Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
File:                     AEzwfH0FkwK1YGaq9svuwTUYakQ.mft (raw, json)
Hash identifier:          IzmceMCTX5iG6LcMT4kljdpgNtPI5ZFADttg5z/UhC8=
Subject key identifier:   F9:DD:61:48:36:35:0E:1F:A4:42:3F:E9:69:1E:3D:34:66:C2:B0:1D
Authority key identifier: 00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
Certificate issuer:       /CN=004cf07c7d059302b56066aaf6cbeec135186a44
Certificate serial:       019E205A79CF9C9B3C4DCE10C4FE6FFEBFC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
Manifest number:          1906
Signing time:             Wed 13 May 2026 08:01:00 +0000
Manifest this update:     Wed 13 May 2026 08:01:00 +0000
Manifest next update:     Thu 14 May 2026 08:01:00 +0000
Files and hashes:         1: AEzwfH0FkwK1YGaq9svuwTUYakQ.crl (hash: WvPqyWS8FauZj6RostJ+RWqU+dpQxbx7DJT/HY/90Zw=)
                          2: eTrUoV1B4bRDuSSd3vjzahf5Fv0.roa (hash: IbkmdqkTYW4Kd/WPuzbn4B9/sqXybS99skf40EqigTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:5a:79:cf:9c:9b:3c:4d:ce:10:c4:fe:6f:fe:bf:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004cf07c7d059302b56066aaf6cbeec135186a44
        Validity
            Not Before: May 13 08:01:00 2026 GMT
            Not After : May 14 08:01:00 2026 GMT
        Subject: CN=f9dd614836350e1fa4423fe9691e3d3466c2b01d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0a:d8:8d:1c:2f:ec:3c:51:5a:07:63:09:6e:
                    7f:4d:b0:38:7f:87:10:89:a4:96:83:1e:c3:bd:65:
                    41:54:c6:6a:65:0a:ca:19:19:49:cf:57:55:8e:9f:
                    00:3b:cc:9b:e5:30:2d:5f:f3:84:c9:a4:f5:16:a3:
                    a1:38:22:4b:d4:43:0a:44:2f:6b:d2:e6:b3:3d:94:
                    7d:92:48:5d:98:28:0a:a7:6d:f9:23:1f:7a:69:1a:
                    f8:64:a0:f4:ed:cd:f9:6c:98:e6:ef:03:97:d4:a2:
                    ad:e6:f9:3b:78:c6:c5:90:84:da:3f:79:d8:e2:93:
                    2b:65:34:7c:e9:08:5d:e8:64:2b:87:73:b7:fd:16:
                    0d:24:ab:74:ff:e2:f3:27:7d:08:3f:64:f7:b3:10:
                    52:60:d7:dc:e1:79:17:ed:59:77:59:cf:26:a5:da:
                    8f:91:be:2f:1f:d9:09:3b:06:b0:da:a5:92:45:39:
                    26:3a:3e:7c:02:fa:d5:33:11:50:a1:18:ce:40:07:
                    25:6c:86:6e:a8:03:f3:f2:96:a7:11:ee:5a:dc:6e:
                    8b:06:e8:6c:49:c6:30:9d:2b:e8:3d:93:b3:05:47:
                    77:69:42:81:13:ad:c0:30:47:5d:31:80:ad:ba:62:
                    2a:1a:97:08:0a:14:35:a0:e2:42:fc:64:70:33:a3:
                    a7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:DD:61:48:36:35:0E:1F:A4:42:3F:E9:69:1E:3D:34:66:C2:B0:1D
            X509v3 Authority Key Identifier:
                keyid:00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ca:84:6b:24:c6:eb:ec:f6:54:ca:13:fc:03:da:d0:23:d9:
         db:7a:81:c2:01:79:66:b2:7d:9b:b6:2f:42:6c:70:09:58:69:
         cc:63:19:45:d3:17:85:87:e3:08:35:f9:41:d9:bc:0b:37:1d:
         31:b8:a0:94:65:a5:d8:78:c0:d4:72:aa:93:9e:5f:12:53:08:
         59:fb:90:e1:4d:89:23:a6:8e:a7:4f:b2:c0:01:5f:a0:5f:63:
         18:71:de:f4:e2:a7:08:a1:b8:8a:ae:88:50:0a:07:3a:9e:13:
         9f:38:6e:84:ea:3b:08:df:a9:73:04:ce:e6:b7:dd:c8:9e:5c:
         d5:ec:48:ef:79:9c:b6:bf:70:bf:99:b9:ea:ca:6e:6d:e1:34:
         cd:55:c5:d6:a7:3c:e1:ef:aa:a7:96:75:06:d7:ab:b3:e3:4a:
         b4:04:f1:43:74:24:87:13:70:33:75:c1:97:23:61:3b:9a:b4:
         98:cd:4a:60:a7:59:97:ec:b1:2e:a9:ce:35:58:e7:55:e9:ac:
         91:f6:f8:4f:b6:42:17:24:96:76:28:10:a4:e4:17:2f:5a:a8:
         64:99:4f:00:b3:02:aa:50:36:b1:4c:d4:a4:a5:8a:d7:8b:87:
         cd:eb:78:94:b4:5a:51:e0:43:7b:fd:13:db:8d:ff:c8:a3:8b:
         e0:38:88:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:33:10 2026 by rpki-client