Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft
File:                     _m27LD-YIyjgdJUUeRzrwuDqn4g.mft (raw, json)
Hash identifier:          WIIBJ3pVCZwwvJEzSBAT+P09BHH5T+HTWFcJYy9Uc1U=
Subject key identifier:   83:66:C1:CB:79:BA:D6:3B:B2:0B:18:8A:78:6B:BE:B0:00:6C:F3:C5
Authority key identifier: FE:6D:BB:2C:3F:98:23:28:E0:74:95:14:79:1C:EB:C2:E0:EA:9F:88
Certificate issuer:       /CN=fe6dbb2c3f982328e0749514791cebc2e0ea9f88
Certificate serial:       019E1FB5936B7F6A3DD5FA0108CB67067A72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft
Manifest number:          1906
Signing time:             Wed 13 May 2026 05:00:53 +0000
Manifest this update:     Wed 13 May 2026 05:00:53 +0000
Manifest next update:     Thu 14 May 2026 05:00:53 +0000
Files and hashes:         1: Gbz-BgEMYk_EZ_37nQq9nikSMCM.roa (hash: yU2DLGFjN9TCcYSlsrT9XWj7qaKv71819e5tIEo7sAw=)
                          2: _m27LD-YIyjgdJUUeRzrwuDqn4g.crl (hash: WtAPUZLdusrpwVNExrk7zW+Ue6t4Nxeh/VNO7hecuzY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 05:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:93:6b:7f:6a:3d:d5:fa:01:08:cb:67:06:7a:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe6dbb2c3f982328e0749514791cebc2e0ea9f88
        Validity
            Not Before: May 13 05:00:53 2026 GMT
            Not After : May 14 05:00:53 2026 GMT
        Subject: CN=8366c1cb79bad63bb20b188a786bbeb0006cf3c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:92:e6:b2:fd:fc:0a:f9:14:93:67:9e:6e:8e:
                    e2:54:03:84:80:42:83:91:33:da:8e:27:fe:4d:d5:
                    a1:7b:a7:29:a3:89:80:5b:f9:69:ec:3c:75:b2:d5:
                    97:25:bb:69:60:51:6b:f0:7a:1e:37:87:1c:f4:7c:
                    33:6f:41:c5:de:df:40:8a:3a:f3:12:0e:2e:bf:09:
                    98:91:50:f0:7d:db:c0:79:d8:9c:87:af:c2:29:78:
                    0e:24:f9:05:7c:19:74:43:15:bd:96:df:78:de:7e:
                    4b:5f:2d:d0:01:ea:10:c1:25:61:ce:cd:01:b1:16:
                    4c:7d:c1:61:18:34:af:2f:f5:73:1d:72:cf:bb:3c:
                    72:32:e4:e9:ec:f2:20:eb:44:d5:df:4f:e9:30:2c:
                    bb:58:98:75:d2:09:ee:a8:73:a2:f5:f3:72:8e:0e:
                    4e:26:b4:12:63:ad:9a:b6:8a:0b:1e:ff:08:47:79:
                    3e:cc:d7:c9:c9:db:67:e5:91:21:53:95:68:e9:b3:
                    73:cc:df:51:52:af:e8:f9:94:08:d1:2b:40:bb:05:
                    7a:97:95:e4:c6:0c:21:a2:7b:77:0b:74:db:0d:cb:
                    c1:2b:62:2e:4f:1e:a8:07:3f:86:fb:5e:28:27:35:
                    85:c4:35:9d:19:e5:72:84:53:98:92:43:50:d7:fd:
                    d8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:66:C1:CB:79:BA:D6:3B:B2:0B:18:8A:78:6B:BE:B0:00:6C:F3:C5
            X509v3 Authority Key Identifier:
                keyid:FE:6D:BB:2C:3F:98:23:28:E0:74:95:14:79:1C:EB:C2:E0:EA:9F:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:13:21:5b:3b:7a:47:56:d1:02:d2:dd:12:22:5a:b7:18:d8:
         78:c8:84:88:60:91:eb:39:7a:0b:e1:0c:0c:22:72:b7:23:54:
         96:82:0f:a1:06:02:4a:e4:26:be:2d:1c:c0:24:a2:96:e1:2e:
         32:5a:76:c4:4d:6d:64:27:09:98:9c:1d:1d:08:8a:f1:6b:b6:
         b0:86:e2:ff:21:f3:a3:d9:d9:e7:dc:59:b4:c5:a4:7a:3b:17:
         a2:d8:74:be:51:b1:09:10:70:d5:72:96:29:da:f9:ed:05:2b:
         20:66:67:7b:7b:3f:b6:9f:30:92:0e:cb:04:b4:f3:eb:b2:c6:
         21:3b:50:ba:e0:87:4d:5d:98:e7:5a:23:44:bd:f3:f8:91:0b:
         43:49:48:06:3f:b2:ab:1e:d0:26:98:6f:f7:36:ab:ef:ea:60:
         3a:01:68:74:52:67:1e:c7:08:e9:10:ae:e0:2d:4e:85:4d:3d:
         1c:64:81:8d:71:32:c4:c6:c4:e0:bb:83:43:1c:ee:4f:f4:c2:
         f2:38:4b:d3:03:d0:70:b9:b6:6c:3f:cd:fb:1e:3f:d7:41:ab:
         54:26:4b:47:13:8d:7d:25:45:96:13:e4:c7:83:c8:5c:2a:70:
         a8:fa:8d:ef:a4:fd:21:6f:1a:75:c0:3f:f3:7b:e8:07:83:18:
         88:40:92:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:11:46 2026 by rpki-client