Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
File:                     0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft (raw, json)
Hash identifier:          QssZkLMAqrqx7nnYGhpniHvOvJLCiiIfoWSpvTkPx2Q=
Subject key identifier:   D8:DC:E8:48:A5:EF:B1:92:59:1A:1A:B8:2C:08:7B:03:81:85:B8:A2
Authority key identifier: D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56
Certificate issuer:       /CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
Certificate serial:       019E1D9073763335F0D3A2656B624DC76A1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
Manifest number:          1906
Signing time:             Tue 12 May 2026 19:01:06 +0000
Manifest this update:     Tue 12 May 2026 19:01:06 +0000
Manifest next update:     Wed 13 May 2026 19:01:06 +0000
Files and hashes:         1: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl (hash: w9pvvKf5L/hzCkKyDQDHaLuwM+3zx9XT+PbjWxXIy04=)
                          2: DCqk_IhQ4FSiE_K9oD22DV8FaxY.roa (hash: NtlKgarvCVLW792kP4u1993m8xjj7hSbfL1JoLagIyE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:73:76:33:35:f0:d3:a2:65:6b:62:4d:c7:6a:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
        Validity
            Not Before: May 12 19:01:06 2026 GMT
            Not After : May 13 19:01:06 2026 GMT
        Subject: CN=d8dce848a5efb192591a1ab82c087b038185b8a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:40:2d:7c:57:eb:d3:57:b0:2e:77:26:1e:95:
                    26:71:6c:28:77:40:e6:ae:58:8d:81:6e:cd:f7:8c:
                    b1:e5:2c:95:c6:f6:5f:91:29:8a:33:20:e4:70:2d:
                    8f:5e:a4:63:4d:52:bf:bb:bd:5b:5d:2e:e5:7d:ec:
                    9c:d8:8f:42:c2:41:dc:77:a0:29:78:35:db:71:5a:
                    cf:36:f0:a2:66:16:2a:8f:40:83:64:ab:37:2f:c8:
                    88:63:22:3c:4d:45:78:04:ca:f9:7c:5c:4e:f7:ab:
                    86:44:eb:ba:e5:22:95:5a:c0:95:04:7a:ba:18:14:
                    96:78:29:74:1f:0d:68:d8:9f:c1:a6:df:e9:2e:65:
                    1d:fd:d7:bd:62:a7:60:fa:56:e4:af:18:97:61:24:
                    39:53:9d:19:62:54:33:30:b6:75:46:f5:93:20:f2:
                    65:2f:57:0b:24:de:88:eb:31:00:a8:ad:de:39:dc:
                    0a:77:56:c5:d3:88:56:e7:99:04:46:d2:aa:7a:48:
                    7b:6e:bc:f0:cc:08:a9:4e:69:b0:b2:8b:b5:bf:7f:
                    d8:41:6f:85:5c:c7:30:c4:d0:59:13:df:d8:5f:8f:
                    d5:9f:10:11:4d:97:b0:fe:cc:43:43:db:95:56:0c:
                    ff:e4:92:83:66:6a:41:cb:c6:0a:50:33:c1:b4:3c:
                    92:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:DC:E8:48:A5:EF:B1:92:59:1A:1A:B8:2C:08:7B:03:81:85:B8:A2
            X509v3 Authority Key Identifier:
                keyid:D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:d1:46:9b:5a:da:c9:19:cc:83:44:56:2c:58:a8:6a:06:f8:
         c8:2a:f2:11:a0:27:1b:20:4a:d5:ca:08:8a:06:58:94:c1:43:
         17:52:ba:e2:7d:0d:19:24:60:0b:7f:b5:2b:4d:ef:44:9d:83:
         5b:51:dd:9b:91:8a:9d:aa:a8:7b:da:72:55:77:87:8f:d1:da:
         52:8c:02:fb:0a:75:50:99:23:f5:05:40:3c:1f:80:32:64:53:
         b5:09:6c:b6:9d:cb:50:2e:41:90:87:39:4e:33:b0:a0:41:a7:
         98:c8:cf:70:f9:b3:81:3e:e0:1c:2a:51:90:34:33:80:07:89:
         7e:89:af:5c:d8:c1:6b:25:d9:60:b4:f9:4e:fb:dc:92:c9:91:
         1a:dc:8b:01:95:f6:1e:dc:2c:a8:f4:7d:54:0b:ad:88:6c:86:
         c1:4a:5d:3f:89:4d:52:df:d6:de:4b:07:8b:56:3c:3f:d5:52:
         98:5e:2a:d0:c9:d8:6b:d4:b7:10:9d:c7:d8:9d:0d:56:c1:b4:
         b6:65:d6:b9:b3:1c:2f:09:48:31:da:64:66:94:f7:c0:4e:50:
         c3:45:ae:8c:95:c2:dc:dd:2a:fb:c0:f5:5d:49:d2:50:71:b8:
         b9:fe:6d:d3:9c:b7:cb:be:f8:b6:f0:ff:86:8d:bd:ae:bc:8e:
         87:e7:a0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:38:06 2026 by rpki-client