Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
File:                     RFJjMnSx2IapJ1f2UhnC51RuzfU.mft (raw, json)
Hash identifier:          D+4V4Yi8jSrLL3rUlXZdLvz8bDueGzEHLem22JALuZw=
Subject key identifier:   9F:EC:03:36:B2:5E:92:01:27:9A:47:FF:CD:99:AA:93:48:FB:57:0D
Authority key identifier: 44:52:63:32:74:B1:D8:86:A9:27:57:F6:52:19:C2:E7:54:6E:CD:F5
Certificate issuer:       /CN=4452633274b1d886a92757f65219c2e7546ecdf5
Certificate serial:       019E205A40001356C3B395A35396434AD6D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
Manifest number:          1899
Signing time:             Wed 13 May 2026 08:00:45 +0000
Manifest this update:     Wed 13 May 2026 08:00:45 +0000
Manifest next update:     Thu 14 May 2026 08:00:45 +0000
Files and hashes:         1: RFJjMnSx2IapJ1f2UhnC51RuzfU.crl (hash: dsz53xzbYNL5sUxbHshQpuVecEA0NDFJLL4bpdWrDec=)
                          2: eNko5h0Tp_p7b7ugEBiQkhXOA20.roa (hash: OK0LXbnfUa5IYm60HKsaC15u0Y3K/9dXchk7SJSUYf0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:5a:40:00:13:56:c3:b3:95:a3:53:96:43:4a:d6:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4452633274b1d886a92757f65219c2e7546ecdf5
        Validity
            Not Before: May 13 08:00:45 2026 GMT
            Not After : May 14 08:00:45 2026 GMT
        Subject: CN=9fec0336b25e9201279a47ffcd99aa9348fb570d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:76:e6:0a:e1:5f:7b:b4:82:d0:ea:99:e3:9c:
                    f8:c9:41:7f:c0:f0:2f:73:81:55:5e:96:dd:23:3c:
                    9c:85:e4:d7:a7:60:35:5a:c6:68:53:1d:2b:79:b8:
                    c4:66:f1:f5:39:b9:f3:8a:2f:29:16:62:d0:0e:c8:
                    82:75:93:85:d2:92:f3:21:ea:90:7a:b1:55:91:13:
                    24:94:e8:ae:fc:b2:d4:42:7a:42:e4:ad:1f:b7:63:
                    5e:2c:59:53:a1:67:4b:27:64:0c:1a:06:d0:ca:7e:
                    72:ef:ad:9e:cf:fe:2c:7c:72:56:83:e0:fc:8b:5b:
                    1f:b2:ca:a1:31:ee:48:a3:dd:2e:e0:32:60:ff:f1:
                    93:5e:ea:1e:48:ce:0a:ff:1a:57:44:67:ab:b4:5c:
                    aa:a6:44:4a:d9:c3:59:23:d3:f9:fa:6a:7e:03:58:
                    56:1f:f7:71:46:db:70:1f:01:da:73:33:ce:f5:ba:
                    98:07:c9:e9:69:11:07:22:6a:ea:8c:33:dc:f7:fe:
                    f3:58:ef:87:3a:fc:3a:1b:b4:01:bc:ec:c6:f5:c5:
                    e2:9c:05:b7:0a:f5:3f:f8:ed:6b:a2:b2:31:d3:e6:
                    d9:64:60:05:00:d7:1a:73:8e:96:f5:59:93:6e:0e:
                    30:e2:60:b5:88:f9:40:c9:92:f0:37:28:13:b8:d0:
                    5e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:EC:03:36:B2:5E:92:01:27:9A:47:FF:CD:99:AA:93:48:FB:57:0D
            X509v3 Authority Key Identifier:
                keyid:44:52:63:32:74:B1:D8:86:A9:27:57:F6:52:19:C2:E7:54:6E:CD:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:21:3b:44:86:e5:89:b0:c0:73:4d:03:fe:44:72:df:c5:00:
         94:28:8e:31:0c:9c:58:ed:30:85:ad:4d:96:de:09:48:a6:c2:
         30:9a:ab:f7:82:7f:51:ec:b1:9f:aa:e8:d9:ea:7d:06:15:d8:
         4f:14:58:15:06:be:8b:5e:54:a3:d4:a0:f1:53:bb:e3:c1:d8:
         8b:03:e7:0d:3e:13:b0:f9:9d:b3:9b:a8:b5:db:8b:fd:b1:91:
         64:43:8f:11:96:aa:56:90:eb:b2:f7:f8:6d:dc:0a:b1:51:3b:
         67:70:24:28:72:8c:79:cc:1b:5b:01:b6:52:3b:ec:f0:51:b2:
         05:cd:14:a1:53:c7:db:c0:e3:3d:7e:5c:58:e1:82:db:ca:16:
         63:49:a5:2d:f2:fd:6d:7d:f4:18:d4:94:b1:43:89:60:53:40:
         d7:53:d2:6b:cc:68:ff:c0:86:ad:da:79:9e:5b:c6:32:ea:85:
         5d:62:2a:6d:2c:c2:cd:0d:24:19:80:98:05:70:81:de:ab:a4:
         0c:a4:b2:81:10:fc:6d:6f:ec:50:e2:7f:59:f3:35:47:72:a6:
         84:7e:08:d8:56:3a:d4:32:00:02:a7:6d:d6:78:54:98:b2:33:
         6d:78:c7:7f:f0:24:e7:02:65:7d:05:74:a1:c4:a8:11:c3:2a:
         3d:36:b9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:20:42 2026 by rpki-client