Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
File:                     inuFwxZYaxmdJr_Ej-JZiTnLb94.mft (raw, json)
Hash identifier:          yV4HE7NoeBXIBvxY6OBUxgK0zHUVXCi5dkiGw9JQXjM=
Subject key identifier:   C3:76:80:78:DB:CE:25:5E:0D:92:7E:B2:82:93:09:52:CA:1C:42:7F
Authority key identifier: 8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE
Certificate issuer:       /CN=8a7b85c316586b199d26bfc48fe2598939cb6fde
Certificate serial:       019E1E6C9AB466468F9544880DC0C592373C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
Manifest number:          1906
Signing time:             Tue 12 May 2026 23:01:34 +0000
Manifest this update:     Tue 12 May 2026 23:01:34 +0000
Manifest next update:     Wed 13 May 2026 23:01:34 +0000
Files and hashes:         1: b2w6O9WirtRCdzK66va1rPliDCM.roa (hash: stbRk0sxdQicjLZT3kCAibpOrHEkv6FoTLisoOLFpLg=)
                          2: inuFwxZYaxmdJr_Ej-JZiTnLb94.crl (hash: V24dNaR/YmvPG84r1I8+yScUVWQQQHAi632204HVd2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:9a:b4:66:46:8f:95:44:88:0d:c0:c5:92:37:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a7b85c316586b199d26bfc48fe2598939cb6fde
        Validity
            Not Before: May 12 23:01:34 2026 GMT
            Not After : May 13 23:01:34 2026 GMT
        Subject: CN=c3768078dbce255e0d927eb282930952ca1c427f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:31:32:29:d4:83:78:f9:97:38:c5:56:3d:e7:
                    4a:89:7f:1f:84:61:2b:a9:ce:a2:b7:e3:75:de:d7:
                    07:96:78:7e:e4:bd:07:b2:e0:24:2b:d8:be:88:27:
                    cc:b6:1a:53:00:5b:90:3f:b2:5d:bb:25:02:5f:6b:
                    58:64:4e:66:1c:c5:b6:c1:cc:fd:bb:56:d2:14:ae:
                    1d:43:52:78:9b:cf:b7:3f:d7:08:6b:39:0c:15:9c:
                    f0:64:a0:1c:1d:56:31:37:3a:59:1b:2c:98:0d:fa:
                    69:e0:f2:83:37:fe:72:1c:af:a7:77:44:da:d8:d1:
                    a8:88:70:e9:4f:08:be:1e:db:d0:09:41:99:38:ca:
                    46:34:c6:69:d4:58:a2:78:39:ac:f0:d8:82:38:5d:
                    4b:06:64:48:0a:22:8c:9f:2c:27:41:67:9e:80:d1:
                    e9:e8:f4:e3:19:e1:42:26:d6:f6:28:fc:1a:4b:54:
                    06:80:22:76:ea:2f:9c:f2:75:1e:50:65:2a:6b:30:
                    12:70:be:3f:7d:4e:9c:2f:0a:e3:78:5a:b3:fa:1d:
                    90:0a:bd:7f:97:92:6e:65:b9:82:96:f5:42:dd:c7:
                    d8:ee:3a:c6:94:38:8f:ac:b2:78:53:7d:99:b5:45:
                    a8:21:22:ad:c6:d1:ce:75:16:f4:e1:3f:03:20:ee:
                    6c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:76:80:78:DB:CE:25:5E:0D:92:7E:B2:82:93:09:52:CA:1C:42:7F
            X509v3 Authority Key Identifier:
                keyid:8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:05:a8:9f:ae:36:7c:b1:66:d4:88:53:6a:a2:41:3e:53:7a:
         32:84:f8:f0:f2:fd:a8:01:c2:67:49:5e:2d:e8:24:49:17:c8:
         9a:39:66:b5:f6:2a:7e:60:72:ee:70:17:eb:e9:a6:ae:98:a3:
         f2:8a:de:9c:a2:cc:f3:2a:01:ce:e4:9a:23:55:39:c9:7d:d1:
         22:48:37:18:b3:32:70:da:85:7d:3a:54:06:86:d6:78:bc:f6:
         cc:7e:8d:97:97:a5:cd:87:76:f8:0a:11:64:6f:7e:20:27:48:
         21:c0:43:02:5b:50:00:ee:9c:a7:68:23:81:ef:61:77:ed:2f:
         c5:21:20:61:cf:df:78:76:41:4d:e1:fb:18:13:a4:a2:1f:ad:
         62:69:ba:cf:21:67:2d:b3:13:bf:47:74:5d:c5:86:14:85:8e:
         12:3f:b6:63:f9:9c:ac:99:b2:95:49:36:d7:43:1a:3e:18:1f:
         db:59:cf:1d:d0:c2:1c:2a:ae:ec:2a:a0:4a:0c:81:35:b6:24:
         9e:c8:f9:ce:9b:94:82:63:d6:0b:4f:af:cc:a4:0d:d0:ee:c9:
         29:d0:a9:1a:d3:8d:66:75:f4:46:d7:a6:9a:27:33:aa:42:5a:
         94:94:23:6d:45:e0:15:9e:6f:0e:1c:f1:d9:2d:22:12:8a:c2:
         75:a6:94:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:42:47 2026 by rpki-client