Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft
File:                     _9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft (raw, json)
Hash identifier:          J2cKlJocyFtOsVPMQn4d5pm7VlH5lDZ3UP9WvdU4vcI=
Subject key identifier:   F6:98:76:F3:19:93:E0:61:06:B8:33:9B:35:7E:49:71:C3:74:10:20
Authority key identifier: FF:D3:C1:74:2F:C0:5A:80:A2:DC:6B:B0:EB:E1:03:0A:9B:BC:8C:94
Certificate issuer:       /CN=ffd3c1742fc05a80a2dc6bb0ebe1030a9bbc8c94
Certificate serial:       019E1EDA074312DC18F5359A33DA6FBABC7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft
Manifest number:          1898
Signing time:             Wed 13 May 2026 01:01:05 +0000
Manifest this update:     Wed 13 May 2026 01:01:05 +0000
Manifest next update:     Thu 14 May 2026 01:01:05 +0000
Files and hashes:         1: R4oyG7MkvAUxFV8Qe8hFBuhpAZE.roa (hash: 61dyTs8QajKBq9N89Z2db9Gx/wInV1LDSXpLhS9VDls=)
                          2: _9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl (hash: Lw7bte2RZHaBRGXGQiwOoRI637X19gIohhIss7gnJ5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:07:43:12:dc:18:f5:35:9a:33:da:6f:ba:bc:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffd3c1742fc05a80a2dc6bb0ebe1030a9bbc8c94
        Validity
            Not Before: May 13 01:01:05 2026 GMT
            Not After : May 14 01:01:05 2026 GMT
        Subject: CN=f69876f31993e06106b8339b357e4971c3741020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:35:67:a6:06:3f:86:2a:7e:78:c7:4b:29:2f:
                    f8:e0:a4:cd:df:e0:51:83:91:80:4b:c2:ce:80:f5:
                    fb:2c:8f:5c:59:ed:b7:05:ef:ec:2f:64:8a:2d:94:
                    b0:ae:8f:43:4b:a5:03:49:a8:3c:3a:78:f7:89:2e:
                    ea:11:2e:59:18:82:76:fa:41:72:ae:cf:d4:49:3d:
                    14:9a:57:2a:fd:96:ac:eb:e5:e4:ad:70:00:1c:b9:
                    da:b8:ee:eb:c9:01:fe:e9:c0:8b:ae:7d:9c:b0:81:
                    08:16:34:f4:23:f5:80:8c:21:c9:56:e6:d1:80:61:
                    f1:49:e3:98:5b:a7:83:e8:5e:13:99:a1:a0:01:f9:
                    4d:a5:d2:16:e5:d9:05:36:bc:cd:a7:5e:59:06:5e:
                    57:fd:37:7e:e0:65:6f:a8:42:ca:8c:26:ea:26:a7:
                    38:d4:b5:53:d4:70:42:7f:bb:e0:2b:b9:6c:b0:7f:
                    63:d0:0a:1a:b6:c1:73:ad:8a:be:76:93:c1:66:68:
                    15:38:ab:66:78:c9:6c:40:9f:3f:a7:15:ff:34:d3:
                    8b:e3:ce:c6:85:5b:08:54:0f:a6:a3:f0:58:5d:80:
                    14:d2:6b:bd:92:ae:1e:fd:92:e3:fd:11:8d:f8:7f:
                    1c:26:82:b2:92:25:48:43:15:41:c8:4a:91:b6:d6:
                    c3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:98:76:F3:19:93:E0:61:06:B8:33:9B:35:7E:49:71:C3:74:10:20
            X509v3 Authority Key Identifier:
                keyid:FF:D3:C1:74:2F:C0:5A:80:A2:DC:6B:B0:EB:E1:03:0A:9B:BC:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:a3:0f:cf:c6:3b:88:8c:be:c2:db:7b:14:d5:11:af:fa:e8:
         d5:a4:4c:9c:db:46:66:04:77:c4:d6:fd:04:71:21:d3:52:24:
         32:31:9e:ef:3f:ff:1f:b1:d6:df:10:4c:8c:89:0a:78:e4:8a:
         a7:8f:4a:91:66:88:4c:9a:6b:1e:ac:c0:69:5a:f6:32:db:bf:
         ac:66:85:32:6b:6a:a8:8a:f8:b9:2d:ac:ca:f9:63:4c:95:1b:
         48:aa:fc:28:f6:57:08:6d:5f:38:26:07:bb:b5:4e:cc:e7:05:
         d8:99:0d:3e:d3:94:52:9b:56:91:a8:c1:7e:c1:d2:41:89:f4:
         dd:7e:fa:80:70:96:5d:a2:c2:e4:a4:d1:f9:4e:6f:fc:19:55:
         df:66:ef:9c:5e:d8:36:4d:e1:21:0b:cb:fd:38:33:91:c9:63:
         7b:99:67:97:65:be:f3:f0:80:dc:65:15:f5:e7:7f:47:f8:cf:
         70:e8:44:0f:72:ca:c0:57:5e:a3:13:3c:f9:a4:e0:f0:94:1d:
         95:ee:38:d1:25:9b:f4:c1:f2:03:21:9d:71:97:ff:a6:ad:23:
         8e:09:48:c7:8e:a3:56:0a:a6:da:b0:83:7d:14:58:a1:a2:8f:
         91:74:78:ec:8c:88:3c:df:06:38:d0:d5:0c:59:32:d9:fa:45:
         a1:e9:ae:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:41:05 2026 by rpki-client