Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
File:                     Y9nR2VwetxbugZUEWnfLohgdeew.mft (raw, json)
Hash identifier:          LTU0G+RaihklS7aodg7A9BEl4iktZyjvkFGXxuobctg=
Subject key identifier:   37:CF:41:6C:9A:E6:44:4C:E3:90:5F:A3:E0:16:53:9B:31:65:6C:22
Authority key identifier: 63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
Certificate issuer:       /CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Certificate serial:       019E1D907B4BFB6E20E655E6C61FD6508D41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
Manifest number:          1919
Signing time:             Tue 12 May 2026 19:01:08 +0000
Manifest this update:     Tue 12 May 2026 19:01:08 +0000
Manifest next update:     Wed 13 May 2026 19:01:08 +0000
Files and hashes:         1: 4IporOiK6JktRpGESiSAAQpMF7U.roa (hash: lg+Ex4UPGBW/ZbBLSg9owvXX4yPCqEFw5/NmsjkdpGk=)
                          2: NkORSlpsNzTNf4Yu6bNI9qrV2xQ.asa (hash: wbUaskZvxVYhABFMYZHgXLXqscELVMuo7ua+/E/mtdY=)
                          3: Y9nR2VwetxbugZUEWnfLohgdeew.crl (hash: t6DeKlVX58FGMWxzLn1R+orR63mdR6EHPh+M+/CQUF4=)
                          4: fNxI3dXScPmMR3z1E-3FYKWMeS8.roa (hash: aphBfexzTqun+pqPzK9ahrBEriTPK5GbP96jBpZa6kw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:7b:4b:fb:6e:20:e6:55:e6:c6:1f:d6:50:8d:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
        Validity
            Not Before: May 12 19:01:08 2026 GMT
            Not After : May 13 19:01:08 2026 GMT
        Subject: CN=37cf416c9ae6444ce3905fa3e016539b31656c22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d3:99:76:5c:14:bd:55:9a:e2:6b:b4:18:79:
                    58:63:cc:cc:a0:c6:05:48:71:85:51:f8:0b:cd:de:
                    79:38:e8:dd:ef:fa:ff:fe:1e:4a:7a:37:93:03:73:
                    bf:11:66:29:00:6c:94:0c:f1:c8:16:21:eb:3b:80:
                    3d:28:ff:07:30:e0:3e:3c:24:ce:fc:2d:62:a6:05:
                    60:5b:f6:3c:50:7a:7d:43:5e:b7:47:a7:65:71:91:
                    25:09:1b:34:f5:86:31:45:25:b2:07:cd:dc:6f:2a:
                    c4:6d:bc:3d:a4:ec:88:60:08:b3:fc:aa:3e:cf:ed:
                    cf:8b:f5:e5:d4:5c:77:a7:77:77:de:9b:9b:a9:33:
                    a9:36:99:76:92:82:0d:85:34:93:f1:b5:d4:0f:de:
                    6c:dd:82:3a:8f:7f:44:c3:28:be:19:5f:f0:a5:04:
                    a7:65:48:cf:79:ad:22:60:2d:3a:4c:59:c9:22:b0:
                    ec:ee:50:d8:89:cb:6b:0a:0b:d8:83:1c:6b:8f:ae:
                    7b:5d:61:71:89:83:bb:10:bf:df:ad:32:e0:07:a6:
                    e4:f3:eb:30:ec:59:90:1a:c3:e1:7f:2d:52:5d:87:
                    25:8d:54:5f:12:c5:d9:09:16:47:29:23:31:0f:aa:
                    5d:30:0f:c1:c4:a6:96:be:88:25:74:59:c1:a8:4e:
                    77:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CF:41:6C:9A:E6:44:4C:E3:90:5F:A3:E0:16:53:9B:31:65:6C:22
            X509v3 Authority Key Identifier:
                keyid:63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:28:57:72:0b:b8:26:66:89:d1:22:41:a1:7b:dd:06:43:41:
         42:e0:48:af:8d:eb:74:fb:04:9f:a2:3a:5c:98:46:d5:83:7d:
         9c:1b:c3:75:f6:b5:21:a8:e6:3e:71:1c:3b:9b:99:8f:b6:1e:
         28:f8:94:19:a5:f0:87:fd:48:54:1c:56:13:88:7d:e3:c0:aa:
         b6:7f:d8:df:cc:87:b4:45:ed:72:7b:18:6c:fb:64:90:d3:be:
         59:94:c9:52:6c:ba:1e:7b:53:cd:25:d5:d9:8b:44:98:26:49:
         1b:73:d5:73:ab:1d:6b:3e:c6:51:d8:0e:ce:94:ab:6b:3a:3a:
         64:cf:37:82:48:49:de:f3:c5:67:06:a2:d5:77:98:2b:fd:50:
         eb:ab:3a:71:d2:68:2a:f9:16:7a:24:1e:a4:2f:99:4e:7c:b2:
         e4:71:f2:5f:0b:62:52:96:20:cf:97:70:de:fc:44:20:d6:7a:
         65:99:15:e4:6e:d3:0c:36:ae:03:19:65:7e:42:93:63:22:7c:
         4c:58:01:8d:d7:22:c9:ee:09:a7:5e:79:95:d3:09:59:f4:7c:
         1d:8b:5c:75:7d:08:36:d1:cd:69:a2:f0:92:bb:40:6e:ee:a9:
         21:99:1f:d0:84:0c:02:c2:51:4f:3b:28:f4:d9:79:5e:a1:eb:
         49:97:db:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:13:26 2026 by rpki-client