Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
File:                     1sHCRltPlz-0sMtmKKmLO1iJbUg.mft (raw, json)
Hash identifier:          zgevgUeXIt4TDRnN4I6DBu+5ZumDHCUFfOxvIPH1obg=
Subject key identifier:   D7:82:38:54:82:EB:D3:BD:D2:A5:08:C0:92:A4:23:0C:83:E2:96:A5
Authority key identifier: D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
Certificate issuer:       /CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Certificate serial:       019E1C7DFDC256D4B31C687C92D93DE979BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 14:01:19 +0000
Manifest this update:     Tue 12 May 2026 14:01:19 +0000
Manifest next update:     Wed 13 May 2026 14:01:19 +0000
Files and hashes:         1: 1sHCRltPlz-0sMtmKKmLO1iJbUg.crl (hash: baCRY6ec2avm+WJljiMH6ms20/9YqidSf9cmuDFdN0w=)
                          2: OfoRzb83TiUr9JWnqSw8Nlujw1Y.roa (hash: C+NBqa/FoqkfVKSMS3H5Y1wqDnMMVE+Y4Fw4A7IWZm8=)
                          3: oRqwFe3VNX-nfuj7iUR3S7koSy0.roa (hash: qiTN878gqiER6fqTmD5j2cm3Ln1rDVHVTApMOMHVgtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:7d:fd:c2:56:d4:b3:1c:68:7c:92:d9:3d:e9:79:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
        Validity
            Not Before: May 12 14:01:19 2026 GMT
            Not After : May 13 14:01:19 2026 GMT
        Subject: CN=d782385482ebd3bdd2a508c092a4230c83e296a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:90:48:8f:ed:6d:ea:e6:2a:22:28:48:d4:78:
                    39:18:91:ba:c0:c4:1c:6e:37:3e:69:4d:8e:9e:16:
                    91:45:1b:96:ff:ab:39:54:86:61:7b:32:42:f2:a6:
                    6b:08:3d:90:0f:a2:8b:ee:95:dd:15:33:81:37:7c:
                    e5:e7:b9:27:4f:a3:53:06:1e:67:df:83:01:1a:0a:
                    27:c1:b3:08:8a:50:a9:b3:9b:ab:b5:a8:6d:cc:5b:
                    a5:11:7d:2d:32:a5:4e:3d:d2:ca:78:54:53:ef:d8:
                    ae:7b:94:93:8e:90:b1:4e:c0:66:4d:05:51:ef:4c:
                    de:c3:f4:a1:14:c2:fc:30:2a:64:55:93:e5:5d:87:
                    ce:d1:23:08:d1:d3:d8:cc:b4:bc:08:65:18:ee:5f:
                    19:3b:52:42:eb:ac:0e:18:a1:fd:bc:1e:ba:a0:d9:
                    a2:b3:f5:ea:3e:36:9b:ea:ad:e3:ec:c7:87:97:c3:
                    f9:09:0c:1f:a5:39:c8:f7:ba:4b:66:89:df:b0:84:
                    dc:2f:e1:5f:14:ff:92:ab:c2:24:ed:a5:52:04:f2:
                    13:03:f2:e7:2a:ec:ad:5c:cb:a8:69:3b:94:e9:12:
                    dc:5b:79:b9:46:c2:b3:ed:c1:bd:c5:de:fc:21:6c:
                    1d:bd:de:3c:0a:84:71:52:3b:65:28:30:e0:dc:57:
                    e8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:82:38:54:82:EB:D3:BD:D2:A5:08:C0:92:A4:23:0C:83:E2:96:A5
            X509v3 Authority Key Identifier:
                keyid:D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:cb:d5:16:58:78:1f:85:eb:71:ea:d2:5e:36:ab:4f:00:30:
         f3:e6:a5:6a:ae:3a:59:fc:17:1e:6c:67:a7:4b:16:59:78:02:
         b4:d8:91:ab:e0:52:3a:70:11:3b:ef:a2:24:1c:8b:dc:37:61:
         76:68:61:1a:91:61:22:09:f7:33:ef:68:c8:dd:60:50:4e:12:
         c1:e3:5f:bb:a3:ab:db:3d:54:8c:33:9d:6c:e5:f3:b4:fc:af:
         d0:cd:dd:1a:3f:fd:5a:b3:ef:4d:95:24:18:fa:47:9a:05:0d:
         65:4f:b8:54:92:a4:a8:05:2e:e9:e8:25:e5:f1:c9:0c:63:22:
         38:93:d1:40:ca:c2:81:61:f9:0c:b5:1f:c0:38:6c:82:7f:8b:
         c8:94:93:f1:6a:7b:7b:43:86:d9:29:bc:0f:be:c4:f1:cc:4f:
         c8:65:ae:04:25:3f:3f:29:c8:1e:e7:63:43:53:3d:3c:82:97:
         7d:2a:cf:77:db:c1:55:09:40:b1:d8:34:ad:05:a3:52:99:30:
         2a:5c:4f:38:0f:8c:7b:76:ab:f1:83:c5:4f:c1:5a:86:c3:b5:
         96:89:65:96:ea:72:7c:0a:a2:a8:44:6e:75:a5:17:8d:ab:8c:
         9b:22:ba:53:56:2e:c7:fc:57:f6:c5:a4:ba:35:00:c0:b4:9e:
         5c:92:9a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:29:39 2026 by rpki-client