Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
File:                     brYQV7gmVB0hbNWVz4bGoG-yrhE.mft (raw, json)
Hash identifier:          GkmkGYKuh9lxpwgimebDd3F/W30JY6rJ7cRtMv7tcVc=
Subject key identifier:   93:74:15:88:41:45:22:EA:F8:D7:1F:3D:35:A0:1D:1A:51:ED:D1:50
Authority key identifier: 6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11
Certificate issuer:       /CN=6eb61057b826541d216cd595cf86c6a06fb2ae11
Certificate serial:       019E1EA2BAAB824D067B17C1E4054FA5E22B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
Manifest number:          1904
Signing time:             Wed 13 May 2026 00:00:41 +0000
Manifest this update:     Wed 13 May 2026 00:00:41 +0000
Manifest next update:     Thu 14 May 2026 00:00:41 +0000
Files and hashes:         1: P6M6hIv3ncju_oAyACKAsIZE6yk.roa (hash: oBuEgjnErP2My5jsSftgYI4iR6dqS74HFR1/k9AVZ+E=)
                          2: brYQV7gmVB0hbNWVz4bGoG-yrhE.crl (hash: sp5Kx76H1TMb4BzUmh7MML6usu/buW/7vJyPEmhAkYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:ba:ab:82:4d:06:7b:17:c1:e4:05:4f:a5:e2:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb61057b826541d216cd595cf86c6a06fb2ae11
        Validity
            Not Before: May 13 00:00:41 2026 GMT
            Not After : May 14 00:00:41 2026 GMT
        Subject: CN=93741588414522eaf8d71f3d35a01d1a51edd150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:88:44:1c:50:5a:e0:47:c5:41:42:be:5f:f5:
                    94:a8:6d:4e:81:96:70:5e:c7:b6:14:2d:5f:ad:0e:
                    2d:6b:5d:df:98:64:27:8b:8e:e3:67:1d:dc:c9:cb:
                    7a:4d:4b:66:a7:f7:ab:b5:df:ae:a7:3f:71:74:14:
                    51:0e:2e:aa:c1:c3:f0:f6:b7:17:ce:ae:71:ad:c6:
                    41:6d:7c:57:2e:e7:a7:f6:5d:d4:ea:16:58:03:29:
                    a7:f4:4a:c1:a7:21:39:b6:bb:f7:ec:22:2d:aa:4b:
                    eb:ad:57:a9:ba:fa:5c:df:3a:07:da:0e:d0:f7:de:
                    6f:2c:54:1b:29:8e:3c:49:96:c2:c1:da:28:44:6d:
                    10:74:25:a4:c1:6a:71:8c:45:4e:d1:d6:2f:77:c2:
                    fa:88:57:5d:75:8f:46:54:8e:4f:73:58:b2:1e:9a:
                    5b:46:99:6f:9c:3b:f4:8d:0b:c4:c0:46:fe:37:23:
                    31:7f:ba:ea:52:15:ab:4b:6e:bb:0a:98:82:33:ae:
                    90:7a:40:b7:41:c0:f2:2b:fd:d3:2b:f6:37:32:24:
                    6e:19:9e:59:cf:04:de:79:8d:4d:16:6c:29:41:31:
                    33:c1:44:dc:c1:3d:50:fe:e9:b9:a8:b5:c6:4d:f8:
                    0a:73:f4:3f:db:83:b0:f8:c9:89:55:d2:3d:54:70:
                    be:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:74:15:88:41:45:22:EA:F8:D7:1F:3D:35:A0:1D:1A:51:ED:D1:50
            X509v3 Authority Key Identifier:
                keyid:6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:3a:6f:94:03:56:68:11:34:75:f4:cd:ac:88:95:61:aa:14:
         91:9c:9d:8e:cc:bf:df:80:aa:ca:5b:68:e2:f5:2c:4f:00:0f:
         07:59:3f:b5:f7:8e:47:47:cf:a7:d8:9e:61:21:de:b9:b5:28:
         30:4a:f3:8e:42:74:50:d9:70:5e:59:fb:c2:b0:a1:9f:d4:75:
         31:28:cb:8d:3a:70:af:88:79:a3:2f:94:51:25:0b:b2:3d:2a:
         a5:b3:43:6c:4c:7b:6a:ef:a3:a7:ed:6d:65:40:06:ea:15:67:
         7b:4a:38:85:5c:d3:be:42:62:46:96:5b:40:45:ce:90:d2:50:
         92:8d:56:76:4e:1b:14:e6:76:39:f7:0d:ea:99:6d:43:d4:bd:
         cb:c6:77:a8:2d:1b:41:ed:f2:1c:b1:3f:22:35:70:28:6b:c7:
         f5:bd:d9:20:29:92:45:2e:1a:77:c0:29:30:17:dc:49:22:cf:
         54:89:42:b3:60:6a:7d:80:15:48:0c:06:57:af:99:4d:fb:6d:
         95:da:da:b7:fa:53:93:46:e8:2b:c0:2a:03:13:0f:04:37:fd:
         53:99:02:68:35:06:55:ff:4b:a5:20:d6:2c:14:41:1c:21:8d:
         20:56:fa:52:c7:17:5b:05:e8:d7:a2:a9:47:18:8d:c0:87:bd:
         85:e4:ff:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:20:55 2026 by rpki-client