Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
File:                     gJ7XCYERxniJisDwrsl_3Ts7bQI.mft (raw, json)
Hash identifier:          NZnAgG1EMfdWcCIK60/VaFtHhmEYXqNBt7U/T/Zoo/I=
Subject key identifier:   EC:7F:92:7D:40:CA:7F:18:C1:A6:36:AF:75:12:A0:C7:73:7C:3F:F2
Authority key identifier: 80:9E:D7:09:81:11:C6:78:89:8A:C0:F0:AE:C9:7F:DD:3B:3B:6D:02
Certificate issuer:       /CN=809ed7098111c678898ac0f0aec97fdd3b3b6d02
Certificate serial:       019E1F1120E64CA8771B8630878EF0A9D8F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
Manifest number:          1906
Signing time:             Wed 13 May 2026 02:01:16 +0000
Manifest this update:     Wed 13 May 2026 02:01:16 +0000
Manifest next update:     Thu 14 May 2026 02:01:16 +0000
Files and hashes:         1: gJ7XCYERxniJisDwrsl_3Ts7bQI.crl (hash: eknwbKw+NkGOeDRZFDvSOeydKLhAtEHUy3PW8YKgxN8=)
                          2: k1oWIl9uaPhK_7wC7TzwxBmJV5U.roa (hash: Teuvy3ArR3TwwUcbjV0tYtPi6ySgg76mgoEbmzqvJDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:20:e6:4c:a8:77:1b:86:30:87:8e:f0:a9:d8:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=809ed7098111c678898ac0f0aec97fdd3b3b6d02
        Validity
            Not Before: May 13 02:01:16 2026 GMT
            Not After : May 14 02:01:16 2026 GMT
        Subject: CN=ec7f927d40ca7f18c1a636af7512a0c7737c3ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b8:99:2e:8d:15:7d:86:e0:99:13:80:5d:72:
                    09:c1:4c:04:56:78:bc:f1:c5:a2:ab:cf:d4:13:02:
                    6e:70:c8:86:cf:b6:f1:a9:4c:a2:a8:1d:60:d2:8d:
                    0a:51:e0:d6:8a:c0:ee:4a:ed:af:1e:36:ed:ed:b7:
                    20:ac:96:78:e0:3e:b3:2b:54:7e:31:96:cf:f4:9a:
                    91:ef:d2:b2:f1:06:7f:13:12:8a:a6:36:a5:f6:f4:
                    81:ec:06:3e:60:5f:98:c6:04:a4:74:28:11:c0:7a:
                    a8:47:c7:c7:a7:39:cf:e9:23:b5:dc:58:63:46:3a:
                    84:c5:06:44:82:5b:dd:9a:b8:f7:5e:a0:05:91:d6:
                    d3:77:0f:b1:ef:4d:1f:24:fc:f2:13:78:fb:10:a7:
                    86:db:d0:c7:1f:05:c9:4c:34:b4:c6:99:31:da:93:
                    38:25:d4:0b:20:8e:ad:b0:05:cd:b9:55:df:83:e9:
                    0b:53:55:8a:fb:67:5e:90:50:3f:83:31:07:a9:2a:
                    51:7d:69:e8:c4:2b:98:13:59:b0:67:3d:35:08:c7:
                    19:58:a7:af:f4:fe:57:9f:f2:96:ea:b2:c6:c7:37:
                    70:09:01:94:e3:22:39:de:ab:a5:03:e5:95:78:2d:
                    ee:6d:5a:89:b5:fd:29:cf:9d:e3:c6:9a:3d:23:35:
                    17:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7F:92:7D:40:CA:7F:18:C1:A6:36:AF:75:12:A0:C7:73:7C:3F:F2
            X509v3 Authority Key Identifier:
                keyid:80:9E:D7:09:81:11:C6:78:89:8A:C0:F0:AE:C9:7F:DD:3B:3B:6D:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:93:e6:2f:9c:37:9e:f0:56:23:ab:74:0b:a7:8c:bc:ff:cb:
         ad:7b:2e:f1:04:44:8a:0e:6f:c7:17:11:e8:08:c4:00:64:44:
         ef:56:a0:86:e6:fd:6b:f8:67:a1:09:bc:9b:4d:4f:91:d0:47:
         0a:70:48:56:2c:00:c0:2f:79:6d:41:6d:24:b3:bb:6c:75:bb:
         6b:09:92:b2:7e:29:31:2a:51:ba:78:ac:c4:62:7c:34:1d:0e:
         9b:01:fc:23:03:5a:52:41:41:71:6f:33:bf:8d:75:56:75:d0:
         95:05:ce:07:4c:05:f7:42:fb:ff:fb:6a:ba:e8:df:e9:54:56:
         c4:49:90:1b:92:cb:da:9d:ea:6e:33:68:da:7c:70:7f:9d:63:
         99:11:b5:c9:0f:07:50:f5:41:87:2d:8e:e3:be:8c:aa:f7:44:
         74:3e:c9:bc:42:86:f2:28:b2:77:7c:b2:47:e7:77:fa:fc:cb:
         1e:87:e7:ee:8c:56:c3:70:f8:f4:db:f6:30:43:01:e5:20:d8:
         87:92:cf:d0:ab:b8:fc:c0:dd:b7:df:d0:8c:71:c1:ca:f5:58:
         ea:94:84:4e:c5:79:50:86:18:0b:65:0d:13:fb:9b:f4:66:0c:
         12:53:e9:6c:80:fa:24:aa:3e:9f:54:ec:93:43:da:95:b6:86:
         7c:5a:55:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:34:22 2026 by rpki-client