Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
File:                     _a1h2OjBq9qFlpMOIfGCEaUXaB8.mft (raw, json)
Hash identifier:          zjvdQAUjJTqkkE1J2tkmrtSPNHgFbg5d9jHkULszeBk=
Subject key identifier:   CD:E3:6A:DE:63:ED:56:EF:12:62:AA:86:90:6E:A9:69:B0:AA:3B:56
Authority key identifier: FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
Certificate issuer:       /CN=fdad61d8e8c1abda8596930e21f18211a517681f
Certificate serial:       019E1D9116A6A48D321F5074226517DB10DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
Manifest number:          1838
Signing time:             Tue 12 May 2026 19:01:48 +0000
Manifest this update:     Tue 12 May 2026 19:01:48 +0000
Manifest next update:     Wed 13 May 2026 19:01:48 +0000
Files and hashes:         1: O3VQfD378Glka9TjOO3TvAaw_nk.roa (hash: Ybj9UWECximKsng5EBE3xYs2FwI/4KcnIfFjWhvui64=)
                          2: WhbbTrjO4d6D8laBPplxh84WYVc.roa (hash: PR+nKFHG16xdl1/3mckLmj9yFgXPMBwN+ado5X/wpjk=)
                          3: _a1h2OjBq9qFlpMOIfGCEaUXaB8.crl (hash: 7/6nqV3CVVuAPVDOwKYNely4IjTRyLGBbHcNw64GOUU=)
                          4: trtlnARNU9GgYjNsg0NOVlqMz0s.roa (hash: oIMDX6qf+vcOR+FsuwuvFIF1QJtf1WzL/kP1bXEC8h0=)
                          5: vhyi7zeX1M10Du6qUzreQ6LwBNQ.asa (hash: +Y5yMjWW8tVQD13wU5Y5PDbZdKBIW8wWdWt2aTYL2Ag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:91:16:a6:a4:8d:32:1f:50:74:22:65:17:db:10:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdad61d8e8c1abda8596930e21f18211a517681f
        Validity
            Not Before: May 12 19:01:48 2026 GMT
            Not After : May 13 19:01:48 2026 GMT
        Subject: CN=cde36ade63ed56ef1262aa86906ea969b0aa3b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cc:fd:d5:f8:31:83:13:36:9f:9a:66:2e:a4:
                    93:09:71:9d:f1:23:9a:b8:19:f2:ee:7b:ff:d8:aa:
                    b5:2a:83:29:85:6b:b4:b7:84:32:1a:14:40:d2:91:
                    52:1d:06:1c:ee:d5:76:21:a9:c2:69:4b:f6:82:c6:
                    78:a8:d4:f9:34:e8:67:1a:60:b3:4c:19:2c:d0:dd:
                    cb:29:a3:e7:4b:dc:b1:a3:a3:26:86:eb:75:be:75:
                    46:99:c1:6b:01:ff:5a:93:f9:bb:4b:dc:d1:86:93:
                    03:fb:81:33:96:43:27:92:12:cf:0a:77:23:5d:c4:
                    4b:97:b9:c9:30:29:2c:c5:60:cb:ef:49:7b:6b:9f:
                    a7:bc:c5:6d:7b:af:15:54:cf:3b:dc:ef:36:4d:69:
                    88:43:8d:03:16:33:a3:fe:5e:1c:34:b1:76:bf:da:
                    cc:f4:51:00:a1:c0:4f:66:d7:10:c3:4d:34:56:d2:
                    ee:6d:28:6c:90:80:d5:ab:7c:ee:65:f7:89:c4:ef:
                    09:c6:04:32:3b:10:27:c6:0b:da:c7:cd:16:a3:ff:
                    fe:ed:62:97:90:d3:e7:39:e1:5c:89:20:5c:6e:09:
                    86:35:37:fd:76:f7:7b:e0:82:74:54:ac:72:f3:fd:
                    4f:52:e8:8b:a8:11:d7:f4:62:6b:0e:b8:fc:45:e4:
                    b5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E3:6A:DE:63:ED:56:EF:12:62:AA:86:90:6E:A9:69:B0:AA:3B:56
            X509v3 Authority Key Identifier:
                keyid:FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:d2:5c:fe:5b:bb:04:d3:46:f5:12:c7:ab:0b:d5:49:ae:dd:
         d2:22:ce:89:cc:00:37:af:99:07:d6:9d:b8:0d:e0:c2:c6:d7:
         a7:a1:2f:29:f9:48:d6:39:fd:09:e0:b8:7e:3e:37:7f:fc:e6:
         2a:10:0b:18:9c:0b:e9:9f:20:a2:5d:d3:85:29:ed:2d:b7:38:
         06:e3:ef:93:fc:0b:a7:dd:78:ee:41:5c:ff:ce:8a:7d:6f:a4:
         48:2c:03:93:a0:24:59:09:59:60:45:50:ab:7a:51:f5:a5:dc:
         4b:d8:9a:4e:6c:14:31:7e:34:70:61:65:f1:84:5a:dc:c2:1a:
         85:2b:b5:86:c4:76:b4:24:a8:1b:40:55:d1:f4:ad:a4:1a:cb:
         43:75:54:b5:61:c6:1f:e1:89:22:73:88:70:8d:2d:c8:fe:5b:
         92:60:be:62:24:d6:3c:4a:30:76:28:b9:5e:61:9d:ab:bc:cd:
         4e:0f:12:54:cc:34:84:94:97:70:79:8f:be:bd:c2:cf:f9:01:
         e5:cb:c1:84:a4:99:3b:2c:d6:2d:c5:95:57:94:5a:d4:7b:72:
         ab:a1:5c:d1:6e:37:00:25:99:b2:9f:21:e9:41:ba:b0:2a:b1:
         73:6f:a4:ad:6b:ec:9f:51:81:1f:5e:63:e0:7a:c9:69:61:aa:
         a0:1c:2d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:23:44 2026 by rpki-client