Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
File:                     HdXNKgJh4eYGndd1iU2CbuiDbB4.mft (raw, json)
Hash identifier:          +bYg+94xgmXGJs2se8PaH1xE4d3lIRcQHqUjUiOVimw=
Subject key identifier:   92:D8:5F:69:11:4A:7C:37:8B:65:F2:60:8D:B5:C0:B8:46:E7:BF:D8
Authority key identifier: 1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
Certificate issuer:       /CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Certificate serial:       019E1F7ED84EF06C07F77517037121215554
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 04:01:07 +0000
Manifest this update:     Wed 13 May 2026 04:01:07 +0000
Manifest next update:     Thu 14 May 2026 04:01:07 +0000
Files and hashes:         1: 53uXZdGunbCbkFbF5LCIWF6hUow.roa (hash: YdDbEGhWwhK//MEhtCOroEdkE5sIGg0zyX8WVqthVro=)
                          2: HdXNKgJh4eYGndd1iU2CbuiDbB4.crl (hash: 7SyE46Pimn62+OwiBS2GI1SC66V5u9W85mbiojaBjFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7e:d8:4e:f0:6c:07:f7:75:17:03:71:21:21:55:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
        Validity
            Not Before: May 13 04:01:07 2026 GMT
            Not After : May 14 04:01:07 2026 GMT
        Subject: CN=92d85f69114a7c378b65f2608db5c0b846e7bfd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8d:92:1b:ce:cf:75:ee:0d:de:ff:af:dd:c7:
                    1f:d7:50:53:7b:f4:6b:f7:7c:b6:04:e4:76:5d:a3:
                    56:12:e4:b4:6a:92:33:48:4c:87:c3:91:ab:be:23:
                    ca:30:58:cb:e3:a3:e0:11:b4:57:cf:ed:04:a4:2d:
                    fc:fb:20:5e:25:67:97:2c:fd:fd:a3:11:10:f6:c4:
                    40:b1:86:3d:60:32:50:c3:43:54:c1:90:9b:4b:64:
                    23:6e:10:7c:25:e2:64:bc:13:1d:c6:43:fb:89:e3:
                    12:8e:77:07:0d:68:51:e7:1d:16:ec:59:2f:79:4b:
                    06:59:06:aa:fb:30:17:a3:ab:71:62:de:f1:f6:f8:
                    7d:a0:e0:4d:cf:79:57:05:55:e8:a8:8b:be:4d:84:
                    8f:ec:80:53:82:00:68:91:3d:04:a6:77:81:76:67:
                    c1:7f:8d:25:59:a1:ad:79:8f:a3:a3:9d:c9:3c:4b:
                    84:79:55:57:50:a0:4d:1b:52:8f:85:f0:83:8d:32:
                    38:8f:99:f0:35:35:4c:f7:37:d8:80:64:47:fb:2a:
                    4a:c9:fc:9c:a2:46:11:9c:f4:73:0c:a4:9b:72:bf:
                    69:f2:e2:23:2a:b4:65:c7:e7:e7:46:ad:65:9e:a4:
                    a7:17:d9:17:aa:4e:66:c4:6b:64:97:92:52:97:a3:
                    fc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D8:5F:69:11:4A:7C:37:8B:65:F2:60:8D:B5:C0:B8:46:E7:BF:D8
            X509v3 Authority Key Identifier:
                keyid:1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:db:7d:6f:2f:50:a3:96:b1:f0:13:3e:b5:b4:d1:be:00:d4:
         f6:3e:e7:cd:62:1e:18:50:e8:1c:8c:36:6f:18:0f:51:44:7f:
         82:36:33:e1:d1:6b:d8:14:36:eb:6f:fd:91:5d:05:c8:9d:a8:
         b1:28:9d:7a:5f:09:23:c1:4f:66:49:35:02:90:5b:b6:5f:4f:
         f9:38:ea:83:61:b7:4c:7b:00:e9:5e:1e:d1:cd:de:72:8c:dd:
         ad:90:ea:2d:04:48:34:69:e4:35:30:1b:95:8a:84:2d:51:b9:
         2f:34:75:92:dc:94:0c:f9:01:6e:5c:13:d5:b9:fa:02:3f:33:
         97:0a:95:81:53:a5:e7:b4:c8:71:ac:5d:a0:4e:ec:1e:da:2a:
         41:86:1e:58:5f:8c:7c:2a:b2:8b:d1:fc:f9:7c:7d:66:2d:3f:
         80:7b:10:f2:b3:cf:8e:76:36:d6:63:8e:71:e7:1f:28:3c:b5:
         58:96:73:f1:b9:ad:92:8f:2f:5f:a7:d7:ab:d1:0f:98:14:90:
         8b:f8:da:7f:04:7a:d2:a7:cc:d5:36:ae:f3:4b:32:a0:a8:c8:
         f6:84:37:54:fe:08:bd:59:4f:dc:b2:12:38:06:b9:25:52:3b:
         44:e7:55:17:a6:ea:3a:23:8e:27:30:d3:14:2a:be:38:57:57:
         84:67:c9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:16:30 2026 by rpki-client