Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
File:                     T2qURK2qUjxXaOn2vhQGUYOsIKg.mft (raw, json)
Hash identifier:          80NDix8sLVChmWI2cUnJ0AH1GgE0vUE5e0xYhXPe4IA=
Subject key identifier:   D3:22:6F:28:C2:AD:97:85:7B:6F:95:FC:84:AD:D0:9A:90:51:3F:91
Authority key identifier: 4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8
Certificate issuer:       /CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
Certificate serial:       019E1EDA7A069C80411B665C36965B4E0BFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
Manifest number:          1906
Signing time:             Wed 13 May 2026 01:01:34 +0000
Manifest this update:     Wed 13 May 2026 01:01:34 +0000
Manifest next update:     Thu 14 May 2026 01:01:34 +0000
Files and hashes:         1: T2qURK2qUjxXaOn2vhQGUYOsIKg.crl (hash: lK9fdjhDcwcd3X6PKkAmp0GWfzJC2YomBX/P4Miy3SI=)
                          2: o8tO8stgvhxVUDIUNSKHy-JW2fo.roa (hash: Z08VgX0ivNPtY5zzCzl8jQ6u6U/EFae5aPOCebjGd+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 01:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:7a:06:9c:80:41:1b:66:5c:36:96:5b:4e:0b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
        Validity
            Not Before: May 13 01:01:34 2026 GMT
            Not After : May 14 01:01:34 2026 GMT
        Subject: CN=d3226f28c2ad97857b6f95fc84add09a90513f91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:97:2a:85:7c:4a:81:54:0f:36:75:1e:d5:41:
                    03:cb:c9:3d:47:95:2e:18:22:c9:d0:29:57:d2:19:
                    d2:12:68:b5:d4:9f:eb:92:31:e3:7c:7b:28:11:bd:
                    71:d5:0b:29:a5:33:ce:1b:1e:eb:04:58:2c:47:49:
                    d2:cf:10:ee:a2:40:2f:28:f6:69:e8:b6:07:6c:e5:
                    83:2c:f0:14:2e:bc:9e:9b:18:06:36:b7:db:b5:63:
                    ae:f3:51:16:ac:78:e8:79:e9:ae:d5:bf:53:cc:3c:
                    61:a4:53:37:dd:1d:bb:5c:70:6b:ce:a2:e8:0f:ea:
                    a0:d4:5c:20:55:23:3f:e3:d9:8f:70:33:91:2e:8e:
                    df:08:69:0e:f0:f8:03:1b:b1:2e:5c:97:33:93:f1:
                    82:ef:63:1d:d7:ba:a2:89:52:1d:53:e0:8f:4d:ed:
                    27:b0:7e:e2:30:74:c2:04:17:bc:ff:29:6a:13:56:
                    c6:30:83:2e:1c:da:3a:73:c8:fe:22:d5:f8:85:0c:
                    24:28:43:29:05:75:31:9f:37:52:22:7f:8a:e5:85:
                    1b:fc:e1:cd:84:ab:90:4c:2f:64:38:6d:64:05:fa:
                    f0:5b:d6:68:3c:76:b1:f7:e0:4c:93:73:74:c8:05:
                    65:ed:c1:21:62:17:16:02:dc:48:a5:70:30:92:30:
                    21:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:22:6F:28:C2:AD:97:85:7B:6F:95:FC:84:AD:D0:9A:90:51:3F:91
            X509v3 Authority Key Identifier:
                keyid:4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:af:d4:9e:24:09:a1:c9:ee:f0:6d:8d:99:55:25:67:f1:ce:
         6c:3b:4e:bb:58:2b:24:9d:61:e8:51:09:20:74:5b:d1:db:bf:
         a9:f3:e3:be:93:1b:47:df:b4:ee:9d:5b:1d:12:a4:d8:cb:49:
         46:8a:81:f4:03:c3:c7:21:5c:7f:e3:c5:8b:21:66:dd:43:b6:
         b1:7f:6d:08:d6:95:3c:0c:44:cf:9e:b4:84:1c:90:14:fb:9f:
         2c:18:a2:98:ab:e4:8a:24:65:6b:86:b3:f2:3d:a0:fb:bd:7e:
         a6:5c:dc:fe:74:3f:6c:c2:de:d0:e3:e9:2a:16:9b:1a:6c:f2:
         bf:f8:f6:de:70:d0:5e:6c:4a:39:49:ee:e6:f2:cf:53:fa:96:
         e9:ba:78:37:26:f1:46:11:a8:90:0b:28:be:93:8a:ff:69:c0:
         e0:18:30:0f:de:f5:77:a7:e8:0f:1c:f8:90:3a:0c:c7:ec:5e:
         cc:08:12:78:ec:d3:d7:b7:93:8c:23:29:68:22:b6:2b:6c:e2:
         55:07:ac:3b:ec:08:d1:69:eb:26:c7:1c:dd:c4:8c:b7:b4:b6:
         a0:a9:21:93:df:7d:6e:ee:ba:fa:f1:02:ab:18:fd:b8:e1:8c:
         6c:65:1e:c0:a0:38:e1:f0:bb:95:b7:0c:b3:4a:0d:be:b3:42:
         0f:90:f6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:14:15 2026 by rpki-client