Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
File:                     Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft (raw, json)
Hash identifier:          GzSgBpQNAjs61GYLyHb999Tu/AhIoxXnk71jowxlRLs=
Subject key identifier:   03:A3:BD:D3:E6:AC:B0:83:4D:13:85:17:D5:58:6E:CE:CF:76:B4:AF
Authority key identifier: 3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B
Certificate issuer:       /CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
Certificate serial:       019E216DF49B45B996BFCAC8E2B069A43CB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 13:01:54 +0000
Manifest this update:     Wed 13 May 2026 13:01:54 +0000
Manifest next update:     Thu 14 May 2026 13:01:54 +0000
Files and hashes:         1: 01b-_lSQYswp0XJqCFkWTN3FBao.roa (hash: ewH/zDZQ3rLluYv2guw0C+nvriPG/1vP0wlE4tPc+1Y=)
                          2: EGoSQ-IvTDuR6KeRNIfT2U3LRKg.roa (hash: L6sNJPWIZpchbyuvO0NFOoU8EkTxoHjIUljX0hT8hYU=)
                          3: Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl (hash: BKU9Dg4xww7XYaaOWQomWYAk290XDeiclnQQWoJbKRY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:21:6d:f4:9b:45:b9:96:bf:ca:c8:e2:b0:69:a4:3c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
        Validity
            Not Before: May 13 13:01:54 2026 GMT
            Not After : May 14 13:01:54 2026 GMT
        Subject: CN=03a3bdd3e6acb0834d138517d5586ececf76b4af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5e:42:4d:ff:bc:88:50:9e:48:d9:09:e9:f2:
                    cd:dc:b1:47:cb:3c:c0:45:fe:17:a9:a8:65:63:d7:
                    00:24:82:b1:6d:bd:83:69:0a:33:8f:16:f6:7a:59:
                    74:82:43:94:9f:a8:b5:20:d7:c4:30:91:7a:3c:17:
                    09:69:23:22:04:e5:64:6d:f1:74:c1:3e:d6:22:84:
                    db:07:49:df:6d:d6:97:34:d2:d0:ff:2e:37:0a:7d:
                    0e:c8:75:0a:64:68:d8:98:57:19:79:8c:93:d2:80:
                    43:9f:95:27:5b:82:99:eb:c4:2b:b8:d2:82:a4:45:
                    2a:ee:f4:2a:2f:56:83:50:ce:c8:2b:ac:9d:e0:9d:
                    d7:31:f9:04:53:d5:80:b7:d0:53:67:30:26:9b:e1:
                    ba:12:0c:fb:d4:db:5a:90:77:fb:37:5b:f7:c1:71:
                    71:95:f5:7d:ae:80:20:de:2c:c6:4f:33:7a:5a:2a:
                    f1:46:3a:7f:37:98:e9:b4:b8:3c:49:4c:92:e9:e4:
                    e4:31:b6:81:f3:73:25:a2:8e:21:7a:9c:48:b4:95:
                    ed:9f:03:19:d9:cf:73:5c:28:ed:00:c2:d6:3c:35:
                    12:d5:30:bf:74:b6:58:ba:6b:ed:c8:2a:f6:0f:ff:
                    f9:ad:21:b0:c5:a2:95:58:90:b3:f6:e5:67:c2:17:
                    af:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A3:BD:D3:E6:AC:B0:83:4D:13:85:17:D5:58:6E:CE:CF:76:B4:AF
            X509v3 Authority Key Identifier:
                keyid:3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:7c:83:77:00:61:63:b2:d7:de:4a:79:3c:8c:af:40:88:61:
         8a:93:3f:16:c7:6c:92:a5:2e:c6:e7:7e:50:63:47:04:b1:9b:
         b3:b8:95:34:a8:2d:c9:21:f9:83:e4:10:30:3d:55:f2:8c:a1:
         dd:b8:35:63:68:c9:0e:a5:d6:39:35:08:40:c0:3e:66:6d:ab:
         f5:82:7f:6e:04:a3:17:d0:bf:33:a9:aa:b3:c1:b0:2f:ac:92:
         2b:8a:2b:3e:5a:d8:7e:22:09:db:af:26:a1:fa:ca:b9:f4:3f:
         52:18:98:73:82:94:99:80:a3:84:e1:97:fd:cc:6b:7d:61:6b:
         08:04:1b:2c:ac:69:ec:2a:7f:e8:3a:f2:1a:04:87:2f:ed:3a:
         99:4e:7b:be:e5:e5:5f:3a:7a:27:d1:44:0f:0a:12:9b:89:23:
         06:d9:17:bc:1e:17:bb:33:bc:28:6e:44:76:dd:c2:09:32:bc:
         21:4c:24:29:f5:5a:3c:78:f8:b1:b5:c8:57:26:c4:32:65:1c:
         9c:4d:a9:0f:14:fe:0a:c8:b7:0f:17:49:a5:05:b6:51:f6:dc:
         21:91:d3:cb:ad:bc:7f:03:c8:61:d1:67:5a:f9:36:9a:a4:ac:
         3a:4a:c3:23:ed:e4:e7:3d:67:6f:36:a3:53:d9:a1:11:95:a4:
         05:e9:ac:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:12:13 2026 by rpki-client