Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
File:                     pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft (raw, json)
Hash identifier:          XEmaJIGqHkJkInVYWhyDwaQQx4NliBmKMIsFcc6/PLc=
Subject key identifier:   7F:C6:68:DD:EF:5B:83:94:98:79:C1:A6:30:A5:63:BD:BB:1A:72:85
Authority key identifier: A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A
Certificate issuer:       /CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
Certificate serial:       019E1CEB6B1E002AAE49CC274930E54FD905
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
Manifest number:          1906
Signing time:             Tue 12 May 2026 16:00:50 +0000
Manifest this update:     Tue 12 May 2026 16:00:50 +0000
Manifest next update:     Wed 13 May 2026 16:00:50 +0000
Files and hashes:         1: pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl (hash: /0oiDumMAAwwemg6lOJ1NnzveSfcq9sKgcrQI1yhkn0=)
                          2: vRd4lkbID2XP7GTV89IAJrPGpPk.roa (hash: OzTqPtevWeZEZpJ3WDJJ/YsKofNfG0tZ601DSg2/22I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:6b:1e:00:2a:ae:49:cc:27:49:30:e5:4f:d9:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
        Validity
            Not Before: May 12 16:00:50 2026 GMT
            Not After : May 13 16:00:50 2026 GMT
        Subject: CN=7fc668ddef5b83949879c1a630a563bdbb1a7285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c3:e9:a8:ae:04:59:0e:0a:35:7f:04:f1:43:
                    23:e1:7e:f2:47:9e:25:f1:24:28:5d:7c:e8:fe:9d:
                    58:42:09:25:bf:ad:c9:34:36:e3:89:f4:41:48:b3:
                    3d:a9:4a:6f:b7:4e:1b:55:86:8b:29:ce:d8:e0:1d:
                    bb:60:aa:eb:f1:78:ca:bf:fb:43:b1:55:23:e8:c5:
                    43:f1:e4:22:cf:d9:37:a3:ce:76:ae:1e:2b:30:8a:
                    ac:8a:00:77:e8:e3:cf:ef:58:6d:d4:0b:eb:58:ea:
                    5b:48:21:2d:a7:99:40:8a:02:58:05:42:7b:73:dc:
                    20:86:b6:61:a9:c8:fa:ad:ed:9c:bf:66:30:a1:8d:
                    78:86:87:46:7c:79:bc:73:2e:eb:54:08:09:fa:0e:
                    e2:99:d6:bb:0e:23:07:1e:8c:b5:95:38:c3:13:f0:
                    c9:51:49:44:19:90:1e:7c:d9:f3:5a:d4:23:f4:08:
                    cb:bc:1e:3a:f1:7a:96:c4:6e:51:17:91:fc:5a:bb:
                    21:9b:83:8a:a4:fd:5b:b5:93:f2:38:34:4b:4b:b1:
                    b2:f8:01:91:22:fb:7c:76:a0:d8:62:64:02:9e:20:
                    7f:c8:a8:50:a3:36:98:c2:94:62:91:3a:e5:fc:8b:
                    7a:14:d3:d6:01:e6:77:71:11:64:6a:9f:87:d1:ed:
                    88:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C6:68:DD:EF:5B:83:94:98:79:C1:A6:30:A5:63:BD:BB:1A:72:85
            X509v3 Authority Key Identifier:
                keyid:A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:b7:b0:02:26:75:24:64:8f:9c:c8:0e:c4:d2:98:18:b2:05:
         42:18:a0:9f:f5:37:d6:2d:07:71:f5:23:25:74:dd:41:f4:34:
         f3:bd:0e:3d:da:f2:ea:f3:75:20:bc:01:c4:fd:77:11:3d:5e:
         1d:89:11:d4:52:46:cd:f7:7c:ed:36:d4:3b:19:16:d2:05:72:
         6d:69:67:65:e1:60:f9:93:3c:b8:c8:80:f4:fd:92:5a:c7:4d:
         64:f6:b5:41:db:74:4f:d2:bc:e6:58:c1:92:e1:a6:90:31:af:
         0c:f2:9b:ec:bd:aa:0d:21:85:a7:0c:41:2b:46:e5:9a:2d:32:
         e0:de:77:0d:96:80:a0:d0:47:fb:ee:68:f2:1d:1b:a5:67:a0:
         1b:b2:41:66:d6:93:9c:02:f5:5b:a4:fc:2b:02:cc:17:77:12:
         61:03:c5:74:e5:12:75:c6:3d:65:b1:98:5e:c4:40:20:5b:00:
         75:b8:3e:2f:d3:1f:b7:44:b8:13:d2:ba:07:fd:3a:4d:44:ef:
         2b:72:ee:db:88:ff:a4:39:d9:8c:d3:98:76:21:8c:ff:bd:ff:
         e6:f3:1c:53:47:d3:e3:5e:dd:6d:b9:02:e8:1c:dd:27:21:6a:
         6e:e2:b6:b8:de:30:ff:ed:5a:cd:e9:43:e7:3d:27:90:5a:96:
         ea:41:3a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:00:29 2026 by rpki-client