Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
File:                     1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft (raw, json)
Hash identifier:          l81BmhDkTvV01MkymLf6l4i5G0zcAs1Ypb0yNRGRluI=
Subject key identifier:   44:41:1A:0C:CF:28:7E:38:22:0A:DE:94:87:DB:25:6B:FC:1D:29:F1
Authority key identifier: D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0
Certificate issuer:       /CN=d44bd5653013fa7ca34f52284309a688b249e7a0
Certificate serial:       019E1F7EF684FC41DD90EFF71C1052D3ED10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 04:01:14 +0000
Manifest this update:     Wed 13 May 2026 04:01:14 +0000
Manifest next update:     Thu 14 May 2026 04:01:14 +0000
Files and hashes:         1: 1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl (hash: ffKpMYYYUZzQBLqfjpBF0U8Y0MpwzbOixsQv38QPwc4=)
                          2: DyBrkSK4a6M3RlwftQhSDaHeKfM.roa (hash: h4xKh81GTCFolaSYT7/bVgNQm45KFUeIOt1K9PqX3Yc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7e:f6:84:fc:41:dd:90:ef:f7:1c:10:52:d3:ed:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44bd5653013fa7ca34f52284309a688b249e7a0
        Validity
            Not Before: May 13 04:01:14 2026 GMT
            Not After : May 14 04:01:14 2026 GMT
        Subject: CN=44411a0ccf287e38220ade9487db256bfc1d29f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d3:f3:d3:53:4a:ea:29:c2:89:4e:04:03:45:
                    8a:ba:ee:66:9e:d5:0d:37:a1:e7:86:c1:03:81:48:
                    ee:1c:69:df:ce:de:63:a8:e4:0e:38:9c:b6:a3:05:
                    d2:2c:82:00:4c:42:9a:df:f6:f7:a3:25:12:3a:67:
                    db:52:29:a8:5e:9f:67:f4:76:75:2d:64:2a:a4:ba:
                    3f:e6:65:98:a0:0d:d8:ae:c6:8e:b9:6e:da:2d:0d:
                    7d:05:e8:72:17:30:39:64:ca:29:fb:f5:42:ed:d6:
                    08:66:94:77:3b:82:25:7b:55:ab:09:ba:48:64:a2:
                    6f:a1:45:3a:4b:43:3e:5e:fb:77:ba:9e:28:13:08:
                    41:5c:80:9d:39:9b:62:57:2b:e0:39:65:de:f1:61:
                    fb:dc:4c:e7:ab:87:34:2c:6b:40:1e:27:ca:18:96:
                    17:43:57:67:8e:db:97:b6:d4:6f:00:c9:83:8f:3e:
                    77:59:c1:a7:47:8d:33:8d:c4:04:95:17:fb:6a:17:
                    a6:a8:99:f3:87:0d:f1:fc:35:26:61:50:02:b5:3a:
                    53:fd:33:d5:3f:69:e0:df:21:87:1d:2c:43:2a:05:
                    97:82:26:44:c6:37:7b:fd:f3:31:7d:a6:0e:fc:92:
                    69:19:2d:5b:d4:4a:32:67:c1:ce:2b:fb:93:78:c4:
                    eb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:41:1A:0C:CF:28:7E:38:22:0A:DE:94:87:DB:25:6B:FC:1D:29:F1
            X509v3 Authority Key Identifier:
                keyid:D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:10:15:d2:5f:3d:2a:fa:1a:9a:09:3d:41:fb:81:12:96:f4:
         61:ba:1b:70:94:76:e6:82:3b:3b:18:0c:ae:9c:dd:59:46:e3:
         c0:e8:05:3d:2e:46:22:1a:5d:c7:77:a8:c3:2c:55:5f:e6:b0:
         b8:78:ad:ad:6c:b2:2a:39:42:dd:9b:d9:c2:0d:99:39:3c:46:
         8c:df:68:f0:46:7d:11:80:a2:33:17:74:d7:bd:91:01:b2:0a:
         e2:56:07:b5:84:f4:72:ec:61:ac:ed:ab:59:39:53:4d:2a:fc:
         7a:ec:97:df:7d:59:d0:c6:f2:da:b5:f3:f6:c8:c6:00:23:60:
         77:6c:64:88:7b:39:2e:32:64:bd:81:75:80:5f:b4:4a:9e:c4:
         50:5d:da:8e:6d:ad:6b:2f:f0:74:0f:a0:e6:5b:bb:03:32:32:
         23:25:46:a9:01:b1:d3:7c:a3:a8:cc:5c:67:b5:d9:94:a0:8b:
         ea:52:7f:fd:bc:45:5d:8d:69:61:b9:63:12:71:49:f2:9b:47:
         45:be:86:84:4e:02:0b:85:44:b0:0b:02:fd:e0:5e:8d:e7:46:
         c5:a1:7a:a7:3d:d0:6a:70:86:d7:5c:ed:c9:d4:8b:7a:fb:89:
         02:76:bd:3c:d7:ea:a7:a7:a2:70:0c:aa:b0:3c:f6:54:9e:31:
         38:05:7e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:49:39 2026 by rpki-client