Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
File:                     usA65sVFitKAdlulUnmAoG_sI6g.mft (raw, json)
Hash identifier:          5+E004TRj2R50L1NuswTKWMK01z5UZcC+pRb2BvLVjg=
Subject key identifier:   FF:F2:5E:9D:1E:FD:C0:85:E8:85:E6:AA:ED:73:A5:01:BF:3F:4B:78
Authority key identifier: BA:C0:3A:E6:C5:45:8A:D2:80:76:5B:A5:52:79:80:A0:6F:EC:23:A8
Certificate issuer:       /CN=bac03ae6c5458ad280765ba5527980a06fec23a8
Certificate serial:       019E1F47B2B76A275B21DB44171F95A842A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 03:00:52 +0000
Manifest this update:     Wed 13 May 2026 03:00:52 +0000
Manifest next update:     Thu 14 May 2026 03:00:52 +0000
Files and hashes:         1: JGKLr4eYvFyQS44nBzhaqSDqb4M.roa (hash: R8q2g33KJxVN+/8kBrx+AnoKYUUKSwPLQijlXQQHaMQ=)
                          2: usA65sVFitKAdlulUnmAoG_sI6g.crl (hash: nrb37I709Q2eDCYBS5xGumhWTM9Z/fDJDfuGIKKiqeo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:b2:b7:6a:27:5b:21:db:44:17:1f:95:a8:42:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bac03ae6c5458ad280765ba5527980a06fec23a8
        Validity
            Not Before: May 13 03:00:52 2026 GMT
            Not After : May 14 03:00:52 2026 GMT
        Subject: CN=fff25e9d1efdc085e885e6aaed73a501bf3f4b78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f9:e6:2a:82:71:97:aa:31:66:ad:c5:a2:aa:
                    bd:6a:f4:9d:59:43:32:43:22:30:3f:8e:30:21:7b:
                    2e:5f:a9:e3:aa:cd:75:df:29:00:56:f9:02:63:59:
                    ab:9b:41:15:b8:07:81:77:0a:66:47:f4:06:75:d8:
                    3d:44:7d:60:d6:91:41:08:e2:95:5b:7b:ec:bc:e7:
                    09:19:a1:fa:4b:ba:ad:f6:cf:53:27:88:a6:81:a6:
                    95:4e:10:1d:09:b1:8e:63:a5:69:37:86:fd:59:e0:
                    9a:a0:fd:fc:c7:06:f8:79:85:28:97:de:6e:ec:c1:
                    e2:61:00:77:57:a4:d2:52:54:d8:3b:92:76:37:91:
                    89:98:ad:ac:6f:a3:da:27:9d:b5:26:49:8a:24:e8:
                    54:b3:32:96:1e:11:24:ef:bb:be:fc:df:4e:ab:2c:
                    84:d0:4c:99:96:89:73:42:ae:60:3a:11:0a:4c:ae:
                    44:4f:cc:2a:1d:50:b9:ed:de:a6:89:af:81:2b:ea:
                    da:4a:ea:97:dd:57:97:20:0e:60:83:e0:9f:a1:9e:
                    ed:08:88:07:93:b8:3d:88:1b:90:52:e5:08:5d:6f:
                    62:b2:97:91:f9:5c:4a:1d:05:57:76:0c:19:79:69:
                    5e:70:f1:1a:a4:a7:92:1e:13:f8:7b:f6:15:e8:12:
                    53:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F2:5E:9D:1E:FD:C0:85:E8:85:E6:AA:ED:73:A5:01:BF:3F:4B:78
            X509v3 Authority Key Identifier:
                keyid:BA:C0:3A:E6:C5:45:8A:D2:80:76:5B:A5:52:79:80:A0:6F:EC:23:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:c5:2f:a2:11:9d:76:22:1b:1f:5f:b0:6d:3b:c6:af:d9:75:
         38:ee:63:12:d4:ce:b1:ae:96:c0:43:56:10:e8:dc:30:27:b6:
         e2:1f:6e:94:ae:e9:f8:55:2a:a0:7c:6f:23:8d:9c:aa:82:d1:
         47:1b:63:6d:e1:43:86:15:9c:9b:ad:7b:ed:2e:d6:15:a7:ab:
         ee:94:5a:7a:80:0e:82:d2:25:2d:28:c6:cb:49:84:f8:ab:c6:
         1c:e2:6e:19:0c:0a:5e:ae:e5:c6:a1:e7:d8:78:02:16:10:f1:
         71:b9:e5:ff:80:8f:88:83:9d:00:c9:f7:e7:0c:f6:4a:26:fc:
         8a:4e:66:ab:60:63:d0:3f:5b:ad:46:cb:87:3b:e9:05:6f:75:
         ac:aa:cc:43:1e:06:89:1b:66:ff:2a:3b:d3:84:c5:eb:da:e3:
         e3:f1:89:4c:42:f5:f2:11:8e:e6:86:57:f9:29:89:a2:4d:e0:
         ca:57:52:8c:3d:47:ac:37:0e:cd:cc:98:13:ec:7c:99:d7:de:
         ac:54:59:8c:90:7d:d7:7f:ae:2b:20:56:77:44:d0:d1:42:24:
         6a:0e:26:54:34:e1:9e:bd:21:ad:a4:56:7d:d3:c3:d8:fe:d6:
         d0:f7:26:13:46:9e:6b:86:47:d8:c1:9f:e5:4c:6c:ab:2e:e3:
         82:c8:3d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:45 2026 by rpki-client