Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
File:                     4I6QfA_lCJGna9mbKQhwCmrGLjg.mft (raw, json)
Hash identifier:          LcqNpPtpH7hEB3ReJIzB6pPRsZMLkTJUAXrIP3TxGho=
Subject key identifier:   FF:95:1A:82:C6:CD:A7:99:D4:CD:95:68:55:61:10:3E:3A:5B:CD:2A
Authority key identifier: E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38
Certificate issuer:       /CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
Certificate serial:       019E1CB4592CA17185629EDAF3470D72367F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
Manifest number:          1906
Signing time:             Tue 12 May 2026 15:00:41 +0000
Manifest this update:     Tue 12 May 2026 15:00:41 +0000
Manifest next update:     Wed 13 May 2026 15:00:41 +0000
Files and hashes:         1: 4I6QfA_lCJGna9mbKQhwCmrGLjg.crl (hash: avyPJ8QaH+qYOl5jJ0x/ut0xfDT9nGY0j/ND07asL9o=)
                          2: azb1_WO3_kwPuSAgYoVTIRPk0go.roa (hash: 1/nAUytly79O0AERwCaGs88tFerHBFBw3HoH4Qov+gM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:59:2c:a1:71:85:62:9e:da:f3:47:0d:72:36:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
        Validity
            Not Before: May 12 15:00:41 2026 GMT
            Not After : May 13 15:00:41 2026 GMT
        Subject: CN=ff951a82c6cda799d4cd95685561103e3a5bcd2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8c:98:55:42:8b:fa:5a:02:f0:56:c9:2e:81:
                    6d:51:6d:3d:ad:ec:33:f9:f8:f7:df:7e:60:ed:4a:
                    f3:6f:9a:36:d3:f8:8d:3e:2c:01:a4:aa:b7:49:a5:
                    6f:9d:71:2f:05:d6:35:1d:9a:3a:1b:2f:ca:5a:2a:
                    0b:cc:04:27:12:1e:67:e9:0a:2e:9e:33:47:10:bd:
                    44:6f:82:c2:da:9b:0e:af:a9:ad:1c:a8:cd:16:49:
                    6f:da:80:1d:2c:a2:47:96:ae:ef:e2:49:29:66:16:
                    83:ed:62:53:04:d8:de:36:89:89:ea:6c:6a:c4:bf:
                    2b:39:47:60:f0:8f:0a:f6:41:25:9e:f3:8c:ee:b4:
                    36:ec:4d:17:33:a1:96:51:30:f2:93:2a:0d:7f:2d:
                    64:6f:d3:07:2b:c7:7d:7b:32:4d:a9:cc:cc:0c:16:
                    1a:dd:bc:c2:9a:22:d8:23:09:9d:9e:e7:51:2a:45:
                    6e:27:cf:a3:b8:39:d3:ee:e5:b9:78:71:ce:13:ea:
                    ab:7e:c8:7c:87:28:48:48:c8:ea:de:29:37:58:5f:
                    74:7b:d9:d9:77:50:6e:49:63:66:98:b4:28:54:2b:
                    dc:07:e2:38:9e:c8:49:01:17:98:c8:00:0a:d4:a5:
                    b4:c4:4c:dd:9c:af:b4:28:a6:9c:0f:ab:50:de:5a:
                    8a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:95:1A:82:C6:CD:A7:99:D4:CD:95:68:55:61:10:3E:3A:5B:CD:2A
            X509v3 Authority Key Identifier:
                keyid:E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:fa:3f:aa:b1:64:04:36:e8:0a:d5:85:64:85:af:5d:50:b6:
         21:07:8c:55:e5:56:cc:29:f7:31:d1:c0:f6:69:3f:20:63:9e:
         cb:36:ef:98:ab:a7:6b:c9:35:46:93:5b:e2:d0:55:5a:71:b8:
         cc:bf:21:07:31:9a:e4:de:e1:1c:08:ec:28:3d:96:33:d2:9b:
         17:34:67:df:c9:b0:c3:7a:d1:f7:ab:84:dd:83:99:fa:ca:4b:
         3f:19:a4:a9:1b:62:cf:ff:b7:db:4e:23:60:c6:2e:7d:d9:ad:
         ee:35:30:98:02:5d:f1:ac:dc:0e:65:b6:7f:1d:4f:5d:f0:32:
         cf:37:df:0e:d1:8f:bd:3b:72:70:90:cd:f1:95:44:ce:3e:26:
         a1:b0:8f:e1:a5:ef:2e:60:4a:ce:73:dc:23:06:c7:d0:a3:ff:
         89:ab:00:67:4d:98:6e:3a:8a:f9:d4:f7:63:21:d0:c1:c7:23:
         a9:35:09:e0:4e:83:68:01:fc:d9:42:f2:00:c1:a9:67:64:01:
         c2:dc:40:12:35:28:b4:aa:6f:41:b1:62:d9:5f:95:3c:2f:5a:
         b1:09:70:13:bd:31:e5:26:72:2f:53:e9:6c:84:43:38:4f:c5:
         9c:4e:be:7c:3a:b9:d2:9c:21:cd:cf:df:06:00:3c:71:0d:31:
         a8:7b:19:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:22:39 2026 by rpki-client