Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft
File:                     AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft (raw, json)
Hash identifier:          vM7HU9z22NAWjPnYVwQWoQBWOIdKBdmD2oESrFbq9qs=
Subject key identifier:   EE:54:CB:30:AD:EB:F8:9B:8E:28:90:B9:6D:48:49:C9:9A:FE:68:A9
Authority key identifier: 01:53:88:51:16:7B:4E:3D:6F:64:D5:37:97:B0:8C:B4:13:71:87:0F
Certificate issuer:       /CN=01538851167b4e3d6f64d53797b08cb41371870f
Certificate serial:       019E1D598A2B04C916DADE30CA59B01C6829
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft
Manifest number:          1906
Signing time:             Tue 12 May 2026 18:01:07 +0000
Manifest this update:     Tue 12 May 2026 18:01:07 +0000
Manifest next update:     Wed 13 May 2026 18:01:07 +0000
Files and hashes:         1: AVOIURZ7Tj1vZNU3l7CMtBNxhw8.crl (hash: /bnU8E6jc5Ezw5oZW0+15tUbseY67u/JUyt511CIhOY=)
                          2: mWE6kT69cqu-PW8JgJR1gCAZ64s.roa (hash: FJjpE6dQyURSUrQm7mC2IcezcL6cJcvz4TAfaMMJ8lE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:8a:2b:04:c9:16:da:de:30:ca:59:b0:1c:68:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01538851167b4e3d6f64d53797b08cb41371870f
        Validity
            Not Before: May 12 18:01:07 2026 GMT
            Not After : May 13 18:01:07 2026 GMT
        Subject: CN=ee54cb30adebf89b8e2890b96d4849c99afe68a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dc:5b:04:8d:0e:3d:19:8a:d5:61:98:bc:27:
                    53:c7:75:3b:36:6e:4d:b0:df:da:5e:b3:80:22:f1:
                    d8:e6:af:d5:4c:ac:85:bb:12:e7:75:e2:12:77:c9:
                    4c:7b:1b:6c:ed:72:fb:d2:46:06:a1:d9:e6:9c:6d:
                    f9:b3:37:c8:b3:33:9b:11:78:26:43:7d:22:67:c7:
                    53:42:2d:97:85:e9:2a:0b:e7:1c:d8:bb:25:e7:21:
                    d9:3a:0a:42:6d:ac:fc:58:01:2b:31:e1:2c:f1:a9:
                    91:3c:d8:f7:26:d6:c3:84:21:11:14:62:0e:b9:58:
                    e8:8e:01:c8:40:e6:b7:e3:79:00:64:50:e2:5f:12:
                    5f:7b:6c:46:ea:e2:0e:40:d8:1d:68:4a:35:6a:dd:
                    9e:2d:f9:ec:4c:09:56:36:0c:3b:f7:4a:ff:d4:43:
                    38:1c:f4:20:a8:a1:57:95:59:c5:c0:fc:85:d1:6c:
                    9e:a5:5b:c9:06:73:0f:65:65:0b:9f:89:42:6b:44:
                    0b:19:a6:34:80:d5:66:85:2c:04:29:c6:fc:21:cc:
                    ed:6d:0d:52:d1:e2:92:04:53:d5:1b:ba:d2:67:3e:
                    fd:85:db:0f:5e:5a:47:e9:25:83:52:ce:c4:10:50:
                    2f:a4:f7:9e:1d:51:69:9f:6d:5c:2a:1d:15:ae:f5:
                    8b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:54:CB:30:AD:EB:F8:9B:8E:28:90:B9:6D:48:49:C9:9A:FE:68:A9
            X509v3 Authority Key Identifier:
                keyid:01:53:88:51:16:7B:4E:3D:6F:64:D5:37:97:B0:8C:B4:13:71:87:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:13:ba:27:13:e2:c9:fc:70:de:ca:6a:8b:b9:d1:11:2f:bd:
         e9:f8:ec:e8:cd:9f:ba:c9:41:4c:b8:27:3c:82:18:7a:1a:32:
         47:2c:86:45:3c:c1:21:e0:55:e8:31:78:ab:5f:0e:4d:6e:d6:
         1e:fd:4e:6c:66:13:d0:66:0a:51:0f:c6:d3:17:ec:37:e9:a4:
         37:22:b7:87:c8:80:52:eb:08:37:17:27:24:7c:34:62:0d:a5:
         3e:96:6e:fa:f2:bc:63:9e:e4:84:fd:6d:3a:38:6d:10:f6:ff:
         f6:09:2e:61:1a:ff:5b:60:8e:1e:e5:31:14:73:f1:da:44:e9:
         bf:2f:18:01:57:26:c8:64:81:47:7a:0d:70:f3:bd:82:10:cf:
         12:99:b7:da:19:ef:b6:5a:5a:01:08:f9:f9:0b:e0:11:36:4c:
         f1:a1:d7:8f:75:7f:cd:e6:99:09:cb:75:d8:42:68:1e:dd:20:
         4f:08:83:46:4c:e6:1a:ce:2f:e0:c6:5d:26:c2:74:a0:3a:99:
         09:80:71:a7:05:b7:29:1d:e3:51:6a:9c:df:28:94:2e:b4:07:
         81:de:ac:d5:d9:e7:35:05:a0:10:1f:54:5b:1a:b6:6c:ba:7a:
         df:70:72:63:a5:c3:10:d1:84:2a:8c:21:10:b8:e1:31:9b:29:
         6f:4e:e4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:14:59 2026 by rpki-client