Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
File:                     1-_YvdgYnP0GmzMjilWB288Ch61Q.mft (raw, json)
Hash identifier:          ZP1/HU9PHa/atwHzgb8h1p/tiOvX1heRGphFqJSmPMI=
Subject key identifier:   29:44:84:49:40:F4:DC:58:5B:35:12:CC:A2:AF:5C:62:6C:99:23:50
Authority key identifier: FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54
Certificate issuer:       /CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
Certificate serial:       019E1C0FED1A8AA8443CAD6AB685102CFD5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
Manifest number:          1927
Signing time:             Tue 12 May 2026 12:01:06 +0000
Manifest this update:     Tue 12 May 2026 12:01:06 +0000
Manifest next update:     Wed 13 May 2026 12:01:06 +0000
Files and hashes:         1: 1-_YvdgYnP0GmzMjilWB288Ch61Q.crl (hash: +ZXXj8KTy3cg/mBFs4F0XxTMy1RDLiZ+uRhvzzYt/oQ=)
                          2: sxqFF3SrvGoUsRQZD8fu4--ERqs.roa (hash: 1C32Y1sbpjWSQ+8VoxTVRdY7H3ef9AMyVxgJYOjwRdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:0f:ed:1a:8a:a8:44:3c:ad:6a:b6:85:10:2c:fd:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
        Validity
            Not Before: May 12 12:01:06 2026 GMT
            Not After : May 13 12:01:06 2026 GMT
        Subject: CN=2944844940f4dc585b3512cca2af5c626c992350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0c:48:63:e3:36:a3:18:8e:8b:ed:57:58:69:
                    a8:a3:21:c8:ca:ab:62:bf:a7:22:ad:81:a5:60:91:
                    31:f2:f1:28:87:a5:f6:7e:a6:ea:23:a3:bb:d0:ac:
                    93:bc:f5:be:e8:08:31:b0:79:25:17:bd:7e:23:9c:
                    e6:3d:65:bf:eb:41:6c:37:f0:20:df:ed:07:49:61:
                    e5:4c:e8:55:db:e9:52:9a:33:4f:bd:3c:19:7e:b8:
                    b9:2d:0d:62:86:63:fe:73:fd:92:e2:41:c6:1a:15:
                    da:9c:f9:f1:6d:58:c5:28:45:64:a9:1c:8a:c8:1d:
                    36:f8:4d:31:9c:2d:9f:48:9d:13:ef:ea:4c:58:58:
                    a4:ea:5b:41:6d:94:5b:e0:14:30:4e:4b:65:64:bb:
                    f2:b6:7b:07:4d:33:a4:18:8b:d0:4b:0e:96:95:c7:
                    a3:9e:da:0b:09:3a:24:43:15:fd:09:5b:55:cf:7e:
                    9b:67:72:9d:01:c0:5d:32:38:ae:78:34:f7:86:6b:
                    c1:ca:46:65:f6:49:39:da:a4:43:61:30:f3:3d:ad:
                    7c:ca:36:a2:a0:3b:ac:43:75:08:27:09:c7:8a:05:
                    a3:da:e5:2a:c2:26:01:ca:d4:ac:7f:64:0c:f9:d8:
                    5b:e0:d7:d4:d8:cf:0c:ed:74:99:53:3b:cf:59:a3:
                    87:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:44:84:49:40:F4:DC:58:5B:35:12:CC:A2:AF:5C:62:6C:99:23:50
            X509v3 Authority Key Identifier:
                keyid:FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:66:43:9f:de:8d:db:63:75:8f:e3:e3:2e:ac:5d:6c:e3:62:
         fe:3d:bb:a8:10:09:f7:f9:53:b9:be:b7:9d:06:c3:e4:55:25:
         99:e1:9e:a0:8f:90:28:0b:77:f3:d9:01:f6:e9:a7:89:3e:51:
         45:7a:58:2d:50:b9:c1:2a:ee:ec:43:a9:fd:f9:1a:90:3e:57:
         a0:1c:e7:0f:f9:51:ab:f0:94:ed:63:89:e3:da:d5:f3:80:fb:
         29:7e:53:08:f6:9e:87:26:09:5e:45:6c:5c:61:c6:70:13:e0:
         31:a2:a6:3c:0c:f8:88:63:f0:43:f3:ea:ff:48:6a:3b:24:56:
         56:01:a1:f6:ce:c7:6c:44:5a:03:9e:52:97:08:d5:50:37:95:
         cb:ca:9a:10:98:2f:9d:63:df:fd:c9:a6:36:c6:dd:db:7e:17:
         7c:55:d2:46:58:3e:29:f7:e5:85:96:cc:0e:df:ed:61:01:cb:
         73:11:25:aa:3c:33:a6:3b:f6:03:9c:8a:38:d2:35:16:f0:08:
         19:a4:aa:af:e9:ba:60:d6:f2:a8:02:5f:9d:c5:50:b1:63:d4:
         b4:02:7b:ba:b2:b4:84:97:8f:d5:43:58:fd:31:26:0d:98:46:
         cb:d4:94:7b:57:7a:be:b7:75:db:d7:7f:dc:b2:b4:07:55:a1:
         cb:96:43:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:14:58 2026 by rpki-client