Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
File:                     b61qcd7-VgoOXCH_u0A4-0EJEpU.mft (raw, json)
Hash identifier:          ejkfXkyGA8qHntpu1eXxk1FKME66t+zM/kgZ21nu6Y0=
Subject key identifier:   A6:11:94:D5:E6:BF:13:7A:9C:33:7A:28:85:69:E9:A8:97:34:87:8E
Authority key identifier: 6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
Certificate issuer:       /CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
Certificate serial:       019E1FB561B44D454326A4E8A1012BAE8AC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 05:00:41 +0000
Manifest this update:     Wed 13 May 2026 05:00:41 +0000
Manifest next update:     Thu 14 May 2026 05:00:41 +0000
Files and hashes:         1: b61qcd7-VgoOXCH_u0A4-0EJEpU.crl (hash: L8JbtEMiJwTjYnSW2ai1YwSSt0fi3YE6YMBL39Mn9B4=)
                          2: lFmZ1r-ocL0yoqMbggjpkGrPea8.roa (hash: 6qzbhdeSH++M2Vfj/8glXhLo1pCgKlmjHvesyWCTjDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 05:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:61:b4:4d:45:43:26:a4:e8:a1:01:2b:ae:8a:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
        Validity
            Not Before: May 13 05:00:41 2026 GMT
            Not After : May 14 05:00:41 2026 GMT
        Subject: CN=a61194d5e6bf137a9c337a288569e9a89734878e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c5:61:2a:ec:91:3c:40:42:09:4b:8c:81:1b:
                    6e:bc:59:9d:9d:90:7f:c2:81:b3:ff:cc:9c:1c:39:
                    d9:cb:aa:9c:dd:92:6c:de:b7:38:c8:86:52:f8:88:
                    07:da:ff:21:82:8d:33:20:6f:8d:85:8d:f2:e7:5c:
                    ba:cd:2f:54:40:6c:31:e9:21:13:e2:39:b9:8a:ea:
                    37:9c:fc:85:a1:89:05:94:e3:c2:17:ec:bc:39:f7:
                    94:86:8b:5d:c6:ca:7a:3c:52:39:7c:9e:ee:39:1c:
                    7d:c3:9d:dd:20:3a:6c:76:16:36:3e:1d:31:56:5f:
                    01:ac:da:67:ef:9a:c9:fd:97:53:e2:04:e3:92:33:
                    8f:f8:97:66:08:a9:c8:4e:61:08:af:5d:89:8d:1f:
                    ea:78:ef:6a:c0:ec:d3:7a:2d:7c:ac:30:dc:4f:42:
                    4c:42:99:32:8a:2f:87:97:5a:d4:75:0f:3d:25:6c:
                    71:61:71:6d:ec:64:0e:13:0e:74:d8:74:01:bd:a0:
                    f7:ac:f4:f7:ee:cd:72:71:4b:5f:38:20:c7:fd:f4:
                    44:26:17:35:cb:27:05:d2:72:0b:24:03:33:bd:0d:
                    89:49:49:94:03:ad:7b:7f:96:12:2b:46:ae:86:8a:
                    6a:3b:f7:83:10:0a:b4:6f:ec:e9:5b:c4:67:d2:f3:
                    32:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:11:94:D5:E6:BF:13:7A:9C:33:7A:28:85:69:E9:A8:97:34:87:8E
            X509v3 Authority Key Identifier:
                keyid:6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:41:b2:b8:1a:a6:2d:cf:bf:af:e2:b4:52:6e:1a:65:62:66:
         e1:5a:97:c0:83:78:ca:53:78:ab:c3:1c:99:84:27:3b:df:b3:
         cd:d9:48:02:5f:7d:9f:79:22:97:55:5a:46:90:b3:c6:bd:8e:
         a9:d5:de:9f:ec:8e:5b:83:ad:d0:2c:28:c3:77:b1:cf:83:f9:
         32:3c:73:92:b1:77:8c:85:fb:bf:31:e5:03:b1:a4:16:79:e7:
         c0:fe:e2:02:ea:52:45:b2:c7:53:1e:17:76:d5:22:7a:01:3a:
         1a:ca:b9:32:c9:9d:06:7b:1a:4d:b6:db:0f:51:82:5f:c4:6b:
         25:3d:2f:ad:4f:1f:95:18:aa:2e:2c:ca:92:55:77:15:4f:a0:
         b7:81:3e:07:ba:14:b2:0e:77:56:2e:b1:77:16:94:4e:07:f1:
         ee:cc:91:f8:a2:11:64:12:d4:8b:3e:40:29:a4:86:38:91:77:
         ba:0d:c2:0b:5d:b9:d0:bd:e5:c3:e3:dc:6d:f8:fb:56:f0:7f:
         f7:53:e4:d3:80:8a:cc:85:58:6f:f0:31:46:94:d3:fa:05:0d:
         4d:75:f2:b2:cc:90:65:a2:8b:cb:cf:c4:cd:0f:28:84:64:11:
         bd:96:ad:67:70:e4:3d:6a:d0:64:05:75:c3:43:d4:4f:da:08:
         dc:fc:59:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:06:52 2026 by rpki-client