Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft
File:                     Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft (raw, json)
Hash identifier:          N3V5nAgKuIzW1VCZYtzoTFU59vWMxg3NOv2o1N6HL00=
Subject key identifier:   7C:E2:DD:12:97:30:24:42:16:B1:CE:9B:A9:88:CC:1F:26:B9:5A:81
Authority key identifier: 63:C1:B9:FF:E9:86:72:BF:62:F4:87:F4:7D:AF:EA:30:F5:BE:F0:9C
Certificate issuer:       /CN=63c1b9ffe98672bf62f487f47dafea30f5bef09c
Certificate serial:       019E2024246D17AB2DC187DDB8AA21192C91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft
Manifest number:          1899
Signing time:             Wed 13 May 2026 07:01:39 +0000
Manifest this update:     Wed 13 May 2026 07:01:39 +0000
Manifest next update:     Thu 14 May 2026 07:01:39 +0000
Files and hashes:         1: Y8G5_-mGcr9i9If0fa_qMPW-8Jw.crl (hash: Ww9odty4mlme2juG91yuQ6ZScCStWIYivOzD0N8q1ek=)
                          2: uUWVa1294AWFSpDUYVKBN-fvYMc.roa (hash: axEGfOzW4g5Z2ybzJ+kEQtiDgU2ikyT0bamMhlhBt2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:24:24:6d:17:ab:2d:c1:87:dd:b8:aa:21:19:2c:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63c1b9ffe98672bf62f487f47dafea30f5bef09c
        Validity
            Not Before: May 13 07:01:39 2026 GMT
            Not After : May 14 07:01:39 2026 GMT
        Subject: CN=7ce2dd129730244216b1ce9ba988cc1f26b95a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:21:86:08:15:f9:46:87:83:f0:26:a0:08:e7:
                    db:c6:88:77:4e:5e:b1:cc:36:fc:98:b2:e5:7c:03:
                    71:d0:03:e1:e0:59:34:ac:79:1e:a0:29:ed:8b:41:
                    eb:71:f9:d8:ed:72:c7:53:74:04:86:02:cf:5a:e3:
                    77:d0:d6:45:53:27:60:8d:56:ea:d6:5e:3a:c5:32:
                    a9:d5:15:52:51:4a:48:a1:ab:67:8f:18:1b:56:60:
                    82:13:e9:ef:01:d4:2f:60:4a:01:41:b5:33:e1:81:
                    6d:85:32:74:69:94:63:61:11:58:c0:eb:5c:e9:5f:
                    aa:fe:12:f2:8c:a5:1c:40:df:6e:b9:e9:c1:27:9e:
                    73:26:d7:82:ba:29:95:f8:99:67:d3:e8:32:ed:c7:
                    25:41:f9:e9:54:95:24:52:39:1e:ee:d9:e4:41:a5:
                    ef:c7:b4:40:9a:c3:9f:3a:31:96:ea:c3:90:29:f7:
                    0a:33:1b:14:52:16:27:c8:72:f7:68:9b:da:75:18:
                    d9:53:15:d0:f0:6c:a2:db:d5:d7:69:a5:83:7b:6e:
                    b1:da:f3:49:01:16:90:e8:34:0a:bd:a1:c0:3c:e0:
                    65:fb:88:20:54:5c:cf:73:0f:b9:42:43:cf:bc:31:
                    f6:d3:26:5b:a6:59:5d:fb:d6:e0:96:bf:c9:6d:1a:
                    b7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E2:DD:12:97:30:24:42:16:B1:CE:9B:A9:88:CC:1F:26:B9:5A:81
            X509v3 Authority Key Identifier:
                keyid:63:C1:B9:FF:E9:86:72:BF:62:F4:87:F4:7D:AF:EA:30:F5:BE:F0:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:61:44:3a:1d:fd:2f:a1:de:a5:5b:4e:c1:20:22:0c:1b:aa:
         ea:7e:c5:ff:52:92:bd:36:e3:49:cb:c0:7c:47:94:d9:ab:a3:
         97:8e:c8:a9:16:85:87:8d:6c:b3:86:a3:40:cc:fb:38:4d:a1:
         49:cd:de:e8:9a:9f:19:4d:eb:2b:63:cb:8e:00:66:a2:1d:a2:
         e1:96:87:04:6a:7d:06:4a:22:94:a8:4b:25:be:db:91:30:62:
         b7:09:09:9f:c6:41:ce:27:38:5c:f2:13:9e:ae:d7:d1:01:a5:
         26:c4:e9:f7:25:7c:72:45:84:4b:cf:37:af:8e:17:f0:3b:09:
         09:f3:9a:51:2c:97:62:22:3c:6b:a4:f2:6d:36:11:41:4e:bf:
         ec:e2:76:6d:7e:69:85:36:7c:14:76:78:6d:e3:13:60:52:b1:
         cf:3a:d0:a2:2d:f8:9c:fa:07:7c:c7:7a:5e:e6:37:ea:7d:e1:
         08:66:6a:d2:76:c5:51:4e:60:df:67:95:28:d4:19:4c:27:85:
         d2:4d:1e:7b:af:ea:b3:ea:7c:c8:89:81:a9:8f:47:18:25:17:
         75:03:03:b6:de:8c:f2:3d:57:06:a7:03:0f:59:05:e5:bb:7a:
         ec:4d:fb:ed:d3:b7:b3:97:3b:92:cf:46:2b:a6:da:1e:82:c5:
         e2:3a:c3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:49:30 2026 by rpki-client