Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
File:                     9KWwQv5I7rEjvlbb-ejdogweoR0.mft (raw, json)
Hash identifier:          Ha5VkB77pwxxibKgajs2SJzayx/scY2tj02t4D20ZuA=
Subject key identifier:   4F:0B:8C:E8:55:FB:BF:0B:72:CA:41:47:F0:B5:51:BB:4E:47:07:10
Authority key identifier: F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
Certificate issuer:       /CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Certificate serial:       019E1D223DE415B3E8C02FDEE062BBAC53B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
Manifest number:          1903
Signing time:             Tue 12 May 2026 17:00:43 +0000
Manifest this update:     Tue 12 May 2026 17:00:43 +0000
Manifest next update:     Wed 13 May 2026 17:00:43 +0000
Files and hashes:         1: 9KWwQv5I7rEjvlbb-ejdogweoR0.crl (hash: yuZxodrqrXXnxcphhzGgi0FDW9Uz2zI35iGawBV30LE=)
                          2: HZePOmsjkPsg7dlktNrDrbvkEoQ.roa (hash: EMtZKX87wa385GEwMyBcWWCzgkUjroenf3wknZ0qOr8=)
                          3: feUrijd_KveyJ7eNJ1rBQYy4hhQ.roa (hash: 8ChsNr7pTk9JhrykIfRkpxl+JlzU+6lvsFJu1WkZIeY=)
                          4: jbQbuOumCNgoddvSeNQ0EqiLIvk.roa (hash: r2PNx4QtBVQh/b8nKhzHQVcKqAGoHRGsycMInrQsQyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:3d:e4:15:b3:e8:c0:2f:de:e0:62:bb:ac:53:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
        Validity
            Not Before: May 12 17:00:43 2026 GMT
            Not After : May 13 17:00:43 2026 GMT
        Subject: CN=4f0b8ce855fbbf0b72ca4147f0b551bb4e470710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:40:f3:01:d8:26:99:15:9f:39:83:8f:86:59:
                    3a:62:84:1b:d3:ea:c6:ff:42:16:0a:f6:bc:b7:7b:
                    89:5c:2a:40:8b:04:af:8f:90:9b:e0:78:6a:bc:aa:
                    10:ca:9e:5f:17:bb:e2:b4:23:d8:fa:61:1c:2c:20:
                    bb:76:dd:8e:7e:b6:73:02:df:d3:47:ed:53:d4:7d:
                    22:a0:77:11:50:de:15:ff:d2:6e:80:1b:b7:f2:d0:
                    3e:e0:c8:a3:77:bb:8d:f1:72:cb:62:24:1b:07:a2:
                    48:a2:c0:24:56:7b:3f:b8:09:d9:9e:39:4f:47:2f:
                    01:52:c8:ef:bd:ab:ac:f7:df:ce:93:f9:3f:63:2c:
                    84:d1:ac:c8:6f:5d:f0:7b:5b:39:bc:ce:7c:66:c2:
                    b0:21:aa:61:72:b9:cd:4c:e9:28:52:8d:b0:8b:d1:
                    81:50:d4:af:5c:f3:08:3d:b1:3a:ed:41:6c:f7:dd:
                    a3:90:35:b6:ee:fe:dd:2e:f0:37:8c:09:29:93:3d:
                    c0:a4:a5:27:3e:6e:87:74:66:ba:4a:bb:db:57:45:
                    05:f7:3b:72:0e:10:99:71:ca:87:c2:ea:f6:62:9f:
                    2f:ee:c5:5f:08:b8:78:bd:11:c0:31:40:bc:19:ae:
                    c0:34:9b:ec:98:25:f3:6c:e6:5d:4f:3a:71:60:fd:
                    b7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0B:8C:E8:55:FB:BF:0B:72:CA:41:47:F0:B5:51:BB:4E:47:07:10
            X509v3 Authority Key Identifier:
                keyid:F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:d9:85:72:e8:a3:d9:97:39:9d:e6:2c:4b:c7:8c:0e:c7:fc:
         0d:5b:56:63:81:08:88:c5:44:4a:95:47:0f:5a:c2:af:e0:93:
         43:d1:72:0d:8b:c1:3d:e7:c6:2d:68:cd:b5:62:d6:c8:27:f4:
         59:8a:e0:ac:20:f2:b6:32:ed:59:2c:8b:1e:04:05:9e:78:20:
         d9:ae:c6:f9:89:1c:7b:07:50:c0:9d:3c:d2:01:83:ad:32:b9:
         05:07:87:72:9b:89:12:f5:f7:dd:10:6a:59:14:53:05:7f:d3:
         50:12:0a:66:39:f4:a0:ca:4c:8a:70:fc:8d:63:95:c5:7a:9a:
         63:ce:3a:65:74:d8:0a:f8:f7:a9:50:f7:3c:c6:de:72:be:34:
         78:ec:35:15:80:48:94:ed:93:ca:54:59:17:ac:f2:b5:a3:c7:
         3f:e5:d1:f8:8b:32:de:22:9b:fd:bd:01:47:c7:15:61:34:9a:
         ae:60:58:aa:ce:2a:c7:16:9b:66:5b:8a:22:5f:99:07:41:60:
         f2:28:8b:e1:4c:85:fb:97:12:60:ea:93:7d:d9:33:67:58:67:
         a7:48:82:92:9b:43:b3:3b:1e:be:76:3a:c1:3c:f4:23:4d:15:
         af:82:2b:d5:2e:f4:4f:0f:5f:c0:aa:ba:b0:c6:78:bf:30:68:
         62:07:76:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:08 2026 by rpki-client