Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
File:                     _Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft (raw, json)
Hash identifier:          mexHY5trtM5Hw+4J1v3n9WdWX61hh4M/s6/aEJVL7AY=
Subject key identifier:   AA:5E:4F:D6:9B:3C:A1:45:57:47:BF:E9:AB:5D:92:FD:9D:00:6F:9B
Authority key identifier: FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02
Certificate issuer:       /CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
Certificate serial:       019E1F119F7DFDEFA12D8F8ADACB4BFB1F61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
Manifest number:          1909
Signing time:             Wed 13 May 2026 02:01:49 +0000
Manifest this update:     Wed 13 May 2026 02:01:49 +0000
Manifest next update:     Thu 14 May 2026 02:01:49 +0000
Files and hashes:         1: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl (hash: tNfTtj2v1DAywM5V2xKYFbgKxA6sYIk14PGAGbdrnUE=)
                          2: k9c2O8_Xy_eChgcz-yhyQZaZprY.roa (hash: +knLZsYjdnVF7uKOf0qT11DuyDMhYqWK5WJnzaJ/tgc=)
                          3: r4XvX6Ei1LluIE8pavjpEdLLxJ4.roa (hash: KL22Fozq8IVy1aV+io1l46k9R+MjRQle/pBvY+h3kcU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:9f:7d:fd:ef:a1:2d:8f:8a:da:cb:4b:fb:1f:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
        Validity
            Not Before: May 13 02:01:49 2026 GMT
            Not After : May 14 02:01:49 2026 GMT
        Subject: CN=aa5e4fd69b3ca1455747bfe9ab5d92fd9d006f9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a3:ee:23:21:c3:89:cd:3a:25:11:c3:eb:44:
                    67:ed:1c:06:f8:b8:da:13:08:64:b5:1f:3f:66:eb:
                    fe:b8:d0:ce:3f:86:ad:79:e0:b8:30:9b:0b:86:9f:
                    8e:11:61:17:1a:87:b1:ca:1f:82:6c:52:c8:03:c0:
                    d0:d9:39:cf:66:5c:f5:a0:99:24:c1:63:87:ec:f2:
                    d9:a7:17:23:87:c9:ff:7e:32:d2:b7:65:26:a9:d2:
                    26:8c:44:48:6e:88:d4:61:6d:7d:53:1d:15:13:f2:
                    d7:8e:45:9f:b9:0c:53:92:ba:93:b8:d9:f1:f7:a0:
                    0d:18:a8:13:22:32:52:1f:72:7f:11:3e:b5:c1:ae:
                    8a:da:d4:62:ff:88:96:12:38:86:62:39:4e:ac:9c:
                    3b:cc:d1:28:4b:54:e4:a8:d4:b2:64:62:05:30:6e:
                    50:ec:51:a4:b7:c3:d3:d3:85:5a:e2:3d:62:a5:63:
                    4d:7e:19:d9:f9:dc:5d:9a:83:03:e0:71:07:8c:5b:
                    19:4a:16:35:bd:54:5e:62:b6:94:d7:81:94:5f:f6:
                    b6:3b:e7:f3:69:54:b3:eb:42:66:25:dc:58:cf:45:
                    b9:e0:0f:a5:c5:35:bf:05:3e:2b:0e:7f:05:00:66:
                    08:65:78:37:b7:97:ee:32:54:fa:94:58:39:fe:c5:
                    30:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:5E:4F:D6:9B:3C:A1:45:57:47:BF:E9:AB:5D:92:FD:9D:00:6F:9B
            X509v3 Authority Key Identifier:
                keyid:FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:41:e3:b4:fe:b9:0f:7b:05:ad:92:f0:3c:6c:97:3e:06:fa:
         44:2d:42:d5:4a:51:88:9d:e3:ea:b8:0d:74:a0:22:c6:e3:4f:
         d5:be:9b:ac:4e:4e:4a:8f:4f:33:a1:40:ea:60:f4:2d:62:a3:
         f2:7b:6d:94:d5:b4:89:98:ff:74:9d:ff:f9:57:5e:73:cf:92:
         88:20:a6:aa:f9:d1:33:9c:30:dd:f6:ff:aa:5e:23:e1:a5:eb:
         02:11:ce:12:75:93:79:56:3b:12:b3:6c:a5:70:17:36:d1:49:
         f8:02:49:42:e3:84:7c:c6:0a:7c:9e:a1:e6:d4:88:5b:ca:6d:
         e4:ab:43:8a:d0:8e:5f:fd:e8:4c:52:24:c9:e4:ef:e4:6c:d4:
         68:c4:52:53:dd:89:ec:83:eb:a6:b1:12:b9:b4:f2:c1:c1:f2:
         ed:f2:a6:7b:39:e8:a5:b8:8d:57:eb:fd:e6:ca:fe:e7:30:3f:
         b2:3c:24:ec:d6:96:c2:41:4f:7d:43:db:be:d7:b6:1c:57:d6:
         b5:a7:7c:75:18:2c:a2:07:2b:4e:cb:05:0f:7f:f9:3e:36:6d:
         70:3d:37:80:2f:37:03:9e:ff:53:b5:a3:41:b9:32:22:1c:e7:
         07:ae:64:6e:01:30:85:f1:7e:be:c6:61:e6:30:31:3b:e7:aa:
         79:fe:bf:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:30:19 2026 by rpki-client