Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
File:                     MBlcO7BQWGtfTlAEEYAHxIs06uU.mft (raw, json)
Hash identifier:          ctHS5N/lwKDI+hkFVuXwYHSrhBvA+IURAX4wJkI09MQ=
Subject key identifier:   DF:09:51:A9:7D:73:22:FF:3B:9D:43:2A:73:76:74:9F:F0:B9:9C:04
Authority key identifier: 30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5
Certificate issuer:       /CN=30195c3bb050586b5f4e5004118007c48b34eae5
Certificate serial:       019E20237FCF591A7A360880D8AC923DD420
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 07:00:57 +0000
Manifest this update:     Wed 13 May 2026 07:00:57 +0000
Manifest next update:     Thu 14 May 2026 07:00:57 +0000
Files and hashes:         1: MBlcO7BQWGtfTlAEEYAHxIs06uU.crl (hash: NcfJBBcI78l0y6ymyDHQ0VJwwoxHurJPGg1PVKXpRFI=)
                          2: qeezGpylFYQWdw5Zzwgz6qTCezQ.roa (hash: 81jQgwS6nCCkT6pNsFrxENxQzb13LmVBgngNENTsUtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:23:7f:cf:59:1a:7a:36:08:80:d8:ac:92:3d:d4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30195c3bb050586b5f4e5004118007c48b34eae5
        Validity
            Not Before: May 13 07:00:57 2026 GMT
            Not After : May 14 07:00:57 2026 GMT
        Subject: CN=df0951a97d7322ff3b9d432a7376749ff0b99c04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:77:ef:b7:86:39:19:c4:70:9b:cd:1a:48:06:
                    1d:5d:0a:47:65:61:d8:90:cb:5f:c0:79:49:ee:0f:
                    22:c0:44:1d:c2:af:fc:30:4e:ee:2a:84:81:d5:c0:
                    c3:00:41:33:fb:b5:72:8e:00:56:ab:ea:36:86:08:
                    b6:20:0e:20:07:04:69:74:08:e8:24:ce:45:1f:39:
                    d4:86:bf:df:a7:97:c9:89:09:5d:bc:fa:ea:df:e5:
                    bc:b0:ad:2c:e3:08:61:be:e5:99:30:8f:16:b2:44:
                    17:93:d4:bf:3f:a0:04:e6:08:4f:8d:2b:33:5e:ea:
                    a6:2f:d6:ed:5d:2a:3c:63:c6:55:75:b0:60:d0:e7:
                    6f:d2:4e:e4:ad:d9:fc:c3:81:32:ba:52:a6:2c:f8:
                    a4:a3:5f:aa:e2:90:17:97:6b:ae:da:27:22:2b:c7:
                    93:e9:0a:0c:c1:e0:8c:4c:74:b9:3b:e3:74:15:4f:
                    36:c9:58:7e:65:fe:fe:6b:7d:19:b0:d2:7c:79:d3:
                    70:56:0b:c3:ed:d5:00:60:ca:0f:0a:9c:ce:3c:a1:
                    54:e0:7e:e7:06:ae:fa:57:17:ff:2a:86:9e:89:26:
                    3f:57:66:18:83:6a:ee:fa:8b:19:31:e0:94:87:f4:
                    1c:ef:13:8c:a0:5f:0a:c4:3a:fd:25:c6:43:b3:8a:
                    bf:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:09:51:A9:7D:73:22:FF:3B:9D:43:2A:73:76:74:9F:F0:B9:9C:04
            X509v3 Authority Key Identifier:
                keyid:30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:a9:68:16:e1:9f:a8:36:f2:0b:fd:ac:c4:89:f8:96:33:d7:
         51:0c:83:b6:ce:82:df:1e:13:0a:53:33:9d:3c:02:e6:84:6e:
         2c:e0:e8:d2:c3:46:ad:89:b5:1e:f5:27:56:2f:5d:2a:40:ec:
         18:0a:1f:a8:c8:48:52:5a:48:13:14:e0:a0:c0:20:f6:14:ee:
         ba:2c:2c:9d:ae:c2:1b:fe:8c:c2:8c:7e:a9:79:c5:ca:b2:6d:
         e9:49:b1:e1:5f:8e:d7:37:50:3d:5c:ef:c1:e4:34:af:24:3f:
         03:8c:4a:93:70:30:1d:be:d8:2d:bb:1d:61:fc:16:bc:06:d2:
         81:8d:7c:2e:f0:f7:c9:67:23:55:24:67:9e:af:bc:f9:35:c0:
         21:33:37:49:67:e3:1d:d0:0e:66:e2:09:ed:a3:ba:84:ef:5c:
         7d:de:b0:9f:e2:77:e9:f3:6f:f8:8b:e8:10:bc:02:6c:7a:13:
         35:1f:17:b9:e3:aa:e6:d9:68:1f:ca:01:31:04:f2:e8:da:e3:
         b5:69:57:60:c6:56:bc:c8:8b:94:9f:56:8c:3c:28:59:77:34:
         3b:92:57:bc:1a:5c:59:57:2d:d5:e9:92:3b:dc:cc:f7:02:c2:
         ac:db:53:72:dc:01:ba:d2:9f:81:0f:c1:99:c8:cb:23:1a:52:
         23:3e:4b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:06:04 2026 by rpki-client