Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
File:                     M-oI76mz94ye-dt2etwh3WGDTg8.mft (raw, json)
Hash identifier:          Hthlh0se9C24NbxGU1MdQ5YN8VFJpXfDZD0laAIjMlQ=
Subject key identifier:   A0:7D:DF:44:55:AC:6F:FC:4D:E8:8C:00:5E:0F:A3:6E:5F:4B:7D:26
Authority key identifier: 33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F
Certificate issuer:       /CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
Certificate serial:       019E1F10A20E963A69A52A0F3E62D1A128D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
Manifest number:          1909
Signing time:             Wed 13 May 2026 02:00:44 +0000
Manifest this update:     Wed 13 May 2026 02:00:44 +0000
Manifest next update:     Thu 14 May 2026 02:00:44 +0000
Files and hashes:         1: M-oI76mz94ye-dt2etwh3WGDTg8.crl (hash: BtgW9jJ+Nr3tYzGCUhh05GdqrXlNljHPic3QWv6SJR8=)
                          2: S2Rr6_hn2BX5-GlRfv2PnCiP4xk.roa (hash: 7r472AWf04Pi1AuDVC711AyL3xDv3j2X7wUK1jCkLQk=)
                          3: fFXDtgvQwtuo26S2a1Fj55vsTB8.asa (hash: EyxWJ7SdSqpwJL1gtM1HT9SdtAnugRTp0AwNzm8Whcw=)
                          4: kPXOPfjYRrsOHKmt2uydskWrmx8.asa (hash: LJNoYRHWRV4CsqJStGIYTWQsD6lLtFIRWRFBMsiQTN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:a2:0e:96:3a:69:a5:2a:0f:3e:62:d1:a1:28:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
        Validity
            Not Before: May 13 02:00:44 2026 GMT
            Not After : May 14 02:00:44 2026 GMT
        Subject: CN=a07ddf4455ac6ffc4de88c005e0fa36e5f4b7d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e6:d3:8c:41:3e:11:bb:64:02:db:95:17:ea:
                    55:24:28:7a:a1:ba:f3:6e:99:f5:47:42:8c:b4:4c:
                    02:0a:57:7e:70:8c:8a:40:9f:83:26:e1:39:8f:ee:
                    63:24:88:26:53:39:92:6c:b5:5a:5e:4b:b7:71:66:
                    53:50:6b:18:93:c2:7c:7f:23:2a:55:62:49:8f:3b:
                    7a:19:43:8b:aa:25:65:bb:8e:f8:b8:98:4c:ad:58:
                    1c:ed:6d:3f:b4:f7:c2:02:ac:11:69:d5:6f:58:59:
                    57:98:ef:57:5e:8c:38:97:2d:7c:3b:78:54:6d:15:
                    fb:1b:51:92:26:a3:e4:27:54:f5:01:cf:11:04:75:
                    0b:1a:68:7e:bd:25:41:7e:dd:7d:2d:48:c8:91:09:
                    12:48:f5:a3:68:8e:26:eb:8e:25:6b:2e:34:5d:7a:
                    2f:6a:7b:62:88:cf:07:33:c3:11:1d:b9:0a:78:91:
                    c4:69:f6:3a:22:c7:d9:27:39:29:ce:c5:8b:3a:d3:
                    d0:6b:25:42:82:e8:e6:2c:d7:a7:57:48:ee:f7:98:
                    cc:d4:ea:fa:41:63:8f:4a:d1:0b:b2:b6:a9:60:8c:
                    93:c9:23:25:76:28:82:5e:7e:5d:eb:12:e5:04:db:
                    4d:5f:5e:6e:0f:fb:89:e4:d6:16:fa:d2:72:aa:e8:
                    0d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:7D:DF:44:55:AC:6F:FC:4D:E8:8C:00:5E:0F:A3:6E:5F:4B:7D:26
            X509v3 Authority Key Identifier:
                keyid:33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:49:7b:8a:70:eb:21:19:86:36:0e:26:3a:96:30:19:76:a4:
         ae:7b:4b:d7:ac:8f:59:2b:8f:7b:ae:0e:53:eb:12:06:a9:47:
         b2:b7:fc:41:9b:53:3e:07:32:1a:bf:f3:e4:3e:2a:9b:af:d8:
         c6:85:1a:11:ae:7d:4a:4f:23:77:69:14:f7:d5:ed:6e:b0:ef:
         a7:f1:90:a5:30:aa:b9:0d:86:49:c9:5c:04:b7:cf:94:92:21:
         89:ca:53:04:7a:af:2a:3c:7d:ef:34:4b:64:5f:6f:e7:65:56:
         87:46:4a:24:ca:c3:8b:49:8d:2d:31:9b:23:a5:7e:60:fb:66:
         2b:9d:ab:53:8d:1e:18:38:18:c4:a6:b3:8a:89:0b:cd:3c:ea:
         a4:1c:a8:9d:31:4c:35:9a:aa:d8:b3:28:53:aa:e6:6a:ef:7b:
         a2:c9:6e:43:d7:cd:bb:00:8e:38:c7:14:cd:e3:95:68:55:11:
         ff:e3:1b:d8:f9:7f:94:2e:3e:f8:8e:0c:15:fa:6f:2a:ec:8e:
         ff:3d:a4:4a:38:97:9b:0e:9a:1f:ec:3d:b3:e6:93:82:35:dd:
         6f:61:d4:f4:65:1f:16:ca:92:56:d7:5f:5f:36:25:3c:a3:c1:
         e5:ed:00:dd:e0:8d:cc:16:3e:cb:ba:e4:62:69:16:50:d7:e9:
         4d:18:e7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:50:11 2026 by rpki-client