Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
File:                     rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft (raw, json)
Hash identifier:          fqZhCLySRAQqGWXLpKpVMeG4RInE8jAREeGxZYH5Nt0=
Subject key identifier:   87:81:33:A8:D8:02:3A:68:D6:4F:69:CB:D1:F4:05:3F:FB:F3:1C:F2
Authority key identifier: AE:1E:F3:D6:26:A7:54:E4:3D:07:C7:00:D0:51:3C:11:4B:66:0E:F5
Certificate issuer:       /CN=ae1ef3d626a754e43d07c700d0513c114b660ef5
Certificate serial:       019E1EA3644FA3C50ACE3A1B37FEE33BEE00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
Manifest number:          1906
Signing time:             Wed 13 May 2026 00:01:24 +0000
Manifest this update:     Wed 13 May 2026 00:01:24 +0000
Manifest next update:     Thu 14 May 2026 00:01:24 +0000
Files and hashes:         1: csk4BDz5s79i6tCuRhaWetkbfYE.roa (hash: y6UPDjUC5Ue0t7W29lJsgRf1Q1DAQIYmF8ZHDpBKink=)
                          2: rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl (hash: Av1gsK8pgy73RBC5GcP70vU+9y6qwcwn55n06W3VKKg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:64:4f:a3:c5:0a:ce:3a:1b:37:fe:e3:3b:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae1ef3d626a754e43d07c700d0513c114b660ef5
        Validity
            Not Before: May 13 00:01:24 2026 GMT
            Not After : May 14 00:01:24 2026 GMT
        Subject: CN=878133a8d8023a68d64f69cbd1f4053ffbf31cf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:29:51:19:85:a2:00:64:31:42:b1:10:75:e4:
                    ca:38:dd:78:6f:af:01:df:50:e1:c1:80:66:a7:82:
                    8e:0c:1e:5d:1c:47:74:0f:ff:2b:59:8e:d1:78:cf:
                    20:2a:34:c7:ac:23:dc:5c:4b:ea:4c:cb:af:1a:3f:
                    06:d9:48:de:e6:13:1c:36:b0:1c:d5:6e:7e:a5:aa:
                    fc:3b:ba:c8:69:e3:3a:4e:64:f8:45:23:f2:d1:74:
                    b8:3f:6b:85:c0:0c:c6:55:e8:b1:d9:4e:8c:2a:ea:
                    b1:a8:dd:89:2a:a0:0a:8a:6a:a7:bf:e3:15:b2:80:
                    e8:bc:61:8c:2d:ae:b1:75:10:7e:9d:54:c3:f6:d9:
                    eb:7b:64:67:53:85:77:04:d6:2a:fd:1f:ca:87:b4:
                    a9:e5:ef:da:14:ac:3d:f8:a8:53:85:56:a4:87:37:
                    6c:9c:b7:2f:bb:36:06:51:92:b6:b2:9c:1f:59:7a:
                    85:e4:7a:42:15:d7:43:52:b5:8a:03:53:f0:87:b4:
                    18:cd:27:3b:f5:c0:34:20:0d:22:53:45:94:6d:45:
                    30:4a:9b:74:72:74:60:ff:89:0d:45:3e:e1:9c:9a:
                    07:23:b5:4d:01:21:a3:2e:a9:b5:fe:f7:23:18:d9:
                    5d:73:84:19:b1:db:ae:f2:75:1a:3f:0a:ac:f5:b0:
                    67:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:81:33:A8:D8:02:3A:68:D6:4F:69:CB:D1:F4:05:3F:FB:F3:1C:F2
            X509v3 Authority Key Identifier:
                keyid:AE:1E:F3:D6:26:A7:54:E4:3D:07:C7:00:D0:51:3C:11:4B:66:0E:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:bf:3d:30:dd:72:a1:b4:7e:e6:f5:db:0d:73:60:23:ca:4b:
         65:0d:9c:b7:81:41:3c:58:a6:d0:4c:1f:32:77:f7:90:0b:e8:
         2a:8b:21:bb:0e:48:15:d6:f2:bb:88:6f:76:d7:de:b2:ff:94:
         39:07:7f:66:37:6c:6a:dd:56:1b:4b:4d:99:28:07:3b:4f:1f:
         70:88:c0:8f:ea:fb:32:69:5b:28:3d:2d:13:89:b6:87:85:9c:
         1d:b9:0a:28:ae:e6:91:8c:0e:f9:5c:74:0a:fb:b6:88:1a:a7:
         e5:48:36:d8:df:8a:d0:dc:15:7b:cc:2f:ad:b4:d1:88:db:e6:
         a1:8e:2e:6f:e3:d6:9c:a9:27:f5:df:87:e5:9d:13:90:a1:95:
         6e:5e:82:f8:12:eb:82:ed:58:de:70:50:fa:d9:46:11:20:26:
         62:fb:01:03:60:ce:2a:3f:3d:7f:c1:7a:cb:4d:4c:81:63:3e:
         30:12:d9:51:06:44:fd:f0:ba:76:40:3c:cd:1f:5c:d6:88:8d:
         10:7d:fa:ed:4b:d8:1f:ca:21:7a:e2:95:0b:68:73:80:6b:e5:
         d5:30:4b:6a:bb:9e:a8:c1:5f:2e:82:10:1c:bc:1b:7d:e9:4b:
         22:fb:90:7f:be:31:33:61:2f:12:21:0a:f2:4d:ed:de:10:bb:
         d5:ab:ab:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:21:56 2026 by rpki-client