Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
File:                     aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft (raw, json)
Hash identifier:          gqLAzUSfEuFzw1pntT4VcDxz2Ds7TPnjWYYqyexRNaY=
Subject key identifier:   1E:2F:F0:83:1D:38:D9:C6:AA:71:1C:11:95:93:C7:E3:0F:07:7A:B0
Authority key identifier: 68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
Certificate issuer:       /CN=6810aa89239242dacc9d03e3af22d4e87a783414
Certificate serial:       019E1CB45FCB96084E48463F6990F9A66769
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
Manifest number:          1913
Signing time:             Tue 12 May 2026 15:00:43 +0000
Manifest this update:     Tue 12 May 2026 15:00:43 +0000
Manifest next update:     Wed 13 May 2026 15:00:43 +0000
Files and hashes:         1: 2HO1B3cqChy0lUy13_3eiaaOjKM.roa (hash: sT83X6MdLHSVmAwErarq+oTjKlq0n9DkDOqaOUwsh6E=)
                          2: MmpupjL6-9W8vuY4zo9Q3tDq3h0.roa (hash: Gp09DHYtUEXqlrazWWuduVblpwpQzAgZjFy3uZZQXYw=)
                          3: SFvSBBGYgzySNxIeXKtpNZOhU9Y.asa (hash: xMj44N87N0PalBE7ni1eUf0bLqqLwE4xJyf40B4J5dg=)
                          4: YpGTo60NWnpgdlG7w4tgcECBdPE.roa (hash: LBHrRnZ9fBq8b4XBwaEXwXJ7Lftr/08mjC4QqEFM79U=)
                          5: aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl (hash: 3yy4LF//mjoel1ljOjHtAy6K6jQKQZCN0b6UNp/nBjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:5f:cb:96:08:4e:48:46:3f:69:90:f9:a6:67:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6810aa89239242dacc9d03e3af22d4e87a783414
        Validity
            Not Before: May 12 15:00:43 2026 GMT
            Not After : May 13 15:00:43 2026 GMT
        Subject: CN=1e2ff0831d38d9c6aa711c119593c7e30f077ab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1f:d0:d1:49:3e:0a:ac:f1:b4:8b:d8:9b:53:
                    4e:b8:89:f7:2b:e8:e9:46:8a:bb:b1:ef:01:86:c8:
                    6b:12:f6:4c:37:f8:c2:3c:02:b4:5f:56:b5:18:c9:
                    d9:dc:77:a3:03:b6:af:db:8c:1b:0b:9a:2b:9e:20:
                    22:d5:86:3c:a7:e5:0a:38:cb:7c:78:10:fb:d6:76:
                    de:fe:77:00:e2:44:ff:6b:fd:c8:c5:42:07:c3:4f:
                    61:25:dc:72:10:a3:18:12:fb:00:da:d1:1a:0a:c3:
                    78:f7:08:fd:13:2e:fa:aa:20:13:07:08:c3:0c:cd:
                    21:9d:95:dd:c0:51:f3:91:0e:f9:e0:37:a2:73:35:
                    52:4c:1b:4d:88:7c:1c:53:a6:35:99:86:c0:3d:b8:
                    71:d5:28:76:1f:71:25:23:24:03:1b:61:c4:50:3e:
                    e9:b0:2a:06:70:ed:0d:5c:ef:ea:7f:f0:f8:92:ed:
                    0e:e2:75:4e:af:6e:d3:a3:47:8f:91:45:49:02:0d:
                    c0:2f:80:44:1d:84:46:ff:2c:4b:e0:ff:df:30:07:
                    99:72:cf:1c:7e:b0:62:57:50:30:27:4c:32:1a:37:
                    f9:5e:47:fc:67:73:9b:b0:cc:71:6e:fc:58:02:29:
                    6e:ca:42:93:51:04:82:b1:fd:b5:7e:14:b4:45:3e:
                    32:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2F:F0:83:1D:38:D9:C6:AA:71:1C:11:95:93:C7:E3:0F:07:7A:B0
            X509v3 Authority Key Identifier:
                keyid:68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:0a:b4:a5:ca:c1:d5:ef:2c:35:d2:5b:a3:55:d4:3b:a2:a5:
         96:84:b2:85:b3:c1:a2:e3:38:be:3a:79:8d:36:e5:41:c9:0f:
         96:76:91:37:51:19:8b:52:a7:14:98:e7:d6:d8:3e:3d:19:97:
         21:43:7b:a1:27:5b:9e:4e:f9:0e:60:2a:bf:89:bf:4d:d6:4f:
         cd:29:a7:72:22:07:a6:f4:7f:f7:12:54:61:7c:fc:d9:2d:1c:
         c8:64:6b:7d:14:18:7c:46:46:a8:6f:de:4b:d3:e4:63:5a:00:
         a9:b8:62:cf:31:f2:a1:e7:43:34:de:35:49:20:43:5e:e4:f7:
         55:41:d6:b1:57:f2:16:10:31:ef:e0:ed:14:44:b6:46:20:84:
         fc:8e:9c:47:c9:2a:94:38:ec:de:f7:5b:58:d5:27:43:d5:14:
         b4:cd:cd:21:3b:fc:7f:c1:57:c0:5b:fb:02:c5:4a:a2:6b:fd:
         cf:07:e7:77:16:d1:3a:f1:df:c2:fb:80:a3:fb:dc:23:8a:ee:
         2a:d6:df:ec:8c:b4:3c:11:7e:24:0c:33:76:01:48:fc:dd:2c:
         82:09:70:72:98:04:46:ee:3c:6b:5c:f2:db:72:3d:47:b5:13:
         07:b7:d4:44:52:b6:cd:e6:62:a0:84:10:9a:5d:73:70:7a:c3:
         9c:79:4e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:44:25 2026 by rpki-client