Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
File:                     I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft (raw, json)
Hash identifier:          8tGiruiii5hRnTjDFXJa6FBNuO3zIzAJOZEfzOTPVek=
Subject key identifier:   C2:E5:53:FE:36:58:66:C6:3B:B1:29:B1:B6:47:90:2E:42:DF:7B:F7
Authority key identifier: 23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8
Certificate issuer:       /CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8
Certificate serial:       019E2023BB627A60752547DAEAEAB3307407
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 07:01:13 +0000
Manifest this update:     Wed 13 May 2026 07:01:13 +0000
Manifest next update:     Thu 14 May 2026 07:01:13 +0000
Files and hashes:         1: I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl (hash: NVi1iE6s9quIK1PjMkRM1MWAjU2pHkDFXRmmDuDj0ck=)
                          2: YH3qouyi9uf0Sjp7erwfbtdqIMY.roa (hash: XATxeFAkfU3QrOitUmq9zj3TBTO+Je2+3q8oJUZcsYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:23:bb:62:7a:60:75:25:47:da:ea:ea:b3:30:74:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8
        Validity
            Not Before: May 13 07:01:13 2026 GMT
            Not After : May 14 07:01:13 2026 GMT
        Subject: CN=c2e553fe365866c63bb129b1b647902e42df7bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:25:2d:ae:af:a3:30:ff:8f:cc:8f:d7:15:a9:
                    55:a4:55:a2:6f:3a:c8:84:21:9d:17:f1:37:d8:39:
                    20:97:1a:5f:e4:85:97:14:5f:0a:13:ab:ce:31:45:
                    80:a9:35:5f:ad:6e:c9:12:ae:f7:89:dc:85:99:72:
                    12:67:dd:76:dc:22:1c:63:94:ca:53:04:e4:a8:60:
                    7a:34:b6:35:13:84:d1:60:43:30:0c:ed:55:bd:62:
                    4f:59:b0:bf:30:af:d4:6d:32:ae:ae:ef:4b:7e:8e:
                    c6:b7:87:06:2b:2d:f4:a0:20:22:0a:26:ee:44:86:
                    88:c6:9c:b8:ba:af:0f:58:7f:27:b3:e2:61:b6:6a:
                    0b:97:6a:16:7e:01:8f:ef:76:57:52:29:dd:61:22:
                    25:36:ed:7a:d7:37:2b:b0:63:f1:82:3e:e8:00:44:
                    2e:e7:af:94:f8:b5:49:f2:04:b3:47:8a:5f:eb:16:
                    a1:36:d5:36:66:56:87:ff:e4:b0:d0:b6:d3:3e:1b:
                    ef:9e:ad:03:e1:c3:3f:ac:65:af:9d:b6:31:ef:fb:
                    57:11:45:c3:10:88:28:d6:d1:50:ba:74:df:4a:96:
                    33:6f:2d:cc:df:36:90:c3:15:23:20:db:b4:c9:b7:
                    5a:19:7f:eb:af:4f:2a:f3:2f:c0:f1:15:64:e8:3d:
                    09:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E5:53:FE:36:58:66:C6:3B:B1:29:B1:B6:47:90:2E:42:DF:7B:F7
            X509v3 Authority Key Identifier:
                keyid:23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:05:29:89:6d:d1:d2:33:34:5e:11:0f:7f:f4:91:1c:a3:a3:
         1d:69:e6:5c:c7:36:70:d5:b1:ca:da:39:e7:50:7e:01:5d:cb:
         6e:fe:56:92:d1:c0:29:60:eb:56:fc:f1:00:e3:73:b0:c2:8c:
         00:01:20:0c:26:bd:49:ad:e8:c1:7e:e6:1d:e1:d4:c0:c2:4a:
         ee:15:f5:0f:c4:41:8d:11:6a:8a:5d:ee:ee:05:03:03:45:87:
         3a:4c:2f:f2:1a:30:27:51:4e:e4:30:b4:26:fb:f2:a5:c1:5a:
         37:2a:93:5c:d5:b7:72:8f:18:fd:8b:ad:7b:dd:7f:10:29:52:
         f3:c5:da:46:3d:b3:0c:c6:cf:52:e3:07:2a:a5:d5:28:e7:ba:
         fb:73:b1:38:26:f3:0c:23:68:0b:18:c4:20:6e:94:0c:c6:f2:
         40:4c:23:d1:4f:dd:13:84:8a:a1:f6:27:81:7e:3b:69:a4:64:
         d0:47:db:1f:64:bb:95:74:08:2f:f1:e4:46:db:3e:e0:7d:f6:
         37:d1:2c:4a:43:70:07:5c:46:3d:5e:b5:29:e7:5b:25:07:f5:
         53:59:2f:c5:aa:a7:b5:86:0a:54:35:98:89:73:df:0a:4a:b0:
         a8:8b:69:4b:9a:52:1f:65:4d:45:be:b8:6d:9b:16:36:cd:99:
         2a:ae:2c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:20:31 2026 by rpki-client