Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
File:                     24oKPWpEpYME4bHb9i5dehaziHo.mft (raw, json)
Hash identifier:          rXeA4WeVy8z1HduZJcog21B9d6TArEbUi0tLQWwwgm0=
Subject key identifier:   71:B0:C4:D2:EE:75:D5:84:1A:6F:06:5A:47:FD:74:70:5D:A7:2A:15
Authority key identifier: DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A
Certificate issuer:       /CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a
Certificate serial:       019E1F10C4F0FC1579EF96296835979E4748
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
Manifest number:          1909
Signing time:             Wed 13 May 2026 02:00:53 +0000
Manifest this update:     Wed 13 May 2026 02:00:53 +0000
Manifest next update:     Thu 14 May 2026 02:00:53 +0000
Files and hashes:         1: 24oKPWpEpYME4bHb9i5dehaziHo.crl (hash: DLWEgKCRutyyiceo98VF3dXUhCt+LkI4vqPw2luEQh0=)
                          2: zIZO5OcLgytxydbFjh9zl-Q7rUM.roa (hash: SfPUXDi/ZZO3GvzHqo6VKjgUthfpKQn2oc9LE5TVOu8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:c4:f0:fc:15:79:ef:96:29:68:35:97:9e:47:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a
        Validity
            Not Before: May 13 02:00:53 2026 GMT
            Not After : May 14 02:00:53 2026 GMT
        Subject: CN=71b0c4d2ee75d5841a6f065a47fd74705da72a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:41:eb:b2:6f:8c:e0:e3:ef:2b:97:c2:5d:4d:
                    af:e0:36:3f:dd:cd:ec:71:75:a1:db:e6:e2:f1:e8:
                    54:aa:30:2b:f1:90:ff:17:91:4e:7c:78:cc:20:e4:
                    2d:4a:1e:90:6f:e6:c4:d2:db:9b:b8:fc:e2:29:bf:
                    fc:b3:a3:a9:0d:b2:71:1e:08:ca:d7:b5:3a:a3:5a:
                    67:ee:72:39:71:25:e0:bc:79:6f:24:4d:f6:7b:6d:
                    ed:77:d5:a3:67:43:61:c4:f1:70:ab:52:8e:ee:d3:
                    49:20:b1:c1:d0:a9:10:9e:66:71:41:91:d2:e1:27:
                    53:97:ee:df:a8:1e:2c:df:22:c0:31:50:88:70:d8:
                    ab:72:de:fa:0c:cb:23:6a:b1:d9:09:17:20:fa:1f:
                    8a:33:a9:dd:e6:8f:54:8c:91:b7:b3:4c:f8:69:2c:
                    66:b3:ef:8d:e7:36:c1:83:61:27:60:a5:15:42:e5:
                    6d:83:06:d2:93:04:b3:cd:39:0a:45:37:61:84:4e:
                    fc:24:a9:26:cc:84:60:2b:92:5b:4b:8a:3a:9a:1a:
                    73:5c:2e:83:42:81:45:7f:57:7e:29:7f:d1:3d:ad:
                    e0:dc:25:74:b8:db:97:b5:e1:0d:87:24:fd:5c:4c:
                    04:42:38:ae:00:f9:03:20:49:32:47:50:7b:5d:6a:
                    b9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B0:C4:D2:EE:75:D5:84:1A:6F:06:5A:47:FD:74:70:5D:A7:2A:15
            X509v3 Authority Key Identifier:
                keyid:DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:d0:a3:8c:07:a0:08:13:91:85:5e:c2:31:0f:18:b6:fb:a5:
         28:d2:be:85:9b:fa:77:a5:17:74:ea:58:f5:d6:c4:28:8c:20:
         e9:dc:ba:e0:16:3b:54:8b:89:c4:d7:35:0c:3a:ed:3e:ea:af:
         7d:dc:64:c0:fa:f3:87:03:e7:c2:45:57:e1:12:57:b4:36:64:
         39:c9:9a:7a:90:59:af:35:1b:4c:bc:03:8f:5b:fe:e3:29:e2:
         50:26:06:00:4b:fd:ad:eb:65:ac:f7:70:f1:f9:b9:58:0b:3b:
         9f:d7:76:f4:ef:fe:40:35:b0:df:1b:cd:7d:b5:df:27:8f:f3:
         ae:5b:cd:54:38:4a:d3:dd:af:ac:57:2f:c4:3a:dd:2e:10:04:
         34:15:0a:c4:21:29:94:53:98:dc:1c:fb:6f:b3:a3:23:77:e2:
         fa:35:6f:1e:d6:de:88:b5:78:08:14:4b:95:f5:2f:f1:1d:f1:
         d3:fa:1c:a1:88:62:4d:87:6a:7c:7f:00:97:72:3a:5e:aa:b5:
         50:97:d6:f8:14:b6:c4:fd:02:ae:b9:68:a1:2e:2d:77:eb:9d:
         79:d1:24:4d:16:33:65:b8:32:79:46:c9:f3:6b:69:4b:bd:84:
         e6:bc:7f:c9:8c:d2:c4:c1:53:6d:e9:9e:92:79:8f:e5:f3:87:
         47:4b:21:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:23:44 2026 by rpki-client