Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
File:                     rtyPMnpGGWTAqHqceAlAHFfIbUE.mft (raw, json)
Hash identifier:          TUWmiGFaA3X0EVFYjup8sXXHECvC3RH1j6VvxBlH9yU=
Subject key identifier:   6B:5B:D4:E8:96:9D:A8:64:1F:6F:AD:8D:DD:4A:F1:BF:8F:36:76:3F
Authority key identifier: AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41
Certificate issuer:       /CN=aedc8f327a461964c0a87a9c7809401c57c86d41
Certificate serial:       019E20C896644185F5370E44D58A918DC470
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 10:01:16 +0000
Manifest this update:     Wed 13 May 2026 10:01:16 +0000
Manifest next update:     Thu 14 May 2026 10:01:16 +0000
Files and hashes:         1: r9eaNKOzK8PPUei6RdKb9LkqhTI.roa (hash: +R7LC8z04wYSjkyWe1Pk5HhKfodwp2zyyiW39xvrzog=)
                          2: rtyPMnpGGWTAqHqceAlAHFfIbUE.crl (hash: +0cLvzvIgSTJiAf/ggC+khDOlFyUloPyJPkFMYhceDo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:c8:96:64:41:85:f5:37:0e:44:d5:8a:91:8d:c4:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aedc8f327a461964c0a87a9c7809401c57c86d41
        Validity
            Not Before: May 13 10:01:16 2026 GMT
            Not After : May 14 10:01:16 2026 GMT
        Subject: CN=6b5bd4e8969da8641f6fad8ddd4af1bf8f36763f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:cd:38:6c:80:9d:7c:71:c2:82:45:e2:8e:ba:
                    a2:13:0c:17:25:f3:26:26:cd:a0:54:91:33:f3:e0:
                    5e:1e:60:d5:fc:d9:98:b6:bf:f8:ea:c4:dc:01:e4:
                    03:cf:d1:97:d4:9f:e9:a1:19:ab:6b:58:c5:68:20:
                    e3:47:c1:5d:a2:00:ae:2e:18:fd:73:21:e2:76:f9:
                    58:f4:15:a4:87:e6:e4:d3:9f:23:70:0d:3d:ee:5c:
                    12:94:43:ae:e7:f6:52:31:02:02:22:f7:dc:67:71:
                    2b:75:9a:8e:37:8e:cb:8d:61:59:3c:b5:10:4d:3b:
                    34:c2:e8:37:68:bc:72:1f:ac:74:38:1c:69:27:79:
                    06:71:44:c0:a3:1f:8d:d9:e5:9c:62:9f:3f:b6:26:
                    a5:4f:fc:dd:f6:fd:7f:fc:ed:09:da:ab:69:20:bc:
                    5f:74:cb:77:1d:74:dd:b2:3f:fa:e9:ca:01:da:b9:
                    54:a0:15:be:cb:2f:34:06:38:01:b6:e8:c0:42:01:
                    26:a3:7e:44:53:68:28:9f:29:d5:eb:88:61:1e:24:
                    11:b3:ca:7d:d8:76:64:9a:d3:1a:e5:c5:fc:30:15:
                    d9:be:5e:07:f5:1d:6f:6f:d3:1e:08:b3:72:17:84:
                    55:22:7b:ea:d3:c8:43:85:d3:46:e0:62:28:a9:d7:
                    2e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5B:D4:E8:96:9D:A8:64:1F:6F:AD:8D:DD:4A:F1:BF:8F:36:76:3F
            X509v3 Authority Key Identifier:
                keyid:AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:91:cf:5f:f7:cf:0a:1e:cd:62:f3:ad:e4:bf:b8:d9:f9:92:
         3e:72:81:9e:53:cb:f2:71:43:00:4b:5e:2d:e3:e5:28:4c:94:
         5c:11:56:b4:b2:cc:f9:17:80:3b:c6:a5:21:a9:23:a6:e7:2a:
         84:61:bf:72:6b:23:d7:85:35:83:52:aa:b2:c1:a7:00:f4:9c:
         47:89:c3:ac:95:b1:a1:a0:b6:3e:06:90:47:7b:93:c2:8c:d2:
         5a:6e:7d:ab:97:b6:d1:e0:be:a5:d0:1f:e8:81:d3:a2:8e:f0:
         c0:d6:29:18:15:4a:ac:c7:c3:c0:c3:fc:fa:89:7a:9f:42:78:
         19:75:65:6a:c2:9b:44:6d:d5:f3:42:95:e8:89:40:81:a1:7b:
         d0:2a:74:77:a7:99:24:64:c2:46:16:24:55:07:85:1c:48:f8:
         f8:3d:7b:4e:60:a1:0c:0e:a0:8d:55:cf:1b:1d:c0:1a:69:78:
         d0:59:a8:fc:5b:9d:51:30:87:c9:9b:f9:69:51:85:ce:24:ff:
         e9:a5:d0:4c:69:2a:02:a6:51:2b:4d:40:6c:83:26:f9:93:96:
         59:5c:92:43:9c:46:dd:3d:a9:e9:0b:bb:15:a6:52:3c:20:69:
         9b:d9:d4:e8:83:dd:aa:aa:10:5c:f0:9e:02:d7:32:03:9f:de:
         06:8a:72:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:06:46 2026 by rpki-client