Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
File:                     x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft (raw, json)
Hash identifier:          Eaa+68jjperZ1pRoRm1qNKuKz7a9X2Xs1yq2e1GJmHQ=
Subject key identifier:   A1:CD:DF:55:F2:F3:34:A0:29:52:2A:3D:B4:C2:70:DA:B1:7C:BF:80
Authority key identifier: C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48
Certificate issuer:       /CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48
Certificate serial:       019E1F7F8701AACF0682B520A6288A5F04B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 04:01:51 +0000
Manifest this update:     Wed 13 May 2026 04:01:51 +0000
Manifest next update:     Thu 14 May 2026 04:01:51 +0000
Files and hashes:         1: IdCieT_FXqDI14dT8duUpcsBKXs.roa (hash: WZwdbmj4EPfIzjAKG+pkXmeMhYN6QkPRXsW2FQB2pGA=)
                          2: x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl (hash: IP47Y9aft2qcZWeuFMj6xtJCaw8ykOizCXO3djdW9YA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7f:87:01:aa:cf:06:82:b5:20:a6:28:8a:5f:04:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48
        Validity
            Not Before: May 13 04:01:51 2026 GMT
            Not After : May 14 04:01:51 2026 GMT
        Subject: CN=a1cddf55f2f334a029522a3db4c270dab17cbf80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e6:ff:5b:0c:a5:24:50:a0:18:75:25:84:69:
                    8b:8a:c3:28:42:f0:9c:39:0f:d7:e3:ff:d9:15:47:
                    50:37:3b:ea:3d:13:f5:0f:ba:76:90:0d:80:86:e3:
                    ef:c8:9a:4e:62:bf:a0:d3:12:a5:18:23:58:94:6e:
                    9d:2d:15:e3:1e:4f:d1:5b:e5:8d:dc:ef:ba:72:41:
                    4f:8c:c2:ee:4f:5a:b7:00:67:e9:58:d5:f2:a0:3e:
                    ab:48:73:e7:fc:af:c4:ef:dc:de:35:4c:31:7f:12:
                    50:fa:d3:5c:53:1f:18:7f:c3:b7:de:f3:f4:1f:5f:
                    34:b4:15:c0:36:e1:8e:0b:49:bf:89:27:01:92:24:
                    20:e2:ae:70:43:19:c0:0b:5a:03:dc:cb:1f:d8:fc:
                    1b:74:3d:32:62:0e:25:7c:e3:34:50:dc:09:dc:6c:
                    96:bc:85:dd:d8:59:8c:cf:bb:be:86:15:2e:24:f5:
                    92:10:9e:0c:b4:72:9b:47:84:c1:93:6f:97:99:04:
                    4f:de:96:9e:52:b8:fa:52:b8:67:e2:b0:ee:9f:ef:
                    1d:63:87:e1:50:dc:44:8e:80:4c:67:be:cf:07:1a:
                    c6:fd:97:49:08:87:1a:7c:90:c3:7f:b6:7d:d1:08:
                    e1:93:f7:5a:de:55:ab:4f:78:00:bb:38:39:3d:30:
                    75:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:CD:DF:55:F2:F3:34:A0:29:52:2A:3D:B4:C2:70:DA:B1:7C:BF:80
            X509v3 Authority Key Identifier:
                keyid:C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:1b:c9:4a:9e:5f:c6:e4:65:d1:07:17:e7:d7:5b:e0:07:0e:
         07:b1:cc:47:f9:bf:0b:92:07:37:d2:49:36:87:e2:fa:7f:22:
         cd:b1:dd:7d:6e:67:96:75:d5:49:f5:3f:69:e8:26:93:f6:6d:
         77:ab:c6:b1:2d:59:9c:75:38:db:67:10:e6:1d:55:e8:3b:89:
         fb:75:8f:25:41:9b:85:5b:76:33:57:22:d8:b0:94:b8:2d:df:
         b1:a1:9d:8b:5d:09:77:07:d7:2d:d5:23:2e:23:37:7b:59:58:
         d9:f2:08:bf:c3:7b:ef:e5:f1:65:6e:3a:c1:b5:07:bd:ba:9b:
         e1:72:16:d2:46:c2:2d:c8:63:82:88:12:78:d9:e9:b0:c8:0c:
         e1:f7:50:4b:8b:0b:4b:14:30:21:68:fc:54:a9:34:16:65:5e:
         eb:ac:fa:47:4d:57:81:4b:52:da:4c:87:de:a7:3d:c9:b0:1a:
         98:e7:a5:4f:dc:b9:0f:fe:d2:b9:dd:10:85:83:cd:ba:55:f8:
         f6:3b:c1:c3:e8:39:bf:9c:2a:eb:64:67:40:a8:9a:a5:61:50:
         f9:0c:ab:0e:c2:fa:13:2d:c3:b7:89:a4:e9:7e:3b:e1:b4:62:
         98:d5:cc:57:e6:e3:f6:e3:51:1a:54:b7:bf:e2:74:ef:da:2e:
         86:4f:79:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:07:09 2026 by rpki-client