Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
File:                     cK01PMGg0W1ejhSjdXWm89YFY_g.mft (raw, json)
Hash identifier:          TgAjuABd6xHXR5ziEWRhI7K0MlccL3EpQN5/ak3PhRc=
Subject key identifier:   A9:68:7E:25:4B:0C:40:54:5D:A2:79:CC:A1:6B:02:B8:36:46:09:B3
Authority key identifier: 70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
Certificate issuer:       /CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Certificate serial:       019E1DC73127E830D066D625C26F8196F6F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 20:00:53 +0000
Manifest this update:     Tue 12 May 2026 20:00:53 +0000
Manifest next update:     Wed 13 May 2026 20:00:53 +0000
Files and hashes:         1: N4mZn2yk8YP_gXohWnBQWYlSt0g.asa (hash: RnHGDbrdo5NYjOwiFA/EE2zdRQ3mHt7+S/1unCOrs8U=)
                          2: NB9VsHBRBEiYw3McIpBpW336Ki4.roa (hash: RFYXt5Z4dlbdvwt6pd136hK2qoU5DGTk7ZrYTY6dsB8=)
                          3: YswYZYlKWOyRavy0ATCTvPfm9wQ.roa (hash: aGrODVPH+/3IzPSKFduvxP2Zeu3f9DRc9hp0rYqfO0U=)
                          4: cK01PMGg0W1ejhSjdXWm89YFY_g.crl (hash: fUSE4Y7rXg84vSDZJHnZUCf9W3kwuotdU0snG32sHEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:31:27:e8:30:d0:66:d6:25:c2:6f:81:96:f6:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
        Validity
            Not Before: May 12 20:00:53 2026 GMT
            Not After : May 13 20:00:53 2026 GMT
        Subject: CN=a9687e254b0c40545da279cca16b02b8364609b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:31:eb:50:44:25:b8:27:1d:c0:7c:df:ad:ef:
                    35:fa:e1:c9:b7:b1:f0:72:c4:1e:72:71:dc:8b:92:
                    c1:e8:9f:85:73:ac:d4:ce:76:d7:ec:8a:58:d1:0d:
                    f3:ed:f5:b3:49:3c:be:27:31:e0:5c:ce:7e:1b:13:
                    9e:70:de:71:ef:c4:02:86:8b:13:d3:82:ce:f6:61:
                    34:ad:a9:51:27:95:76:9d:f1:1f:49:06:57:08:a7:
                    ad:44:8e:87:62:62:e3:58:a0:50:33:18:9a:00:0b:
                    23:5c:5d:99:9e:ab:5e:5f:3b:64:55:01:f2:70:ae:
                    89:95:0e:0f:16:53:6d:22:bb:e9:9d:7e:c9:a2:3d:
                    c6:3a:86:c0:2e:f9:21:8c:99:8d:21:c9:8d:91:40:
                    de:d4:03:fb:01:59:19:0c:87:3c:94:36:b0:7a:8e:
                    1b:b3:75:af:aa:18:e7:7f:e1:09:e3:85:b2:f5:04:
                    f8:8a:15:2c:c8:a0:80:09:3f:7d:e6:e6:28:47:dd:
                    8b:a6:88:cf:35:36:1c:5a:28:cc:35:16:59:85:3b:
                    a4:b2:b5:98:73:c9:8c:90:a8:5a:21:47:b7:bd:e7:
                    8b:00:79:9a:d4:b3:40:33:0d:71:1a:8f:31:4d:07:
                    13:33:6c:22:c3:07:75:0b:75:71:f3:ed:b6:26:4c:
                    1e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:68:7E:25:4B:0C:40:54:5D:A2:79:CC:A1:6B:02:B8:36:46:09:B3
            X509v3 Authority Key Identifier:
                keyid:70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:1d:c7:30:09:be:1f:de:81:b5:6b:b6:ae:2b:4d:c1:3b:f7:
         41:65:4b:91:79:2c:30:23:c2:54:ef:3b:70:a3:a9:53:d7:10:
         5d:fd:70:f2:59:1e:16:96:5d:9d:04:49:90:26:a5:bb:4d:04:
         f9:53:6a:48:80:35:fd:0c:f2:2b:9e:4d:b3:d2:d4:2f:bf:4b:
         92:29:ec:48:cd:c3:cd:30:6f:1c:80:86:9f:99:c2:cb:5a:c9:
         5a:f5:82:67:b6:fb:03:19:80:94:ff:96:59:f9:b0:e0:5f:1c:
         75:7a:ac:e9:3a:4e:c4:47:f0:12:0c:df:d3:4e:d4:2a:e6:a6:
         ed:68:f6:9e:81:44:86:ac:ff:22:44:05:4f:0c:d1:af:e2:0d:
         7d:9d:91:f5:9e:fa:5d:dc:6a:59:54:d7:29:a3:33:ef:3b:ca:
         37:37:ce:3b:bf:cc:7f:08:52:cc:6b:d2:a4:2c:20:d9:92:bc:
         8b:3b:58:68:8c:5b:03:24:7f:a2:89:67:f1:53:e1:17:5a:b2:
         2e:8f:70:74:34:ef:32:08:c1:78:0a:ff:0a:8f:6a:5e:56:ef:
         91:e6:20:6a:a3:f0:98:9e:27:a8:69:28:27:73:23:1e:0b:10:
         38:de:76:12:4d:80:5a:1b:9e:6b:49:08:3e:0f:a8:f9:26:42:
         2e:2a:2d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:53:34 2026 by rpki-client