Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
File:                     2yXQP8GPL0LNpQOGneGU_YzCGqk.mft (raw, json)
Hash identifier:          9idjhotS0baI8Op12vZJXp4b8j5pUA0N3Jyb+eirWRA=
Subject key identifier:   21:5D:81:7D:A4:6D:43:FC:B2:23:03:4B:B9:3B:FC:03:8A:5B:D2:97
Authority key identifier: DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9
Certificate issuer:       /CN=db25d03fc18f2f42cda503869de194fd8cc21aa9
Certificate serial:       019E1D2294CC3BBAAFB8B611F66A47A9B962
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 17:01:05 +0000
Manifest this update:     Tue 12 May 2026 17:01:05 +0000
Manifest next update:     Wed 13 May 2026 17:01:05 +0000
Files and hashes:         1: 2yXQP8GPL0LNpQOGneGU_YzCGqk.crl (hash: P92BDXC3BdJbs3BQ7jNjkZr84xzO8HlgIkX26+SHjBY=)
                          2: r2Z0mF-ld7ejJHAo1JnNl0agdIw.roa (hash: fBq7MnnqEMG6p2yBeqITh+XzH9thl2M1F8ElvslUqpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:94:cc:3b:ba:af:b8:b6:11:f6:6a:47:a9:b9:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db25d03fc18f2f42cda503869de194fd8cc21aa9
        Validity
            Not Before: May 12 17:01:05 2026 GMT
            Not After : May 13 17:01:05 2026 GMT
        Subject: CN=215d817da46d43fcb223034bb93bfc038a5bd297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:6a:71:55:7a:03:64:07:9c:ce:84:c5:4e:32:
                    57:12:54:ba:3e:e8:a6:5f:d3:66:4e:a0:20:5e:86:
                    34:b1:44:01:79:f3:43:f2:7c:bd:d0:e9:18:9f:d3:
                    0b:72:8e:de:6a:1b:c8:80:79:1e:93:43:ed:45:ad:
                    bf:58:75:c7:7f:6f:00:83:12:65:65:47:f0:9e:73:
                    d0:e5:94:6b:ca:3d:df:f0:59:d8:ff:35:99:8c:22:
                    3a:2b:92:55:3f:2c:d9:99:d8:cd:26:c0:d1:95:06:
                    38:a6:97:16:6c:48:b3:c6:7a:fd:e2:68:79:e4:4a:
                    48:39:db:8b:e7:fd:b0:3e:08:a3:15:67:85:d0:4f:
                    77:88:01:1b:c6:e6:e2:95:30:b4:ba:78:f6:d3:35:
                    4a:d6:6d:0b:04:2d:e1:4d:fe:0a:97:96:9f:a6:26:
                    6f:34:ea:0a:1e:58:21:5d:69:86:9c:e5:dc:0b:cc:
                    ab:d4:2c:aa:cb:dd:e2:9e:f5:e5:6f:d9:4a:97:ec:
                    93:81:16:f1:d9:8f:79:ed:50:d9:60:49:81:8e:38:
                    ae:e0:1d:41:41:b2:72:19:ee:86:5b:ff:1f:f9:a9:
                    1b:44:e9:7c:da:4d:ca:e8:2e:50:1d:a5:5f:a0:5a:
                    52:86:db:d3:cc:d5:9a:81:79:ba:8e:8e:0c:12:bb:
                    89:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:5D:81:7D:A4:6D:43:FC:B2:23:03:4B:B9:3B:FC:03:8A:5B:D2:97
            X509v3 Authority Key Identifier:
                keyid:DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:de:9c:2d:15:b0:60:f8:7c:b6:21:d9:77:33:27:dc:29:48:
         f3:62:4f:73:0d:27:7f:a6:fb:48:0c:a5:c8:8a:63:87:4a:b6:
         32:06:76:a8:8b:d4:e6:13:29:9e:12:1d:ca:d6:31:66:68:b7:
         6d:cd:cb:f6:f0:4d:50:5f:d6:6a:1b:7d:0a:d4:72:25:82:0b:
         19:2d:29:87:ee:7f:9b:7d:17:60:e9:40:00:33:a9:dc:1f:7d:
         38:6d:09:a1:54:36:48:c7:39:34:e2:e7:45:bb:23:6a:17:53:
         de:2c:53:02:33:cb:24:15:eb:38:81:6a:c5:8b:13:2b:4d:a7:
         47:18:87:6f:88:8e:10:82:ca:57:02:b2:da:f6:2e:d3:87:5c:
         8d:a3:85:4d:d8:61:5f:15:a4:cc:88:5c:0e:6c:85:31:75:8f:
         b9:3e:0d:a3:0c:49:31:4b:f1:54:8f:cc:fd:14:f0:ee:4d:98:
         94:63:52:f5:bb:ca:49:65:52:fd:69:d7:53:bd:2f:40:fa:f1:
         eb:f6:af:68:ac:59:c9:c3:fd:f2:b1:1e:97:a5:ff:89:32:1c:
         0e:e5:08:91:c5:ab:16:8b:0f:59:bf:ac:40:1d:3c:4c:46:44:
         40:14:a3:5e:73:5c:da:15:d7:d1:31:cd:94:4d:2c:f2:37:80:
         88:c0:28:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:43:39 2026 by rpki-client