Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
File:                     M7S1t7Icrr89IICfbFcFmfHWBGg.mft (raw, json)
Hash identifier:          GjMo75Xl91gH5duo/E9YGkZh705JFYn+WXNwA654Jes=
Subject key identifier:   34:64:77:27:78:66:01:87:01:CC:D2:BF:DB:FF:5E:F3:2E:02:0A:5F
Authority key identifier: 33:B4:B5:B7:B2:1C:AE:BF:3D:20:80:9F:6C:57:05:99:F1:D6:04:68
Certificate issuer:       /CN=33b4b5b7b21caebf3d20809f6c570599f1d60468
Certificate serial:       019E216DD90BD6CC56B47827EA4E5CDA8332
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
Manifest number:          190C
Signing time:             Wed 13 May 2026 13:01:47 +0000
Manifest this update:     Wed 13 May 2026 13:01:47 +0000
Manifest next update:     Thu 14 May 2026 13:01:47 +0000
Files and hashes:         1: 53AAbOBBkXvtwzFCRKhN2YER9wI.roa (hash: J04OcUQtPBWoHYiXQ+dSEt3YhPfELs053aa/pbV3cuA=)
                          2: M7S1t7Icrr89IICfbFcFmfHWBGg.crl (hash: 3Oz5K6wtr4n5EGsm8h2ck+8vXrwfDO/UVMQYWVhtdkI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:21:6d:d9:0b:d6:cc:56:b4:78:27:ea:4e:5c:da:83:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b4b5b7b21caebf3d20809f6c570599f1d60468
        Validity
            Not Before: May 13 13:01:47 2026 GMT
            Not After : May 14 13:01:47 2026 GMT
        Subject: CN=346477277866018701ccd2bfdbff5ef32e020a5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:75:11:ca:dc:a2:81:7b:72:92:fd:94:7c:11:
                    1a:aa:81:50:43:47:bc:94:87:15:cc:cb:d1:85:d9:
                    e5:ad:7d:4a:cd:0e:43:1e:13:12:08:65:57:3c:63:
                    38:f8:d7:11:4f:b9:50:e6:ce:cf:a0:55:d4:df:87:
                    2c:bf:c9:cd:26:5e:8d:46:43:72:cc:e1:89:54:44:
                    81:67:44:74:ec:e4:e6:c9:4a:9b:e0:28:3d:d6:ef:
                    a6:43:6f:38:54:30:57:18:2e:27:6c:ac:05:95:ae:
                    a3:b7:c4:6c:d1:2e:09:91:65:5b:5c:1c:59:f4:c3:
                    40:53:47:f0:98:ab:94:6e:c5:f4:a9:7d:fc:56:26:
                    6c:54:84:dd:88:db:82:f1:1c:8c:ce:1c:a3:14:87:
                    29:af:52:62:cc:d0:dd:63:48:43:aa:1b:8d:b2:5f:
                    17:5c:9a:48:24:be:f8:3b:f1:ba:5c:9b:ba:8a:23:
                    0a:98:69:4c:af:dd:07:8a:4e:e0:ce:1d:a4:e8:d9:
                    c4:fb:e4:8c:46:12:80:3e:39:cf:33:05:ab:92:a1:
                    59:d5:0d:8f:2d:2e:9c:23:d5:73:63:df:ce:de:3b:
                    e7:db:23:bb:2c:15:57:a2:3b:d4:79:89:c7:66:ba:
                    8e:db:74:87:69:59:de:a7:02:7d:d3:99:44:ff:99:
                    a7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:64:77:27:78:66:01:87:01:CC:D2:BF:DB:FF:5E:F3:2E:02:0A:5F
            X509v3 Authority Key Identifier:
                keyid:33:B4:B5:B7:B2:1C:AE:BF:3D:20:80:9F:6C:57:05:99:F1:D6:04:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:0a:05:26:27:dd:76:fe:88:52:c0:4d:09:25:87:86:a7:a2:
         81:a8:3e:6a:13:02:1e:a2:12:4b:a7:37:d1:c3:82:84:62:42:
         59:4d:c6:66:f7:10:69:2f:12:6b:b9:f5:d2:e1:15:1f:2e:ab:
         8d:1e:ce:0f:12:bc:4c:97:17:04:16:04:a5:51:aa:8c:2d:c9:
         05:74:af:d7:56:19:fe:c5:33:71:a9:ef:46:aa:48:0b:cb:17:
         00:92:55:be:17:b4:54:6f:99:84:d7:8c:77:11:f4:53:cd:57:
         18:5d:0f:fa:00:11:a1:ba:d4:6c:fd:21:16:9b:0d:0f:d9:cf:
         c6:ef:e0:bf:78:b4:22:62:8b:0d:23:3f:47:f7:2c:65:6e:eb:
         69:d9:f3:8d:fc:27:ed:41:a5:db:30:33:6b:e4:48:96:e6:cb:
         52:04:e3:66:30:5e:be:7d:d9:35:f8:c6:bb:4f:7c:9b:ba:8f:
         70:bd:fc:71:7b:4c:8d:3a:8b:04:90:c9:85:8b:e6:cc:67:2e:
         6a:93:d9:73:76:6c:0b:dc:b2:84:96:d8:ac:8c:c7:dd:4f:e9:
         49:80:c7:69:a6:f8:2f:8c:15:ef:ea:af:9b:31:3d:18:07:74:
         42:88:f9:f1:7c:5c:4b:72:5d:cb:83:ec:10:31:3c:9e:ad:99:
         4f:f6:8f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:20:20 2026 by rpki-client