Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft
File:                     cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft (raw, json)
Hash identifier:          kWjy9P06YaNDmGr09TjrqrYYfrzHuxbqBf7FmfSUZ04=
Subject key identifier:   CD:D0:8B:82:DD:50:17:42:1F:11:4F:35:BC:F4:37:80:D2:27:BC:4D
Authority key identifier: 72:E6:82:6C:86:28:48:9D:B0:41:FE:78:C0:9E:F2:8B:54:21:E4:5C
Certificate issuer:       /CN=72e6826c8628489db041fe78c09ef28b5421e45c
Certificate serial:       019E205A44FAD56976B192B76F81CB4A90FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft
Manifest number:          1906
Signing time:             Wed 13 May 2026 08:00:47 +0000
Manifest this update:     Wed 13 May 2026 08:00:47 +0000
Manifest next update:     Thu 14 May 2026 08:00:47 +0000
Files and hashes:         1: cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.crl (hash: jmxzz5ffYtNPYkr15t+Hxyo46LhoPd4FWr3DqCjMR70=)
                          2: fWrVWO3Qdl8cPmv42q3hMALhIj8.roa (hash: TQo5JavRn3eW6VS8sjnDE/2uLbkZQpycWjKQhd4KcM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:5a:44:fa:d5:69:76:b1:92:b7:6f:81:cb:4a:90:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72e6826c8628489db041fe78c09ef28b5421e45c
        Validity
            Not Before: May 13 08:00:47 2026 GMT
            Not After : May 14 08:00:47 2026 GMT
        Subject: CN=cdd08b82dd5017421f114f35bcf43780d227bc4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ef:f7:8c:75:d9:30:d6:ee:a4:30:de:4c:71:
                    3f:ec:6c:f9:d4:54:d9:42:b0:ac:18:4f:b9:8e:2f:
                    6c:75:fe:86:76:88:b2:66:60:b0:b0:05:8b:99:a8:
                    6a:a5:2e:44:21:ee:d6:2d:2d:bc:c5:8d:13:f8:96:
                    fe:cd:09:42:80:46:ac:f6:4f:f3:73:a6:25:f6:08:
                    1d:d9:d3:d7:ea:cf:9f:89:64:a9:51:ae:ad:f3:ce:
                    fa:09:a3:c5:8c:47:b6:92:53:9b:84:ac:ae:05:d0:
                    45:83:2f:64:0d:76:eb:f0:06:de:eb:a9:f4:dc:35:
                    d7:97:e1:ae:cd:96:f4:5a:11:06:3b:08:0e:76:ee:
                    68:d6:aa:40:26:50:79:8d:cd:9b:ea:ae:33:41:00:
                    d3:96:4e:0a:7f:58:a1:8e:5d:65:b0:10:de:1b:c5:
                    4f:97:9c:31:d2:3f:d2:48:73:c6:ef:d5:79:25:fb:
                    a9:c0:1b:d8:b3:36:59:43:f6:5e:9a:a2:ac:ab:94:
                    76:a2:2b:9e:fd:d3:8c:7e:45:cd:94:73:38:66:50:
                    ab:d0:d2:fe:90:70:f1:cf:cc:13:1b:79:53:dd:cb:
                    c1:0e:ca:df:dc:b5:b7:83:01:4d:cf:d6:c7:02:bd:
                    06:6f:06:e2:84:3e:f3:ff:90:d7:45:53:e7:6f:a1:
                    d3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D0:8B:82:DD:50:17:42:1F:11:4F:35:BC:F4:37:80:D2:27:BC:4D
            X509v3 Authority Key Identifier:
                keyid:72:E6:82:6C:86:28:48:9D:B0:41:FE:78:C0:9E:F2:8B:54:21:E4:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:ae:d9:7f:c0:b2:34:00:26:a6:30:ef:da:9b:27:53:96:70:
         9c:e8:65:e4:0e:1e:5d:75:a7:5a:c6:d1:7c:63:e7:50:04:0a:
         0f:bd:e5:4d:7d:ae:a0:5e:a5:7a:ab:0b:eb:f2:b7:43:56:ee:
         89:99:12:39:dc:9d:e0:3d:fc:a3:a0:93:31:a5:5c:1f:18:fd:
         1d:f9:15:12:40:4e:35:57:57:71:4d:9d:40:b2:e6:28:4d:f8:
         17:df:8c:87:c1:87:e8:5a:da:a3:12:7a:a5:36:b9:a2:dd:2c:
         d6:af:db:12:c1:42:af:f8:f2:f4:3d:25:9e:07:4b:8f:bb:30:
         10:9a:0d:b6:5b:8d:51:62:1b:64:c9:94:b3:68:6a:30:f7:c9:
         5f:8f:5d:f4:f1:38:ed:1d:d2:bc:fc:d1:f1:a2:f3:3e:f3:f9:
         fc:6a:ff:9c:28:0c:7a:e0:f6:30:74:41:fd:91:13:56:d3:fe:
         e3:05:a8:3b:bd:fb:4e:1a:52:c2:6e:a1:bc:29:e1:3b:6c:ce:
         a2:e7:aa:43:48:3c:0f:65:9a:54:bb:b6:6a:25:7a:61:19:6b:
         cb:8c:ff:13:0b:2f:e6:df:e7:28:8e:51:60:ff:11:b0:36:4d:
         a7:5b:83:f9:23:a1:53:39:5a:be:ad:bb:a5:8a:97:de:a9:f2:
         8f:57:31:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:11:23 2026 by rpki-client