:         1: YHt9YKkoQObFkpk4bFMfaZH83j0.roa (hash: 4fsNZayDAjiJa4ZZH0ABpTRn6fHRN9+IikwCGEjvWBc=)
                          2: rf_xvXcSh87UxN1tioUdKtdwZh0.crl (hash: DGzEpIBHCO9Eh+ZVn8ugPW7eUKNv5EqWjhzS+jRPXwY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:35:31:b2:08:d5:b1:eb:64:db:45:36:ce:12:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
        Validity
            Not Before: May 12 21:00:59 2026 GMT
            Not After : May 13 21:00:59 2026 GMT
        Subject: CN=965b533ed950a75d3c7ba93f80b248d19c553142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9c:24:fe:37:ed:95:93:c3:02:5a:98:62:76:
                    37:92:47:f9:4b:b7:f3:e3:2a:71:f5:ea:32:e4:fa:
                    bf:fa:35:d4:26:ea:00:fa:36:3e:47:bb:38:0d:b0:
                    2c:0c:6a:79:7f:5a:e8:c3:5e:bf:68:69:91:b7:98:
                    8e:e8:fa:ae:63:48:5e:5d:09:3a:1a:90:20:cd:db:
                    17:61:85:e6:6b:5b:0b:72:15:4f:36:2f:e1:64:c6:
                    ab:d5:8b:98:99:a5:5b:c3:5f:de:d6:af:d8:d1:dd:
                    02:72:76:a4:8e:c3:7b:3e:75:89:fa:7a:c8:7c:f5:
                    7c:43:3a:c0:2d:3b:53:4f:60:ce:d1:05:9b:57:fa:
                    8c:30:d2:a1:fc:ab:0d:6c:1d:15:40:f6:4f:71:96:
                    69:fc:99:94:30:c1:5c:8d:93:5c:90:46:f4:d4:95:
                    47:ac:0d:37:fc:a6:0a:ea:d3:b1:21:c4:a1:a0:b3:
                    56:c1:e7:5c:7a:38:ad:70:e9:04:9a:4d:8f:7a:5e:
                    dd:55:e3:39:a2:e3:e9:62:0e:69:98:f6:83:9e:28:
                    ca:e3:21:37:65:c5:5b:56:ee:7e:e3:cb:32:8a:8c:
                    c8:15:4f:58:30:60:22:fc:89:dd:93:7b:00:1f:12:
                    98:6f:07:20:a9:e4:52:ee:0b:a3:b3:0f:c7:40:34:
                    a5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:5B:53:3E:D9:50:A7:5D:3C:7B:A9:3F:80:B2:48:D1:9C:55:31:42
            X509v3 Authority Key Identifier:
                keyid:AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:52:0d:45:c3:34:13:0f:31:ec:51:17:4e:2f:b5:5e:2e:9b:
         b9:5c:89:fe:d1:bf:06:b3:86:35:24:d7:4f:5b:f3:fc:f4:bc:
         ee:a9:9a:3c:0b:6c:c5:a7:2a:2c:41:e4:26:a2:9b:1e:9d:f0:
         0a:3d:aa:91:7c:4d:80:3c:6d:2a:84:3f:5b:2c:d0:da:82:42:
         93:27:6b:9c:0b:71:67:61:e1:c9:3b:ac:5d:29:17:34:69:93:
         41:be:b1:19:d6:d7:24:7d:b3:6c:0f:45:34:d7:18:66:d6:18:
         03:c0:c4:d5:78:f3:ec:0c:65:41:ae:67:4a:bf:2b:40:19:36:
         a4:8e:09:bf:31:09:bb:6d:e7:69:32:8e:a5:bc:f8:72:8c:d2:
         a5:14:88:08:9e:11:76:68:2a:ae:fd:2d:e6:7f:0d:d2:d5:48:
         12:49:26:ad:31:0b:40:56:dc:eb:76:39:95:f2:9b:fe:6a:1d:
         2b:b8:16:8a:a9:cf:a8:b3:de:1f:82:fe:18:c5:ac:14:2e:9f:
         97:38:bb:9e:6c:7a:6f:e3:4b:88:1d:7d:f9:b5:40:35:09:ec:
         02:dc:9c:2b:f1:6e:06:24:6f:40:b5:ee:45:d9:94:f6:b1:d3:
         8a:07:ef:1a:65:40:54:4a:6d:3d:8e:f2:82:16:be:9f:d8:ea:
         48:a4:f1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:39:17 2026 by rpki-client