Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
File:                     IWmMHNxm3ChdD4B2KcRiYaiLLec.mft (raw, json)
Hash identifier:          4lNYW9GiWT3/ZUuZlNrs6xSuDdtMmoyFLSnLUED9Csc=
Subject key identifier:   AE:50:88:34:C4:9C:58:69:3B:43:02:8D:7A:B8:22:AC:B1:9F:2F:CB
Authority key identifier: 21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
Certificate issuer:       /CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Certificate serial:       019E1FB5844C616FE412726B5F08FF330F8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
Manifest number:          1910
Signing time:             Wed 13 May 2026 05:00:49 +0000
Manifest this update:     Wed 13 May 2026 05:00:49 +0000
Manifest next update:     Thu 14 May 2026 05:00:49 +0000
Files and hashes:         1: 1-1889f_-iRQYnH3-fqXrOkR2ikE.roa (hash: /z9uTfpjXRCmTc6GwPli+bHZeS9FVw3t6IXyn4g2iag=)
                          2: 4tb80eIeaemuew5fxP0iEI9imgA.roa (hash: e9ASBdL/cxgsl0ZRb+D15EqqF9ntvaIWRU4Syd78R4c=)
                          3: 5imhJ2Nn32k7XMqdnbo3nfJcYuc.roa (hash: wdooR1EonyLTBTWw2tpg6m0I9TSD570lR7yhgwvAcsk=)
                          4: IWmMHNxm3ChdD4B2KcRiYaiLLec.crl (hash: NEeDvMHJib4Ysg4U0+jUC7RjH2nqPqRYn4CW6Qf6x6A=)
                          5: V6C5S8FHu-VQP7fJy_qJO2TbRW8.roa (hash: ERX1UGNBCgL3/72WnrYeAgNLYeESJE2SSaY/KZ9ee1o=)
                          6: xQDTUuqpTq2N6Fx6Gq6mEULV36k.roa (hash: mElWxlPb4ggRHli9cITYJ0YySn8gxZXbhGQNUFYIVAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:84:4c:61:6f:e4:12:72:6b:5f:08:ff:33:0f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21698c1cdc66dc285d0f807629c46261a88b2de7
        Validity
            Not Before: May 13 05:00:49 2026 GMT
            Not After : May 14 05:00:49 2026 GMT
        Subject: CN=ae508834c49c58693b43028d7ab822acb19f2fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:77:c7:d0:f5:67:9d:46:de:fd:3b:d5:88:dc:
                    01:4b:22:3d:bc:e3:14:ac:6b:ff:ea:4c:a4:93:c7:
                    59:45:77:93:4e:ce:c8:44:6b:75:b7:b2:eb:b2:7a:
                    5f:08:12:7b:0d:6d:e1:6f:8a:96:03:da:4c:09:fd:
                    e0:aa:75:ce:06:c6:6c:ad:3e:e7:c7:54:90:6d:90:
                    4c:71:26:4f:53:8b:50:e9:d9:4a:93:6c:42:43:24:
                    99:51:c2:6f:1a:d4:a2:b9:de:dd:42:12:e6:ec:5b:
                    45:8d:7b:19:92:96:c6:24:13:a1:7d:83:2d:dc:d4:
                    70:14:20:d7:95:fc:da:51:2f:6d:d1:8e:a9:56:a4:
                    b1:37:cd:fb:7b:97:c1:ca:2f:bd:a9:84:44:db:48:
                    71:e5:55:cc:3c:66:40:79:d6:2e:e2:7d:81:db:e2:
                    7c:5d:4a:61:67:ce:c5:06:ce:a3:34:42:b8:54:aa:
                    76:53:03:06:d6:0a:84:fb:cf:96:7a:68:35:19:2d:
                    5e:db:cb:0e:39:e3:1c:ec:91:9b:fc:4e:f6:bc:74:
                    8c:a7:bb:be:c5:e2:5f:1c:0a:9e:b3:63:03:7c:91:
                    a1:a1:f9:d1:c7:87:00:10:bb:92:14:15:a0:8b:30:
                    f5:c6:23:a5:9d:56:f7:67:1f:7f:64:f6:52:66:d8:
                    b4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:50:88:34:C4:9C:58:69:3B:43:02:8D:7A:B8:22:AC:B1:9F:2F:CB
            X509v3 Authority Key Identifier:
                keyid:21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:4b:41:b9:d4:e0:9b:51:67:3e:8d:4d:ec:bd:5f:2d:2c:7b:
         1b:bc:9b:b8:25:da:2b:9c:0b:af:a2:40:63:43:2c:cf:67:fe:
         6a:f7:cf:3c:86:a8:6d:ba:59:f6:0c:c5:17:a7:fc:26:d3:1d:
         54:5a:b9:c9:e8:65:56:58:5b:6c:27:21:60:62:9b:e8:30:9f:
         35:d8:35:00:99:7a:86:2b:c2:9c:21:b8:d3:3d:45:fe:54:af:
         1e:df:aa:02:05:8e:5a:7d:60:64:fd:79:d9:77:73:2e:84:34:
         c0:16:05:5b:a9:59:45:d2:34:f4:d7:40:f1:5e:9a:d3:a3:ed:
         bf:40:38:76:76:f0:9f:fa:4e:28:5d:26:b9:f6:12:3f:85:75:
         d1:3e:34:e9:83:f0:47:89:ba:bd:0f:4d:ad:0d:c5:74:68:72:
         9c:43:ef:97:24:54:90:55:5c:a1:54:8f:cd:f5:b0:a7:60:7d:
         7f:be:20:db:f1:11:a1:07:88:49:75:38:f1:28:53:a8:98:13:
         a5:a2:87:8f:85:26:77:8e:43:d2:85:32:db:de:5f:c3:42:3b:
         d6:14:2b:a2:10:9d:ef:49:aa:17:04:40:09:ad:52:bb:86:f6:
         1c:7b:ef:2b:05:d5:9b:1a:17:91:14:7a:76:0e:39:72:fc:24:
         6a:8e:63:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:42:30 2026 by rpki-client