Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
File:                     C40btyeRyHhVDRudj-9WSsORk2g.mft (raw, json)
Hash identifier:          GvQTIq1+44uszjw6r/3g/QKQkQ+TEbLgkqepaJZAyE8=
Subject key identifier:   50:09:06:81:E7:93:36:10:45:01:2F:21:7A:6D:29:71:6F:AE:39:A9
Authority key identifier: 0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68
Certificate issuer:       /CN=0b8d1bb72791c878550d1b9d8fef564ac3919368
Certificate serial:       019E1C4738FE484529C919581FFB622A7D0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 13:01:29 +0000
Manifest this update:     Tue 12 May 2026 13:01:29 +0000
Manifest next update:     Wed 13 May 2026 13:01:29 +0000
Files and hashes:         1: C40btyeRyHhVDRudj-9WSsORk2g.crl (hash: RRPwDD2hGJe/itOtpqWRur9oQ5JAZhUsYk8DsXRmih0=)
                          2: Qa6RJH6f6AObfXnYHZk2ZbGY_Jw.roa (hash: 12noZ/f5LNR3FAN+7NihJMDkGNqm7rdo2dgUz2FcRAA=)
                          3: xkSfXUS5_IXxCWIv_KZRXInDfVE.roa (hash: 4czKDen2jZvQIkigei8J1hEAX7SZ6qL0Ml4QQ5tV1W8=)
                          4: yORjc6g5_P74iVLlxKlbrUIAnbM.roa (hash: pumjnge9qZ/SonFEAFuEIk8CBDJMVwBQHqpzy07YUrg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:47:38:fe:48:45:29:c9:19:58:1f:fb:62:2a:7d:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b8d1bb72791c878550d1b9d8fef564ac3919368
        Validity
            Not Before: May 12 13:01:29 2026 GMT
            Not After : May 13 13:01:29 2026 GMT
        Subject: CN=50090681e793361045012f217a6d29716fae39a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8d:ae:e4:c7:aa:b0:9e:0d:2c:d2:82:c0:f3:
                    3b:e8:2c:99:ea:cd:e0:74:f7:d0:27:47:1a:fc:6c:
                    a5:31:df:f2:0d:16:a8:81:c3:84:d9:0c:a2:e3:3d:
                    be:7d:fd:85:84:90:77:44:4c:7b:f2:f9:57:ad:f1:
                    8b:d4:06:f2:b8:02:01:f7:66:00:4e:74:6b:36:1a:
                    84:8d:51:6b:96:74:91:02:87:5b:02:e1:c7:74:eb:
                    21:91:f4:c5:5a:76:52:c7:10:f5:40:bd:df:ac:8f:
                    0e:5d:dc:ad:4a:f5:04:f6:79:6c:52:1c:79:70:e3:
                    dc:cd:4a:87:43:97:3e:56:76:22:eb:19:e9:c4:f7:
                    e7:41:94:f3:58:aa:b7:6f:7a:39:f3:d1:c5:8b:fc:
                    8c:fb:20:ad:63:cb:9b:9d:61:b9:62:4c:0d:22:c3:
                    48:54:06:ba:39:fb:f6:8c:e1:02:79:8d:15:85:0e:
                    cd:b3:39:c1:a6:38:bb:ea:fe:1e:e5:d1:8c:12:bb:
                    9f:18:f8:c0:07:c6:7c:3c:3b:82:ef:61:e6:e1:d1:
                    8b:f6:0f:4c:4a:3f:c2:33:4c:14:55:b0:56:2c:fa:
                    40:69:a1:90:a3:ff:49:c8:9f:ff:19:b4:37:ca:3d:
                    15:56:32:dd:53:db:90:3e:07:6c:ab:be:fa:b3:72:
                    67:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:09:06:81:E7:93:36:10:45:01:2F:21:7A:6D:29:71:6F:AE:39:A9
            X509v3 Authority Key Identifier:
                keyid:0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:a4:20:97:c5:f2:8c:14:58:be:32:b1:34:91:56:58:87:f3:
         7d:ec:e3:95:c0:00:8c:29:7c:44:be:7c:29:8e:30:74:0b:be:
         c4:a6:7f:24:fa:05:46:19:b9:47:c0:1c:d3:d4:b2:d3:2f:a9:
         55:ab:05:a3:7a:c4:a4:db:7d:9a:d8:a6:46:f3:ab:29:bc:73:
         5d:d2:92:e1:ee:69:18:ba:0e:ff:8f:e6:4e:15:01:22:ab:c6:
         da:74:cf:14:49:ba:6f:84:2e:54:51:de:f0:6c:ac:bb:8f:9f:
         11:43:48:40:97:dc:d8:04:dd:b5:1d:1d:d3:1e:0f:f3:60:44:
         c9:ec:8b:d1:3c:3a:56:54:0a:36:8b:bd:01:4f:0d:9d:b7:d5:
         12:65:9f:62:a3:96:f1:d9:8a:42:fe:df:0d:cb:2a:47:e9:31:
         00:8c:4a:f9:84:d6:c3:a7:82:28:b6:31:4c:4e:76:7d:f6:ee:
         56:3a:3d:b3:f4:3e:f6:77:2f:1a:77:aa:86:6b:6a:eb:43:bb:
         d1:64:d0:3b:53:dd:77:17:eb:5b:84:17:b8:92:f9:3a:f3:e5:
         e1:29:a2:d6:74:98:de:6a:5e:19:6a:ba:1c:ba:3c:80:4b:4f:
         1d:89:34:fd:f9:9f:2c:a7:f6:4e:aa:1e:be:ea:58:5f:37:60:
         ec:df:36:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:25 2026 by rpki-client