Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
File:                     84Yn42pOFr3DnwtVDXT9ceRC0sI.mft (raw, json)
Hash identifier:          uyY5rjvVOnXIFED2IGlpSBkRE59zDqHhbD/2XzVFL9s=
Subject key identifier:   79:66:71:23:5C:4C:2D:C3:6F:30:C8:C6:79:1B:32:03:D6:B1:7B:2D
Authority key identifier: F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2
Certificate issuer:       /CN=f38627e36a4e16bdc39f0b550d74fd71e442d2c2
Certificate serial:       019E1D90F0877ACF650AB4CFB18F7DCD2747
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
Manifest number:          1905
Signing time:             Tue 12 May 2026 19:01:38 +0000
Manifest this update:     Tue 12 May 2026 19:01:38 +0000
Manifest next update:     Wed 13 May 2026 19:01:38 +0000
Files and hashes:         1: 84Yn42pOFr3DnwtVDXT9ceRC0sI.crl (hash: eyuTOBr4Y0PLRRJQwWM1xRyK6PlWDwSfMhFAM9nT4rQ=)
                          2: z4xZtO9FtF8o6mwi4QbL-Wu86s4.roa (hash: vP00qCgQWns/k1mWbLbmAoHCP48JJhdfJx4DqX0YL04=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:f0:87:7a:cf:65:0a:b4:cf:b1:8f:7d:cd:27:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f38627e36a4e16bdc39f0b550d74fd71e442d2c2
        Validity
            Not Before: May 12 19:01:38 2026 GMT
            Not After : May 13 19:01:38 2026 GMT
        Subject: CN=796671235c4c2dc36f30c8c6791b3203d6b17b2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c2:32:07:fe:2f:89:a4:c9:0e:dc:b9:07:ae:
                    0a:84:3e:e2:2d:ac:10:f5:da:38:94:15:b9:ac:1a:
                    f6:be:14:de:09:55:a4:a1:fd:99:92:c0:3c:14:d2:
                    90:a1:db:05:31:0d:a7:78:22:67:4c:d8:ec:42:f4:
                    b9:06:c3:e7:6d:ed:5f:ad:3e:69:fe:ce:e2:cf:ec:
                    04:0c:d2:18:c4:ca:b6:56:2d:0e:cd:03:76:02:63:
                    ee:88:39:1f:79:83:14:74:f7:36:12:be:fe:ee:7c:
                    09:23:25:a9:3f:0e:1d:c2:b5:db:b7:b3:f9:a9:e7:
                    31:43:2d:75:4c:4a:b7:aa:d4:9d:fe:f6:aa:db:c3:
                    a8:b7:c4:e4:3e:b3:d5:68:b5:ef:c1:43:d2:c2:5e:
                    71:78:05:c1:2e:32:93:d7:53:f1:4f:42:cb:6d:a4:
                    09:de:76:0f:55:d1:61:e1:8e:56:3b:51:3b:b6:41:
                    fd:f6:29:67:89:79:0d:ed:33:54:7a:1d:01:61:7c:
                    77:92:32:7b:d5:50:15:2a:9a:73:56:8f:cf:49:aa:
                    19:c6:cb:f0:b5:6c:b9:c9:ef:26:51:c9:d3:f2:18:
                    55:43:d3:71:be:2e:b1:29:3b:06:b6:e7:68:1a:73:
                    23:c6:71:c7:25:a2:5d:7c:b2:ab:70:93:3e:d9:e5:
                    9f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:66:71:23:5C:4C:2D:C3:6F:30:C8:C6:79:1B:32:03:D6:B1:7B:2D
            X509v3 Authority Key Identifier:
                keyid:F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:ae:df:32:f3:82:ac:7b:48:ca:95:d0:6f:66:9b:7b:eb:1f:
         21:f0:0a:7c:97:3b:53:1a:80:91:1d:14:1c:59:d1:27:b6:b3:
         e0:4c:8b:10:34:a9:3e:66:ff:59:f5:78:40:a4:a7:f7:c7:2a:
         e5:74:8a:68:ef:37:13:d7:98:92:fc:ef:b5:11:0f:75:e2:08:
         87:ea:47:89:fa:4b:ba:d2:62:f9:ce:1f:1c:46:eb:87:cd:98:
         bf:a3:e3:42:b3:f3:41:45:64:06:0f:53:8c:53:e5:18:36:2a:
         91:cb:36:0a:7f:07:e7:20:e5:3c:f9:31:87:6c:3b:fc:a2:56:
         f7:fc:5c:a0:38:6f:f5:27:7d:04:5d:5e:60:75:ae:35:c4:9f:
         72:c0:88:1a:e7:78:16:89:95:db:60:de:3b:76:a2:f3:bb:a4:
         dd:82:42:33:d3:d9:6a:91:fa:93:97:21:5d:52:5c:ae:63:a5:
         36:17:9a:b3:45:06:64:0c:6c:94:98:9d:d9:ab:af:e5:7e:28:
         35:08:ae:f2:c6:55:16:38:23:79:3a:03:e8:d7:fa:10:87:c3:
         7d:53:86:7b:1b:d1:29:33:cd:42:71:58:4b:be:09:26:51:90:
         85:f4:dd:3c:75:23:ec:2f:bc:76:40:4b:d7:b2:9a:a0:be:26:
         e2:4e:a8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:16:07 2026 by rpki-client