Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
File:                     rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft (raw, json)
Hash identifier:          qrtSvAkMLunQf8+Ykkr8T1h0yvpqRLT0BEBE4Q9uIHw=
Subject key identifier:   AA:2F:8E:D8:50:0E:26:B3:EF:95:D5:A6:FE:6D:21:32:04:2D:FC:58
Authority key identifier: AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
Certificate issuer:       /CN=ad80679b96ca322bfa85500cab206c6d47412edf
Certificate serial:       019E205AC42A05AFD8CDD064AF8805712010
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
Manifest number:          1910
Signing time:             Wed 13 May 2026 08:01:19 +0000
Manifest this update:     Wed 13 May 2026 08:01:19 +0000
Manifest next update:     Thu 14 May 2026 08:01:19 +0000
Files and hashes:         1: 1DSUQ0jxs6dG0EoFqfG91mFQyMw.roa (hash: iINHWWjQ7Nsnh6T5r2HUf93qqcUOuSqMNkps61w8OX0=)
                          2: BdsuDRm80ULk9aLfJ7zh20INiU8.roa (hash: 0BqcT0T81e3M/0LPrL5e9ii3yguHiKnmLWj00gesJkU=)
                          3: KLak6E7XOaljYL7i0cSZlIlCEqg.roa (hash: mJGksFMnjfzfVrg/g8a4mJkgqFzUtmtGPX7OdhiTIDg=)
                          4: VSskXdqgKe7CaDWuoatQnI_9KiE.roa (hash: ZdbXSqyDrBgEKdzaBPZgWnFmAfBPFOOQn34nK2NZEnk=)
                          5: rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl (hash: yYsTnq43nPCvXPWNrKb0I1SBRoSGhKzaS1IduyXWCic=)
                          6: vPgoZptW0KavIK_Hg1kzkfOF1WE.roa (hash: j7J2y1HSuKj72l6kVGUrAtD78gxcoUd5XdyBbZEybuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:5a:c4:2a:05:af:d8:cd:d0:64:af:88:05:71:20:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad80679b96ca322bfa85500cab206c6d47412edf
        Validity
            Not Before: May 13 08:01:19 2026 GMT
            Not After : May 14 08:01:19 2026 GMT
        Subject: CN=aa2f8ed8500e26b3ef95d5a6fe6d2132042dfc58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3d:78:d8:33:3d:04:1c:13:5c:06:51:20:f2:
                    30:cb:5a:40:38:38:38:41:87:ff:94:4b:98:0f:11:
                    3c:00:37:c1:87:bf:2e:4c:06:0d:2f:45:a5:74:25:
                    c8:48:72:b6:6e:4e:48:9a:f7:43:d4:42:1e:50:8f:
                    df:cc:09:4c:9f:7c:58:20:fc:c0:fb:29:6f:32:0c:
                    ff:db:2d:5c:02:29:72:83:d8:39:64:48:16:8d:88:
                    af:bb:6c:a5:43:b5:ca:97:3b:6a:44:05:cb:4b:69:
                    76:18:6e:66:0f:05:fc:3f:5f:f2:9e:9d:13:95:40:
                    ad:04:9a:22:65:12:64:8e:33:2a:07:3e:1d:e7:2f:
                    c7:2b:9b:8a:e5:84:69:15:c0:e5:c7:39:0b:ba:68:
                    38:54:d0:04:d1:25:c1:12:e4:fa:4b:f5:a8:2c:43:
                    22:3a:1d:b6:5c:7f:76:29:77:a5:bd:20:ea:fc:29:
                    c3:0c:94:ab:42:f6:ed:88:7c:78:69:f8:fa:3d:6e:
                    e3:fe:fb:c5:33:35:7a:0c:49:28:d1:b6:f8:16:40:
                    6d:4b:21:09:3b:4b:d1:09:9b:96:02:3b:af:87:f9:
                    a6:17:27:43:fa:0b:d9:33:d5:99:89:6d:8d:97:7d:
                    af:ad:c4:dc:6d:57:91:76:28:a7:e4:70:04:a5:92:
                    ed:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:2F:8E:D8:50:0E:26:B3:EF:95:D5:A6:FE:6D:21:32:04:2D:FC:58
            X509v3 Authority Key Identifier:
                keyid:AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:90:90:82:ca:c6:fa:f8:b7:8e:d9:b1:83:57:53:3b:d7:67:
         eb:d3:8a:c1:52:0d:9d:e0:85:76:4e:00:73:e6:e8:d3:13:5e:
         09:07:65:e7:40:7c:af:e3:aa:70:1c:b5:d5:d1:be:fd:59:9e:
         02:7e:ff:31:b4:ec:1f:b9:98:c1:dd:79:35:f7:86:d5:6b:54:
         ab:3b:1a:db:8a:8a:26:ec:e3:a9:1f:f1:07:09:9f:b5:f9:00:
         bb:48:1e:64:62:c3:9b:be:24:59:4e:e8:79:21:d8:3a:9a:5a:
         5e:24:58:96:56:87:c9:ac:20:c0:24:6a:7f:ef:b4:8b:7c:8c:
         2e:a1:41:2e:ef:31:94:bc:b6:be:15:b8:41:38:44:2b:ab:d4:
         2c:44:b5:ac:4e:23:23:6c:bb:11:20:52:c4:f2:46:9d:d4:4c:
         90:e3:75:0f:2d:b9:b9:da:42:a9:4a:01:9b:ef:43:b4:c4:6f:
         62:e9:4e:69:76:60:8f:d9:81:53:26:be:ef:3e:95:ad:83:17:
         63:57:4d:d3:3b:37:b4:94:1a:7c:f6:13:2c:e8:2e:eb:fa:9e:
         ff:a9:bf:19:a0:56:fa:5b:86:30:2c:1d:03:74:92:f3:5f:c0:
         27:4b:19:52:7a:ea:81:44:12:88:72:c0:c8:e1:da:3b:47:71:
         c5:06:e8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:57:06 2026 by rpki-client