Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
File:                     1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft (raw, json)
Hash identifier:          lwq23mrPdwDKJJgH7946iYVAMJYgUHEHgFVkTsRdRB8=
Subject key identifier:   4B:13:5D:EF:76:C4:72:F8:11:C1:03:8A:2C:A1:E0:A2:43:9D:28:95
Authority key identifier: F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8
Certificate issuer:       /CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8
Certificate serial:       019E1C472B60523670D5071EA567CE7EA74C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
Manifest number:          1902
Signing time:             Tue 12 May 2026 13:01:26 +0000
Manifest this update:     Tue 12 May 2026 13:01:26 +0000
Manifest next update:     Wed 13 May 2026 13:01:26 +0000
Files and hashes:         1: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl (hash: PV4Uy+hYddb0Razo2WqTC68yprZEm/h7jj/e3AETFBo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:47:2b:60:52:36:70:d5:07:1e:a5:67:ce:7e:a7:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8
        Validity
            Not Before: May 12 13:01:26 2026 GMT
            Not After : May 13 13:01:26 2026 GMT
        Subject: CN=4b135def76c472f811c1038a2ca1e0a2439d2895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:11:29:27:69:1c:7b:da:7a:19:9d:0a:26:bf:
                    27:d2:20:01:fc:50:6f:70:d7:25:77:00:1d:0d:e0:
                    55:45:87:38:2a:95:a4:49:36:32:a0:66:9d:fe:7d:
                    bd:8b:21:82:8f:c0:9c:12:50:bb:54:82:ce:06:c4:
                    f6:cb:a1:9b:88:39:c7:50:3c:6e:f2:b5:32:b0:d8:
                    81:ba:fc:f7:90:4c:b4:6b:31:dd:20:6b:05:75:23:
                    7a:c7:64:1a:e9:ad:4d:ed:9e:10:8e:8c:0b:4d:f2:
                    e9:b2:4d:bf:dd:4f:47:c2:78:e7:58:3f:61:8a:ad:
                    34:46:83:75:51:5f:5a:68:89:5c:45:6e:e1:db:d6:
                    fb:58:11:c2:7b:21:28:99:d8:8f:eb:08:8f:40:98:
                    ae:54:84:1a:7b:ec:a8:98:ab:9e:f6:aa:c8:1e:d4:
                    b1:e9:7a:73:b0:81:5f:fe:80:d4:4e:b7:c4:7f:25:
                    8b:eb:eb:57:1f:64:48:f5:33:e7:16:f8:61:4c:11:
                    4d:07:56:0f:28:4b:f3:18:ed:fa:e7:d5:db:ca:ed:
                    d3:d0:3e:27:32:18:82:76:f2:5d:cf:01:95:51:84:
                    1c:49:fb:5e:83:64:8b:72:04:7c:38:9a:1d:8f:22:
                    76:0c:f4:0e:d7:29:c8:4d:01:cc:18:dc:e8:a1:65:
                    a7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:13:5D:EF:76:C4:72:F8:11:C1:03:8A:2C:A1:E0:A2:43:9D:28:95
            X509v3 Authority Key Identifier:
                keyid:F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:be:bc:3e:15:e1:55:28:72:1e:aa:df:64:da:ce:ac:6a:cd:
         0c:47:b7:a2:9b:87:54:a5:c3:77:78:03:72:70:80:fd:b5:c6:
         67:ee:85:e1:82:2a:c1:c1:27:15:a8:0f:8b:82:11:bf:85:ee:
         fe:b3:c9:83:1e:da:40:b5:8e:d8:56:af:45:a5:d5:61:bf:d4:
         bc:b7:b6:b9:82:f0:ba:6c:79:57:e6:51:06:25:e7:07:76:95:
         d5:63:c5:1d:e9:bd:e4:f8:a1:d1:4c:5a:65:c6:45:0b:e8:16:
         e1:51:59:fa:a2:7e:a1:99:72:c7:da:8b:f9:6d:66:a5:ee:13:
         9a:cc:a7:a8:e7:1e:ae:17:ad:46:cf:78:d0:50:2a:83:86:dd:
         96:75:74:e7:be:8b:87:32:a2:0c:d1:4b:17:fb:a1:7e:0e:34:
         4e:76:80:74:59:84:c8:bd:89:5f:a8:8e:7d:74:39:f0:a8:42:
         cd:0d:68:00:9b:0a:7b:59:7c:6d:a4:e9:10:e2:46:56:c8:fe:
         11:8c:e5:bf:af:c2:cd:62:c8:95:58:ce:1e:19:8f:4a:b5:7a:
         bc:20:dc:a3:de:e3:b8:e7:62:d3:48:a4:69:0f:6f:02:d0:49:
         c5:46:e0:7f:f7:85:cc:ae:8e:8b:ef:d9:a2:4f:40:e8:8d:a0:
         9c:45:eb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:10 2026 by rpki-client