Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
File:                     v9gcqQzFIkWGr-urHHixeQJo1cE.mft (raw, json)
Hash identifier:          flnbRsqScOc53u3SqdTiryRT+FRROFCcvUSqH7bFOUM=
Subject key identifier:   B1:35:FD:BB:FD:F2:E9:42:D5:A8:60:5D:CE:1D:AF:D1:EF:15:AD:22
Authority key identifier: BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
Certificate issuer:       /CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Certificate serial:       019E1DFEA21CAC66E1B1323F16703CA1EFDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 21:01:27 +0000
Manifest this update:     Tue 12 May 2026 21:01:27 +0000
Manifest next update:     Wed 13 May 2026 21:01:27 +0000
Files and hashes:         1: 33KpGlS_VtYMS4VxaCOKuIoKRIU.roa (hash: PycRk9WWt2oF1w6VPqOesZM2Iyc5sLWnv91I0/vqfTA=)
                          2: 6FH6tzQ-OGL1olRZmGsLavyetEI.roa (hash: t7CC5E4Cq4qAeFI/xEX8HmFf3pMyY/Orv1k1m68NVmM=)
                          3: v9gcqQzFIkWGr-urHHixeQJo1cE.crl (hash: bSBw1GtIKBu87zGG9zXOLivkgOffmrcPbP+E5Sv7Yo8=)
                          4: zt1e9hXqnKC7GTDcsl5TmahbR14.roa (hash: cMjId05GIC2DoYaxGvqZ9tQQexKxYbYtbXXHMb77nW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:a2:1c:ac:66:e1:b1:32:3f:16:70:3c:a1:ef:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
        Validity
            Not Before: May 12 21:01:27 2026 GMT
            Not After : May 13 21:01:27 2026 GMT
        Subject: CN=b135fdbbfdf2e942d5a8605dce1dafd1ef15ad22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:69:b7:e9:35:c1:98:6d:78:37:51:40:c6:56:
                    da:9b:b2:11:70:45:ea:19:8b:77:40:87:91:d4:85:
                    d8:cf:26:8c:a2:c3:e5:60:db:46:ec:1c:23:6f:1f:
                    16:2e:ef:f8:a7:62:47:14:59:2d:bb:25:9b:5e:18:
                    d4:fa:4d:74:f3:40:82:91:5c:44:e6:47:c1:e6:56:
                    61:1e:78:36:ab:44:f5:ba:4d:6d:55:61:17:49:93:
                    49:2a:40:7c:d8:a8:6d:2b:9c:1d:c3:06:72:a1:80:
                    65:7a:5f:10:b8:75:18:c9:96:34:d9:0e:af:b4:86:
                    c7:05:b8:71:49:8c:c3:34:b5:a7:a7:69:6b:56:39:
                    3c:a2:e5:ba:f0:95:94:43:62:82:b3:2f:d2:c0:c2:
                    e6:86:8c:ab:52:8c:9c:4d:9d:ad:47:4d:4c:ad:e1:
                    10:9d:5b:92:7b:63:c9:7e:91:27:db:59:b8:26:9a:
                    b3:21:6e:4b:fd:5c:89:f3:e5:60:d2:89:f6:59:2c:
                    ed:61:fb:42:e4:1d:9f:7f:d0:3f:f6:1d:fb:3e:bb:
                    fd:4d:8f:93:52:5a:5c:a7:68:0a:aa:4a:21:5f:25:
                    9b:53:c2:72:2c:c0:93:77:c1:66:ba:9f:b5:29:9b:
                    5c:fa:46:a4:d4:3b:38:2b:c1:d6:75:48:1b:77:41:
                    cc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:35:FD:BB:FD:F2:E9:42:D5:A8:60:5D:CE:1D:AF:D1:EF:15:AD:22
            X509v3 Authority Key Identifier:
                keyid:BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:36:2c:a6:a9:e4:bd:a2:0d:ad:37:9a:90:5c:61:a1:3c:c8:
         aa:fd:1f:eb:6f:70:bb:5d:9b:dc:17:c9:72:af:ee:f3:89:4a:
         18:32:7d:bb:e4:e6:21:72:53:cf:fd:2e:de:64:ff:35:88:ba:
         bf:d7:2e:c3:21:6b:a1:79:17:9f:8c:79:1a:b0:01:94:20:5a:
         df:11:90:f9:57:1d:d7:e2:77:0c:cd:f5:0e:d3:2d:b2:ee:f3:
         31:bc:69:2f:22:f7:51:1f:a1:8d:85:b3:fb:c2:c6:ac:8f:f1:
         38:b7:44:ab:69:1a:3b:b5:49:12:26:8d:1b:54:2e:78:62:8d:
         0b:e2:3b:cf:b1:a1:45:36:42:f5:98:21:db:7c:76:76:93:1f:
         77:0b:19:bb:69:7c:ea:88:65:46:48:ce:98:f6:4c:cd:a7:50:
         e2:c7:b7:fb:0e:0f:ff:32:7f:c9:74:0e:ae:92:42:3a:cc:a8:
         7c:18:e1:af:17:ca:3d:0b:7b:3e:73:2d:63:8a:67:9c:ce:2a:
         fe:13:a5:ca:eb:8d:8f:98:e7:16:7d:1b:60:58:fb:d9:cc:55:
         51:7f:42:1e:43:86:bb:e2:47:19:6f:77:13:e3:44:a2:2b:16:
         c0:52:c5:4e:15:22:aa:00:09:39:74:71:bd:73:0f:8c:1c:53:
         71:90:1f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:54:05 2026 by rpki-client