Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft
File:                     v5gt73eibXzBlHOzpAZNzFIX5HE.mft (raw, json)
Hash identifier:          UKtKk5q0FG+yySUK6ctm3aElzXpMdeDSnSu19p3ugN4=
Subject key identifier:   25:AD:62:A0:CB:B6:A1:CC:1F:B7:E4:F0:32:E0:FC:DE:F8:DB:8B:5C
Authority key identifier: BF:98:2D:EF:77:A2:6D:7C:C1:94:73:B3:A4:06:4D:CC:52:17:E4:71
Certificate issuer:       /CN=bf982def77a26d7cc19473b3a4064dcc5217e471
Certificate serial:       019E1E6C1DDC16940417E921234357734FD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v5gt73eibXzBlHOzpAZNzFIX5HE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 23:01:02 +0000
Manifest this update:     Tue 12 May 2026 23:01:02 +0000
Manifest next update:     Wed 13 May 2026 23:01:02 +0000
Files and hashes:         1: MavdUwtL9hXRYTucFdVXRHkrrIo.roa (hash: yraXNEacytf4HbmMAZg6e64667WxeEaDmWzKdMpCXxk=)
                          2: v5gt73eibXzBlHOzpAZNzFIX5HE.crl (hash: gt6oUzuHIUlOFHkJRahiRwdCtRqRSi3Hvo/qF6AMj0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v5gt73eibXzBlHOzpAZNzFIX5HE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:1d:dc:16:94:04:17:e9:21:23:43:57:73:4f:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf982def77a26d7cc19473b3a4064dcc5217e471
        Validity
            Not Before: May 12 23:01:02 2026 GMT
            Not After : May 13 23:01:02 2026 GMT
        Subject: CN=25ad62a0cbb6a1cc1fb7e4f032e0fcdef8db8b5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c2:fb:5d:36:85:51:6f:c7:9f:bd:0c:8d:b4:
                    09:bf:97:35:b8:4a:6a:bd:f0:8e:65:72:21:8b:e9:
                    be:b0:88:a6:4d:a5:0c:91:cd:cd:11:75:cf:47:21:
                    6f:82:c2:db:f6:e7:ed:8f:ca:28:eb:dc:44:26:7d:
                    41:06:ce:fb:5a:c8:b1:a1:d9:b2:3b:38:1c:8e:07:
                    a6:1e:e2:f2:ed:c4:e3:7c:9c:fa:d3:82:38:30:2a:
                    89:d7:44:07:c0:de:af:92:60:8e:de:ad:8c:7f:4d:
                    db:e6:67:6f:05:52:98:57:d4:61:1c:cb:b3:d6:0f:
                    98:0e:4c:71:3c:90:59:28:77:62:c6:d6:61:60:84:
                    2d:94:ce:75:a2:c5:24:cf:94:71:e1:5a:8e:60:f6:
                    17:f5:da:8b:c9:62:18:4b:d0:c0:2a:a0:57:f1:aa:
                    88:6c:dd:3f:4d:f8:f7:f2:2a:64:95:89:61:be:bc:
                    73:1b:53:ec:c5:7e:69:d3:33:1b:96:06:3b:d2:f6:
                    65:a5:18:02:0e:39:39:13:6e:55:c4:c5:d3:cb:1c:
                    b8:7d:7e:02:d0:e4:28:51:de:36:0f:4d:c9:1e:d8:
                    68:a0:45:48:30:0f:1e:92:11:b2:17:c6:cf:db:9e:
                    7e:49:5e:37:23:17:cd:d6:57:ce:af:58:fa:a5:70:
                    ac:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:AD:62:A0:CB:B6:A1:CC:1F:B7:E4:F0:32:E0:FC:DE:F8:DB:8B:5C
            X509v3 Authority Key Identifier:
                keyid:BF:98:2D:EF:77:A2:6D:7C:C1:94:73:B3:A4:06:4D:CC:52:17:E4:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5gt73eibXzBlHOzpAZNzFIX5HE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:5c:33:63:67:d0:bf:4d:94:08:63:fa:bc:28:6a:f5:93:7b:
         25:b5:5f:22:3a:31:fa:e7:74:27:60:f0:96:f2:41:ca:5b:ff:
         ad:f1:65:72:d6:34:12:30:78:78:cd:77:85:c6:68:13:d5:e3:
         58:6c:70:16:10:64:28:27:ff:63:d2:f8:fc:7a:d7:63:0b:67:
         2e:ee:90:4c:1e:df:e6:e6:13:72:f4:8d:cd:74:07:0c:c8:e5:
         b8:88:49:69:8d:df:e7:5b:cc:6a:c4:02:d8:44:5d:84:e4:6d:
         77:27:52:df:ac:19:d4:e7:d7:9e:f7:2e:e1:18:9b:60:e5:1e:
         d8:85:d4:d4:68:d6:80:c8:e7:7d:7e:b8:6b:40:be:24:45:4c:
         67:90:43:aa:5b:35:19:70:51:bc:f4:75:53:a9:dd:79:6e:b4:
         47:7a:87:53:cd:01:64:4f:2d:25:d3:f9:f9:52:70:e1:5d:99:
         a3:b1:f2:94:91:a8:34:18:b8:fc:b6:c2:ff:53:0b:b0:13:0c:
         3f:e8:5e:bc:9e:7e:45:bd:fa:d3:40:e4:d3:37:9a:53:95:f3:
         f7:5d:8d:12:87:a6:8e:96:00:0e:59:56:dd:38:f5:71:40:f1:
         a0:59:66:f6:d1:14:d8:a9:39:c2:ec:7d:95:b9:39:cf:2b:97:
         cf:56:c1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:51:13 2026 by rpki-client