Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
File:                     0sKw7hh5KECQZdGe6cCFjowX6hM.mft (raw, json)
Hash identifier:          kuNmOj6AD+/EfgYZI5mqcC9ibQ9jqAdxcynXWSgdlEA=
Subject key identifier:   51:67:FA:35:35:B1:8F:46:76:6F:9D:9E:19:0B:03:B4:7A:78:4E:49
Authority key identifier: D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13
Certificate issuer:       /CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
Certificate serial:       019E1D59CF1639A4130478C650B02C5151EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 18:01:25 +0000
Manifest this update:     Tue 12 May 2026 18:01:25 +0000
Manifest next update:     Wed 13 May 2026 18:01:25 +0000
Files and hashes:         1: 0sKw7hh5KECQZdGe6cCFjowX6hM.crl (hash: ffC5FDEMWSpTH8ZgFLHXZVAKnMkhc7uO2Ee5FB9S9OU=)
                          2: Yd0ISItT25nHU31sDdFobBWtukM.roa (hash: BpfqZXiuQQu7xNd4WIEYwPFlxLRUFTvBsSR5u9ClQwA=)
                          3: _73P6T6R3O1x9vvtr2p4XPdIlxo.roa (hash: LQcRZBmXpQKqNcm08uPyPyuOJz2qTqd9JQZhTsJFO+g=)
                          4: cZX-vXoSkiVX1DDpE2stQryxES0.roa (hash: DZ4toH+8MBJm3/Ie0kvOYB9O/Ot8hRGuCx70ecPDboc=)
                          5: eoJQmOi00RtisYT69k2lcfpvuTI.roa (hash: zyn9MIC0PYdNEQ/1NTEkC1cOqVRsDhiTSo2jAFn7xpI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:cf:16:39:a4:13:04:78:c6:50:b0:2c:51:51:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
        Validity
            Not Before: May 12 18:01:25 2026 GMT
            Not After : May 13 18:01:25 2026 GMT
        Subject: CN=5167fa3535b18f46766f9d9e190b03b47a784e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6f:98:5a:84:bb:c3:92:ed:02:a0:d6:f9:83:
                    a2:3b:31:5e:58:73:69:6f:f8:58:ed:56:30:cf:d6:
                    da:03:24:dd:e6:26:c3:85:19:91:72:cb:e8:99:69:
                    1b:d5:3a:1f:80:09:4e:54:79:d6:08:74:11:0f:85:
                    6c:37:e8:13:e4:46:69:c3:0a:3b:35:f0:2e:fd:0e:
                    d4:47:45:16:57:22:1e:ad:a0:01:9d:a3:2e:25:19:
                    42:01:98:68:74:d6:ef:e7:d6:7c:a7:e9:da:42:b5:
                    28:dd:39:3d:89:68:2f:ee:27:20:a8:cb:89:b3:95:
                    8e:90:a1:9e:32:d6:c6:05:de:64:c1:9d:a9:aa:75:
                    66:8a:a1:28:0f:36:d7:82:ce:45:4f:2a:4a:61:2a:
                    11:a4:2c:f0:20:86:ba:79:46:e3:fd:42:f1:38:0c:
                    d5:c4:c3:bb:de:09:c0:84:c7:19:df:3f:17:03:d6:
                    ed:9a:93:13:7c:8b:cc:36:91:cd:49:54:97:86:9c:
                    93:ca:11:a1:11:84:68:8e:70:8d:06:4e:d5:c5:25:
                    8d:16:88:c2:18:35:20:bb:11:11:b1:ea:ee:32:e2:
                    8d:43:95:d7:3b:10:dc:0e:26:6c:6b:99:14:ef:26:
                    fd:db:2e:4d:43:6c:fa:04:5b:ba:e0:73:42:ae:8a:
                    36:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:67:FA:35:35:B1:8F:46:76:6F:9D:9E:19:0B:03:B4:7A:78:4E:49
            X509v3 Authority Key Identifier:
                keyid:D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:c0:4d:bf:ae:2c:6e:09:c3:2b:e4:d4:d5:82:07:85:28:80:
         45:97:6f:32:6f:0a:9d:ed:b4:18:81:68:25:c4:f8:ae:e2:04:
         bb:0d:08:06:90:80:0f:de:31:9b:64:f2:ea:c3:36:f9:cc:df:
         ad:b4:52:28:27:18:0d:a9:36:f6:02:95:e8:6a:81:20:66:c0:
         e3:12:e8:14:57:2c:7b:2f:d9:c9:10:3b:eb:60:da:c4:7e:86:
         1a:d0:bf:f9:4a:33:d6:d6:cc:a6:5f:4b:31:51:84:30:69:8a:
         c7:99:1f:d6:9b:02:63:e6:17:12:43:7a:f4:5a:f7:a5:08:98:
         ed:c2:14:98:8c:b2:6f:ee:da:53:d6:6c:35:80:4e:27:0e:67:
         06:89:d6:4f:62:14:bb:c4:d0:78:6f:f8:e1:ce:68:a6:e7:92:
         28:22:66:97:51:90:94:b8:4e:22:fa:f4:82:61:58:96:be:3a:
         58:89:88:2a:ac:cc:b4:1a:55:db:a4:54:82:12:14:59:08:67:
         7e:c0:fc:06:a2:a1:d7:10:b4:33:1e:4a:f9:f0:4f:dd:b6:8c:
         4d:60:6a:32:a6:44:84:45:7a:28:11:89:91:b7:57:6d:af:de:
         d7:c3:ed:42:30:0b:21:49:40:2d:66:11:2a:69:2a:07:a4:55:
         0d:36:b9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:26:39 2026 by rpki-client