Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft
File:                     FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft (raw, json)
Hash identifier:          octdZ9+bFzLFruKWGJm4dHXRduo9Fw2b4nuY/XIZnVs=
Subject key identifier:   4F:1A:EC:8C:2D:A8:CC:1A:DC:9F:00:B7:6E:CA:66:52:F9:DA:41:CC
Authority key identifier: 16:27:57:3C:68:92:9A:B2:A4:59:0E:92:A5:1A:BC:40:EA:9E:58:17
Certificate issuer:       /CN=1627573c68929ab2a4590e92a51abc40ea9e5817
Certificate serial:       019E1DFE8DAF9085594B6B7408DC7F3E10CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft
Manifest number:          1908
Signing time:             Tue 12 May 2026 21:01:21 +0000
Manifest this update:     Tue 12 May 2026 21:01:21 +0000
Manifest next update:     Wed 13 May 2026 21:01:21 +0000
Files and hashes:         1: B8AGidGKLoQLti3y3WxY0M6Ums8.roa (hash: GW4/8IG15yoULapMWSUA1tjQmytW8th3DPjNUReuGJY=)
                          2: Dnmq_-IXcuuCYcO66EjRn9inPJA.roa (hash: JBkzUBE+QTQ6AfEZVnlaYzg8oi2JCs+6/Xvoz9ACRuE=)
                          3: FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl (hash: EPZKQxCMJxQda8xvZyn3yYAqAGLAPMEW9SEClHjqjh8=)
                          4: Y1Sj94JEWNEu02oE1R3YlRFCB-s.roa (hash: usulbFFGi1WaHBoDqV6MzsH9CvtQ7PX9NAUWfnNmmj4=)
                          5: uR5nbvWvEqFKcr15HMG7q7wElj4.roa (hash: IzuEMc/xhLnvFIqk3mMDeFSvUitKaMgCVjRpshfp5kU=)
                          6: yGnG3HP3nemnG7Yzwu4wtoayiDo.roa (hash: lWgaSw9AoddwDlUpkfGonh4HcHHKtgX9pZvTG5NcRBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:8d:af:90:85:59:4b:6b:74:08:dc:7f:3e:10:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1627573c68929ab2a4590e92a51abc40ea9e5817
        Validity
            Not Before: May 12 21:01:21 2026 GMT
            Not After : May 13 21:01:21 2026 GMT
        Subject: CN=4f1aec8c2da8cc1adc9f00b76eca6652f9da41cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:be:3a:34:eb:af:82:6a:07:ca:a1:1b:bf:6d:
                    4e:c7:d3:f7:15:bf:52:55:05:14:f3:6c:c7:00:6d:
                    db:db:2b:08:39:09:80:d2:e3:bb:63:a0:6f:c7:b0:
                    12:c8:7b:fd:cc:73:7a:23:24:a8:77:9e:9a:7a:23:
                    ee:96:bb:49:2f:cc:5f:3b:25:3b:bf:50:52:7b:7f:
                    c8:8b:cb:45:67:7f:a1:db:d1:88:11:d0:e2:04:2e:
                    1f:d4:fa:fc:e7:b2:20:81:1b:db:73:c4:81:fd:a6:
                    b1:bf:44:51:8a:e9:94:52:fe:7a:33:9c:90:81:99:
                    da:a4:5a:26:b1:3f:34:24:13:d4:ee:18:1f:50:8e:
                    57:65:d2:4f:67:9d:5c:b0:fc:b7:af:d8:dd:68:45:
                    7a:e7:89:5a:ed:a2:d6:ed:ba:51:41:e4:71:fa:8a:
                    d4:9c:4e:ae:ac:ff:d1:a9:b0:54:e3:a3:64:bc:e9:
                    36:d5:03:a2:b0:e1:b5:32:34:a0:eb:74:eb:f1:a3:
                    4b:04:79:07:47:df:ee:ee:0e:1d:07:22:8a:3a:8c:
                    ba:32:89:e9:ab:53:0a:d8:ec:de:d8:eb:75:89:64:
                    23:be:bc:a0:7b:c7:af:58:3b:b7:d7:33:23:72:17:
                    04:9f:01:64:43:ba:c0:17:88:7e:c2:1e:06:ef:bd:
                    e0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:1A:EC:8C:2D:A8:CC:1A:DC:9F:00:B7:6E:CA:66:52:F9:DA:41:CC
            X509v3 Authority Key Identifier:
                keyid:16:27:57:3C:68:92:9A:B2:A4:59:0E:92:A5:1A:BC:40:EA:9E:58:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:67:96:84:f7:79:f7:fa:00:b9:0c:d8:f4:b9:dc:b1:28:37:
         74:7e:da:0e:aa:5f:e3:b9:86:45:08:f4:7b:0c:18:d8:98:c8:
         aa:52:ae:9e:70:41:d5:9c:8f:ba:a5:81:e4:8f:78:82:dc:81:
         e2:82:1e:a7:90:67:d3:85:d2:a5:f7:ee:4f:ba:e9:9c:8e:f9:
         42:c2:66:6a:4d:21:57:e8:17:da:16:9d:04:49:63:79:e8:5b:
         41:a2:81:6a:16:9c:6c:68:7a:69:7b:e6:1a:23:b0:a0:bf:3f:
         69:28:54:cc:fa:64:f4:18:0b:f7:34:6a:03:34:fb:26:31:4d:
         a7:c8:d7:c9:10:98:91:b2:6d:6f:f1:ac:aa:26:14:b5:66:a3:
         84:2e:1e:38:c7:ad:2a:d4:83:c2:55:11:35:58:7d:3a:d7:2b:
         c8:0c:3c:91:3a:f8:0f:48:56:38:d6:d7:4c:a7:47:8a:e4:4c:
         96:cb:63:86:35:5e:e9:9b:b4:62:ae:3f:09:ab:00:de:c6:eb:
         a8:65:7c:7f:70:eb:16:21:1b:0f:3a:24:a4:ab:77:53:b8:04:
         a0:6d:d8:21:e4:e6:98:06:51:77:4e:e9:b8:ae:4f:1d:7b:17:
         75:f9:b0:7d:21:fc:b5:13:de:83:c5:97:3e:43:7b:6b:1b:14:
         00:67:7c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:35:11 2026 by rpki-client