Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
File:                     N_9VuVdDqRW3k9ct5xrJbOYZipc.mft (raw, json)
Hash identifier:          8FUTJoO5a6TycfsFxW88QAkpV/GcYEbk2sO91A00pRM=
Subject key identifier:   41:FF:7B:0B:8E:27:D9:68:EE:E2:5A:5D:22:70:49:69:46:45:ED:E7
Authority key identifier: 37:FF:55:B9:57:43:A9:15:B7:93:D7:2D:E7:1A:C9:6C:E6:19:8A:97
Certificate issuer:       /CN=37ff55b95743a915b793d72de71ac96ce6198a97
Certificate serial:       019E1F7EC52AAB36A624BFBBD9605CA0A367
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
Manifest number:          1898
Signing time:             Wed 13 May 2026 04:01:02 +0000
Manifest this update:     Wed 13 May 2026 04:01:02 +0000
Manifest next update:     Thu 14 May 2026 04:01:02 +0000
Files and hashes:         1: Kjv5ZqAKlQ-u26S6yymzYFVvtRA.roa (hash: sOevRBDCcbgFby2Me1gEDOPKrFjBhZ/Oz4Fc5/D3wtA=)
                          2: N_9VuVdDqRW3k9ct5xrJbOYZipc.crl (hash: 2qHvH2agVGGwp4juyoOohiV1/pmMQnjLRi6VpzDNAOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7e:c5:2a:ab:36:a6:24:bf:bb:d9:60:5c:a0:a3:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37ff55b95743a915b793d72de71ac96ce6198a97
        Validity
            Not Before: May 13 04:01:02 2026 GMT
            Not After : May 14 04:01:02 2026 GMT
        Subject: CN=41ff7b0b8e27d968eee25a5d227049694645ede7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3a:1d:5c:58:b9:88:d9:54:08:ed:18:3b:7d:
                    08:05:5e:b3:fa:af:55:78:07:a5:4c:d2:50:99:80:
                    73:16:cc:9e:8b:e7:41:4b:6e:8c:15:e3:ac:cf:5a:
                    7e:ab:a8:b5:a3:4c:09:eb:42:5a:10:6a:ce:ae:5e:
                    1d:fa:28:6e:69:35:c4:9e:70:2f:56:b6:7a:6e:18:
                    d9:7c:4f:f4:d3:58:4a:59:38:c4:89:66:9f:00:55:
                    de:be:59:7e:d1:ea:a0:0a:bf:6e:43:52:1d:da:9d:
                    2d:d1:8d:55:52:fc:31:de:88:53:a4:2b:3b:2c:db:
                    3e:ef:b9:48:ec:dd:b8:d5:95:42:16:e2:fe:60:05:
                    4c:e8:7e:11:e1:8d:e8:46:5a:bc:3c:18:b1:42:e0:
                    50:db:ae:53:40:90:38:09:f5:a4:2f:e4:7e:d3:16:
                    ca:3f:d7:6b:ab:f2:6a:d1:2c:98:56:3a:e5:cb:24:
                    6a:0f:4a:87:76:b4:fe:12:c9:ef:8c:a7:c7:5a:19:
                    07:d1:73:99:8c:8e:a2:af:0e:32:80:c8:09:da:57:
                    49:86:f4:66:84:71:82:b0:af:8d:d1:73:84:9c:a4:
                    8a:53:1f:78:22:9d:d1:61:49:4d:a3:29:26:65:70:
                    04:90:05:3d:5a:b3:7a:85:f3:1f:4b:5c:34:3e:8f:
                    75:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:FF:7B:0B:8E:27:D9:68:EE:E2:5A:5D:22:70:49:69:46:45:ED:E7
            X509v3 Authority Key Identifier:
                keyid:37:FF:55:B9:57:43:A9:15:B7:93:D7:2D:E7:1A:C9:6C:E6:19:8A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:50:b9:3d:eb:5d:f5:7d:87:df:0a:95:76:f4:69:87:3e:bb:
         5e:30:f7:2a:0b:8d:89:56:60:8e:c9:f6:22:98:3b:0d:1a:55:
         69:fb:25:99:20:b1:4c:3f:86:2d:3b:09:f5:57:63:9b:b3:84:
         58:89:c9:75:e2:f2:8e:60:cb:5a:4f:1e:13:91:e2:af:ac:27:
         69:50:c6:15:8f:f3:de:e9:ed:6b:1d:74:9d:9f:f8:83:5c:a8:
         b6:4b:14:64:a7:94:1e:d0:0c:1e:07:03:bc:98:66:3e:1b:14:
         26:a6:9f:e2:9c:03:94:8f:ab:f8:7a:08:d1:07:32:c4:c3:97:
         66:1b:16:59:25:16:d3:fb:9b:71:87:8d:74:9a:3c:fa:63:71:
         55:e9:b0:dc:9d:8b:5a:00:f1:1c:83:2d:bc:47:aa:d0:ff:4f:
         3f:be:2a:12:5e:21:9e:f4:f9:fa:a2:2f:76:6b:55:92:a3:4a:
         cd:f9:61:92:94:3b:81:d9:ec:bb:f8:52:d6:49:cc:87:5b:3e:
         f3:e2:77:4b:2e:f0:55:96:2a:3f:35:54:6c:d9:1c:97:ae:1e:
         6f:56:fe:b5:14:dc:3f:24:ea:0e:19:cc:a0:71:fd:46:3d:14:
         72:50:1f:61:30:7e:31:36:31:a1:4a:77:0d:cf:c6:c8:b8:93:
         73:e3:93:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:49:49 2026 by rpki-client