Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.mft
File:                     1EdMHAbL_elGFNZcfQX2FKbiOZg.mft (raw, json)
Hash identifier:          3uhLlN8xbByUBGqV4Yv9YHoS00j6633+FWvORYpEf4o=
Subject key identifier:   C5:2D:72:41:CB:60:5F:E7:63:97:68:73:72:82:78:EF:A4:29:61:4E
Authority key identifier: D4:47:4C:1C:06:CB:FD:E9:46:14:D6:5C:7D:05:F6:14:A6:E2:39:98
Certificate issuer:       /CN=d4474c1c06cbfde94614d65c7d05f614a6e23998
Certificate serial:       019E1D5969BC0D0AB2E9EE4B3BEE5E132E46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EdMHAbL_elGFNZcfQX2FKbiOZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.mft
Manifest number:          1906
Signing time:             Tue 12 May 2026 18:00:59 +0000
Manifest this update:     Tue 12 May 2026 18:00:59 +0000
Manifest next update:     Wed 13 May 2026 18:00:59 +0000
Files and hashes:         1: 1EdMHAbL_elGFNZcfQX2FKbiOZg.crl (hash: 9T/fRToHpmKYbvGnCVNjok4uSFSIJCU2yBjKUNPqtlg=)
                          2: W6Y3idz-0ZKwDYNSRKjUJfW8Ww0.roa (hash: 1WR2Uw1GdUwynyPsOGJjutQPMS2E5J6S8kJ56yegvbc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1EdMHAbL_elGFNZcfQX2FKbiOZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:69:bc:0d:0a:b2:e9:ee:4b:3b:ee:5e:13:2e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4474c1c06cbfde94614d65c7d05f614a6e23998
        Validity
            Not Before: May 12 18:00:59 2026 GMT
            Not After : May 13 18:00:59 2026 GMT
        Subject: CN=c52d7241cb605fe763976873728278efa429614e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d9:6d:53:43:d7:af:cc:cf:fe:8d:03:8c:9f:
                    af:16:ea:71:80:a9:86:1f:dd:05:40:cb:d8:55:da:
                    0d:9f:81:56:ca:2b:c8:42:4c:bc:6c:17:bf:f8:27:
                    8b:97:5c:60:62:ef:a2:b0:9e:8f:64:14:2f:cc:c6:
                    78:6a:93:0c:53:f5:b9:f4:96:4e:77:ab:a1:27:3e:
                    f1:fc:53:a8:46:57:58:8a:42:b0:09:66:24:61:67:
                    2a:fc:33:fd:49:4e:33:51:31:03:0c:37:4c:21:58:
                    8d:84:d4:70:f4:2d:0e:62:9e:75:9d:62:54:89:d4:
                    5d:da:77:35:e2:f3:e1:64:72:08:93:9a:d0:b6:bd:
                    4b:6f:56:a4:59:a5:7a:08:ac:cc:f5:32:4f:9b:be:
                    ad:f7:ab:7f:51:7e:32:bf:34:70:ea:6f:31:41:7d:
                    e5:97:71:d9:9e:c5:6c:ec:54:2f:ad:b2:db:70:ec:
                    7b:2c:28:da:7e:40:f0:ac:9e:3c:6e:4d:f0:f9:a8:
                    80:22:af:a8:9f:f3:e6:9c:24:83:ee:9d:74:3b:c8:
                    68:70:b5:0b:e8:c3:cf:a7:d4:ac:2b:1f:65:7b:4f:
                    43:af:a5:19:c8:88:a7:a3:a2:47:fe:67:d0:65:81:
                    f6:2e:a2:32:b7:b9:1d:ad:b1:78:ef:4a:31:3d:14:
                    4d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2D:72:41:CB:60:5F:E7:63:97:68:73:72:82:78:EF:A4:29:61:4E
            X509v3 Authority Key Identifier:
                keyid:D4:47:4C:1C:06:CB:FD:E9:46:14:D6:5C:7D:05:F6:14:A6:E2:39:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EdMHAbL_elGFNZcfQX2FKbiOZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:23:4b:3e:fa:98:6d:6f:39:9e:b6:96:44:89:7f:29:be:c9:
         85:31:c7:6f:9f:ea:25:11:6c:c4:7d:65:01:fc:ec:60:63:41:
         26:9f:0c:49:91:f4:07:00:62:1d:b0:9b:0e:6b:6b:96:24:04:
         f1:c9:04:87:bd:c8:5c:7c:a0:f8:ae:f0:7c:17:ee:8b:eb:d5:
         a2:b7:ee:73:a9:cf:b2:e8:ca:b8:65:57:ed:17:42:50:91:04:
         65:e6:cf:d0:f4:9b:ef:fb:d9:d4:a0:27:62:3c:87:b7:ea:2f:
         9d:5a:eb:b3:a4:96:fc:2b:a8:c5:39:95:24:a5:09:68:38:3c:
         2a:85:45:27:ff:6c:9d:e3:82:fc:8d:87:6e:0e:79:ba:60:22:
         b6:ca:90:7d:c5:9a:bc:9b:86:28:6a:8b:1a:d5:a5:4d:ed:a0:
         4f:c0:a7:a1:f4:2d:75:33:57:f6:ec:53:ab:62:1a:fc:b8:c0:
         5c:6d:21:22:63:13:84:79:7f:50:a9:35:7b:f9:3a:05:9c:11:
         f9:37:a4:f2:5b:71:e7:ef:bf:cb:b9:5a:0f:ee:f5:75:f9:64:
         57:6c:e5:8f:48:c0:2a:df:55:0e:98:78:bc:1f:19:2c:4f:0b:
         76:6e:70:1d:79:b0:42:27:cb:0a:f9:98:4f:af:dc:8c:86:d3:
         31:15:64:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:17:25 2026 by rpki-client