Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
File:                     1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft (raw, json)
Hash identifier:          WtACc9cXnDq3Vd1Iw7/zqDSuHqZ0rikiq88DW3iX3sc=
Subject key identifier:   1F:00:E3:EE:22:CE:8D:72:F0:30:16:CD:A7:73:37:B2:AC:30:38:16
Authority key identifier: D7:03:CE:AC:90:6D:07:F7:4C:A9:4C:44:63:03:D9:54:66:6B:58:3A
Certificate issuer:       /CN=d703ceac906d07f74ca94c446303d954666b583a
Certificate serial:       019E1D5953A697EAF920B2CCC15ABDFB7D16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
Manifest number:          1908
Signing time:             Tue 12 May 2026 18:00:53 +0000
Manifest this update:     Tue 12 May 2026 18:00:53 +0000
Manifest next update:     Wed 13 May 2026 18:00:53 +0000
Files and hashes:         1: 1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl (hash: uWtz6m3N0BOqOLrsS9LjxIvKllXFbOmychxeZencci8=)
                          2: 4-k2BQwcooezjDVQqn3GH7FYIyg.roa (hash: u1bK1aC0Jx5hdjBp120tHkvEXpneiYzeiUJqLBrJ+rY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:53:a6:97:ea:f9:20:b2:cc:c1:5a:bd:fb:7d:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d703ceac906d07f74ca94c446303d954666b583a
        Validity
            Not Before: May 12 18:00:53 2026 GMT
            Not After : May 13 18:00:53 2026 GMT
        Subject: CN=1f00e3ee22ce8d72f03016cda77337b2ac303816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c2:ba:20:83:b5:b5:c7:19:6b:31:2f:70:88:
                    15:f3:f8:d0:69:0e:f6:1e:9c:9a:b8:1f:73:b7:c7:
                    ae:36:00:89:e2:9e:3b:00:2f:6c:a7:9f:10:93:b7:
                    ec:c9:25:79:21:2c:cf:da:9b:d2:89:f5:4f:fe:9c:
                    bb:9d:ac:14:cb:74:db:ae:11:b4:83:77:a4:57:4b:
                    36:01:1e:06:0e:bb:c9:bd:f5:ef:d3:a9:f9:a9:29:
                    29:f8:64:b0:5c:4d:81:ba:cd:53:9c:87:5c:8f:b3:
                    38:0a:0d:4d:32:8f:c7:64:61:8e:76:c2:b4:e5:95:
                    fc:e1:87:75:a8:6a:32:a0:71:70:e4:0f:00:52:9a:
                    6f:9d:6a:44:b0:50:7f:f8:95:dd:6f:83:c0:2e:fb:
                    87:9d:d2:6c:64:51:b9:1a:8f:b9:ed:8e:41:42:9e:
                    f8:db:b4:00:b2:23:e6:b9:38:b9:6d:58:07:96:13:
                    0b:2e:a0:1a:fe:0b:85:5c:40:69:18:40:cb:4f:d8:
                    f7:3d:8c:68:d6:91:de:10:7a:7b:57:f0:e3:09:02:
                    e0:11:b4:a1:53:4a:93:a8:68:ee:3d:49:a9:d1:95:
                    ee:c1:fc:f8:98:7c:62:96:64:bd:7e:85:b1:76:42:
                    60:c7:6a:07:15:aa:ed:50:5c:f7:40:93:2a:4c:ee:
                    68:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:00:E3:EE:22:CE:8D:72:F0:30:16:CD:A7:73:37:B2:AC:30:38:16
            X509v3 Authority Key Identifier:
                keyid:D7:03:CE:AC:90:6D:07:F7:4C:A9:4C:44:63:03:D9:54:66:6B:58:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:55:02:4c:b7:4b:66:d6:ed:5b:05:d6:ab:2a:e7:20:32:2d:
         17:3b:7d:b4:47:e6:60:51:1b:32:bc:a8:65:4e:02:a2:68:5b:
         9b:90:cb:28:80:2e:b5:5e:f0:d4:fd:f0:97:c8:40:24:18:69:
         1e:7e:e2:0d:1f:9c:78:b9:2b:83:29:10:37:3a:79:a3:33:4a:
         1a:1e:95:13:66:74:ee:79:a7:64:21:28:50:f4:1f:82:40:ab:
         a2:41:d1:5e:e3:09:15:ba:0d:54:45:3c:16:9a:0c:f7:22:3a:
         f5:5f:d8:80:06:bb:8a:ac:c2:3a:36:8d:1f:71:b9:9e:6f:71:
         c4:f9:86:dc:cd:d5:b4:8d:27:94:c9:56:f6:d1:5c:07:72:55:
         19:18:c0:75:40:f3:fe:15:ed:d5:93:5f:c3:6a:42:36:32:b6:
         f2:d2:fc:0a:2b:08:08:e8:90:70:24:ac:4f:6a:53:9c:37:76:
         03:9e:63:fc:04:b7:af:6d:75:6c:ce:c8:d8:d4:28:0c:c9:be:
         42:d1:d5:3a:44:eb:db:dd:be:aa:2f:a1:27:d8:d6:b5:b7:39:
         a7:97:68:bd:db:5a:95:87:97:60:1c:6b:6c:4d:3e:75:10:77:
         a5:1f:19:26:0f:cf:5c:bd:b9:2c:f3:a0:34:cb:77:cc:13:a3:
         4f:82:09:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:33:11 2026 by rpki-client