Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
File:                     1jND98xsI32j-LgROMBR2Pk8nE0.mft (raw, json)
Hash identifier:          S/hLJB5sh9ws/vf8v/tJWoXkZ5eTtV86ywa0z9ix+Fo=
Subject key identifier:   56:78:8A:42:9B:84:62:A4:E1:84:BF:55:B2:4F:CC:34:92:BD:C1:09
Authority key identifier: D6:33:43:F7:CC:6C:23:7D:A3:F8:B8:11:38:C0:51:D8:F9:3C:9C:4D
Certificate issuer:       /CN=d63343f7cc6c237da3f8b81138c051d8f93c9c4d
Certificate serial:       019E1F117C43611A85168EDAE7DD64F0479E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1jND98xsI32j-LgROMBR2Pk8nE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 02:01:39 +0000
Manifest this update:     Wed 13 May 2026 02:01:39 +0000
Manifest next update:     Thu 14 May 2026 02:01:39 +0000
Files and hashes:         1: 1jND98xsI32j-LgROMBR2Pk8nE0.crl (hash: fF66FuJSNOay+WAKkxz4RS85IxgWgMUYCE6M6TnLvd8=)
                          2: EP-Dzz1NsbE3FdE9FqHYCykGClM.roa (hash: j4hgB5ZXwadY27nb0X3WLEn8DWlc84cj5g+efdOnuH8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1jND98xsI32j-LgROMBR2Pk8nE0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 02:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:7c:43:61:1a:85:16:8e:da:e7:dd:64:f0:47:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d63343f7cc6c237da3f8b81138c051d8f93c9c4d
        Validity
            Not Before: May 13 02:01:39 2026 GMT
            Not After : May 14 02:01:39 2026 GMT
        Subject: CN=56788a429b8462a4e184bf55b24fcc3492bdc109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b7:9f:bf:d6:f5:53:e2:6e:ce:ba:fc:dd:4f:
                    aa:c5:c8:45:f4:dc:78:56:6d:5a:2b:d6:4e:09:ed:
                    22:60:26:be:5d:44:fc:9b:db:0a:da:19:f4:1f:29:
                    d8:c0:32:f4:4d:89:7e:da:7b:0b:fc:25:57:96:be:
                    8d:74:65:f7:b5:47:e9:d2:b9:a1:78:17:cf:ac:de:
                    6d:5b:a6:cb:21:4a:98:05:fd:b2:18:ad:13:a3:b3:
                    f9:05:17:ff:09:59:d7:ec:c1:2c:f8:8e:66:4d:91:
                    e5:6a:31:ac:2e:4b:50:f9:7a:92:a2:0d:d8:2c:1b:
                    a1:95:52:c1:77:23:00:ed:fc:c2:dc:71:91:af:bf:
                    92:ab:14:62:49:9d:fc:da:c7:f3:8b:d9:4b:41:28:
                    51:64:46:bd:db:d4:9d:24:33:f8:74:88:c8:1b:80:
                    28:67:97:03:00:87:4f:93:87:53:2f:c9:7e:c2:5e:
                    ed:67:25:7a:41:35:0c:57:6f:48:d3:4a:33:f3:1b:
                    3c:13:5c:47:a8:9d:28:03:73:56:2d:2d:87:3e:b1:
                    7f:5b:76:9d:a6:72:0b:f2:63:a2:15:70:1c:73:7c:
                    7d:cb:d2:dc:47:2b:0e:2d:88:03:08:3c:57:66:2f:
                    71:7e:8d:f5:0a:4d:78:43:bc:7d:16:cf:54:31:61:
                    d6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:78:8A:42:9B:84:62:A4:E1:84:BF:55:B2:4F:CC:34:92:BD:C1:09
            X509v3 Authority Key Identifier:
                keyid:D6:33:43:F7:CC:6C:23:7D:A3:F8:B8:11:38:C0:51:D8:F9:3C:9C:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jND98xsI32j-LgROMBR2Pk8nE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:e7:22:57:8c:4b:67:fc:06:73:3b:02:d6:76:2d:21:f5:32:
         19:d1:cb:e3:10:af:b6:2e:fa:91:a2:34:ab:77:76:fc:e2:ff:
         60:26:3b:61:fa:5b:f1:ac:0b:c5:2d:6d:4e:cb:db:09:21:64:
         c3:5e:d1:4f:54:e0:2f:e5:5d:e8:92:d1:63:05:36:a6:b4:1f:
         8b:75:12:c0:d3:a3:6f:15:c6:b6:6f:7d:b3:3c:a3:1d:65:8a:
         8b:43:7d:a1:48:e9:ec:30:31:c7:c3:bc:a4:5f:17:ba:11:97:
         6e:8e:9b:14:cf:49:c0:5c:e6:6a:a2:4f:fc:a1:2f:34:1f:c9:
         de:e6:59:da:67:a3:0f:4a:d9:c2:9d:6a:79:63:2f:46:a1:c2:
         6c:af:32:09:1e:e6:0e:6f:33:cc:23:43:56:c9:cb:2b:79:b1:
         96:3f:e8:4e:3c:f5:3c:29:d7:f6:0c:26:b4:59:33:e8:1a:97:
         7a:33:91:0e:d6:68:26:67:29:f2:35:50:ef:e3:4f:5c:08:35:
         54:cf:cd:88:ee:f7:76:a2:fe:38:49:5d:22:9d:01:9b:c1:4b:
         09:df:c4:ba:20:ac:1a:4a:60:9c:93:fd:44:66:c2:ac:16:ca:
         58:b8:b8:56:9f:f5:7a:ee:07:c0:61:bc:6c:1f:ce:2f:1b:29:
         46:43:94:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:58:44 2026 by rpki-client