Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
File:                     O_xkMfUzO23dMeg7aWgtjo7gb8E.mft (raw, json)
Hash identifier:          JQJHsioCaSrGHfeUlQF3gEVi//ofKwlD+XgV0/X6dI0=
Subject key identifier:   79:EA:6F:B7:46:4F:98:96:E7:3A:F7:DC:60:E3:D7:27:39:7F:A3:C1
Authority key identifier: 3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1
Certificate issuer:       /CN=3bfc6431f5333b6ddd31e83b69682d8e8ee06fc1
Certificate serial:       019E205A4ED891ECFAECB12F491C614F22BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 08:00:49 +0000
Manifest this update:     Wed 13 May 2026 08:00:49 +0000
Manifest next update:     Thu 14 May 2026 08:00:49 +0000
Files and hashes:         1: EMaCwLjxvEjldttSlMrOnwekZ_Y.roa (hash: aBqqe+U1PaVNW6VJZrxz+RRQt4gTnenHJ/Ty1nZ3HHo=)
                          2: O_xkMfUzO23dMeg7aWgtjo7gb8E.crl (hash: gsFe1VcE/jHTvtHsvFB+2VKPBcX/pooGCmzgZdLCo4c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:5a:4e:d8:91:ec:fa:ec:b1:2f:49:1c:61:4f:22:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bfc6431f5333b6ddd31e83b69682d8e8ee06fc1
        Validity
            Not Before: May 13 08:00:49 2026 GMT
            Not After : May 14 08:00:49 2026 GMT
        Subject: CN=79ea6fb7464f9896e73af7dc60e3d727397fa3c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bb:0b:4d:23:c4:7f:d4:3c:0f:61:50:4f:35:
                    b1:b8:ec:16:af:e4:de:34:34:63:ac:e0:df:65:1d:
                    88:1b:c9:79:a8:17:02:0f:47:37:a8:48:03:32:ab:
                    79:4f:5d:ec:a1:55:04:b7:04:05:de:24:3a:64:3e:
                    26:d4:c6:3e:49:2a:bf:ff:cd:f3:f3:af:9c:6b:e1:
                    d9:38:c1:7f:a5:96:70:8d:0f:6a:ee:1c:1a:a1:28:
                    42:79:d4:56:76:96:45:ee:63:d4:31:3d:75:34:3b:
                    5e:35:d7:80:b1:72:8f:bb:df:bb:3a:e0:35:49:55:
                    24:a9:80:a2:fe:16:84:b3:47:25:3d:40:13:ec:cf:
                    73:dd:23:e3:27:cf:b3:aa:e1:b6:61:88:f7:e4:3b:
                    42:15:e9:c6:cb:13:61:58:98:63:09:e2:d4:1b:ab:
                    0b:26:26:e8:3a:77:06:31:9f:c2:ae:6b:68:91:76:
                    7b:11:1a:36:67:71:02:c0:45:a2:55:e2:de:15:26:
                    82:75:a0:39:af:82:71:7b:af:69:e9:11:e2:61:1a:
                    91:70:bc:3c:16:b3:21:9d:03:a9:6d:05:8c:da:92:
                    84:8d:4a:9d:8d:2b:3c:f1:22:d1:88:ee:2a:20:b0:
                    2a:eb:62:1d:78:74:72:9a:82:7e:c6:84:59:2b:0c:
                    f9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:EA:6F:B7:46:4F:98:96:E7:3A:F7:DC:60:E3:D7:27:39:7F:A3:C1
            X509v3 Authority Key Identifier:
                keyid:3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:85:01:62:d9:90:21:a6:5e:83:54:83:9a:67:25:5a:e5:18:
         02:25:12:a3:05:2f:9d:db:58:9c:a0:d2:6c:7d:57:80:6e:21:
         db:eb:66:98:f6:28:88:d8:f0:d1:e8:e7:af:2e:39:31:c7:3a:
         3d:fa:66:5d:8d:f9:a7:e4:bb:ed:2f:5e:84:b5:d6:02:1a:28:
         13:6f:12:4d:3e:1e:93:39:f8:4c:9b:8c:02:0d:dd:0e:71:ac:
         79:80:f5:f7:6e:d0:ad:b9:a7:80:6d:bc:a2:5b:2d:92:ec:11:
         86:ff:82:65:b3:2e:79:21:2c:6a:09:60:27:51:cb:03:dc:96:
         c4:eb:61:cd:b5:6d:b8:f1:f7:a3:02:e3:d0:cc:d0:dd:49:b7:
         bf:ad:4f:13:0e:b2:dd:f1:c1:f9:62:c3:c2:18:95:bd:a4:f0:
         fa:c8:36:b7:e4:15:d8:2b:11:1c:11:74:02:0a:a5:f6:18:ca:
         d0:57:2c:bb:50:17:e8:66:db:14:bb:1e:91:49:11:c3:67:91:
         60:c3:4d:95:72:9c:a3:75:3e:cf:ee:ce:67:ef:3c:50:aa:a9:
         d8:ef:2d:40:e2:f3:a8:23:db:74:f6:74:d7:c2:46:74:ee:9b:
         77:0d:ba:6e:8d:57:a7:9d:55:b5:42:b9:e5:ee:0e:5a:7e:5d:
         60:5d:73:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:59:45 2026 by rpki-client