Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
File:                     5c949fM57nd9p0khCpbs7Za38uc.mft (raw, json)
Hash identifier:          7q1opALO4uG/OB9MiB6GUXFuRJ6nYW50cR6GHiy8yQQ=
Subject key identifier:   EE:73:AB:2A:52:78:2C:81:1A:58:66:C1:6F:14:7D:65:CA:1B:86:8D
Authority key identifier: E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
Certificate issuer:       /CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Certificate serial:       019E1D2323654ABB2A8B247BF0403192FBAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 17:01:42 +0000
Manifest this update:     Tue 12 May 2026 17:01:42 +0000
Manifest next update:     Wed 13 May 2026 17:01:42 +0000
Files and hashes:         1: 3MgBeBik8U9z4rsKZn1-j_MeR28.roa (hash: Gwe+UNs1EWrBxp855Kdh43FiD7zP/RqH6MQJ/cKKklc=)
                          2: 5c949fM57nd9p0khCpbs7Za38uc.crl (hash: /kgnLqbWUMaUCWMmiMKo0xKvu47Xh9fKAWGYmBr5g5w=)
                          3: Xyw_X4GzbwozPV7bmdhreFXRSgQ.roa (hash: bf34zgz/96MaGcKXCeZJRm7nCxKcToEP6ozueo2hqgk=)
                          4: w0ihDXGfTZCgkEenDCg532cQiaA.roa (hash: FD0rcoCr63ClMKaKqYqlIdIfUuQ7pv+xZCDIgLRthGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 17:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:23:23:65:4a:bb:2a:8b:24:7b:f0:40:31:92:fb:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
        Validity
            Not Before: May 12 17:01:42 2026 GMT
            Not After : May 13 17:01:42 2026 GMT
        Subject: CN=ee73ab2a52782c811a5866c16f147d65ca1b868d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cc:ec:c4:e8:86:86:f1:a6:03:7d:c7:0f:70:
                    f7:9f:bb:58:9d:41:5d:4b:0c:da:e4:cd:e9:fc:97:
                    85:0f:9c:03:d5:55:3e:7f:ce:db:9c:4b:87:4f:f8:
                    4d:f0:fd:70:1f:ce:c0:3e:67:65:4b:56:bc:33:fd:
                    0b:72:22:19:6e:05:1a:e2:24:87:9b:dd:7c:1b:78:
                    91:55:56:8f:65:e8:e8:45:aa:ea:6f:68:e8:d6:ce:
                    f4:fd:51:58:22:0c:75:34:1c:c4:34:54:69:7f:83:
                    9a:35:fd:52:e1:d0:a7:3c:ca:c2:b2:65:a1:0b:e7:
                    9a:63:7c:3e:f1:3f:1a:98:32:37:31:90:ae:9e:4a:
                    5c:a6:3e:af:53:3a:4a:bf:28:78:77:b2:ea:47:67:
                    9e:2c:53:85:53:b3:36:13:6d:77:93:57:ea:42:0c:
                    db:75:6d:6b:71:7c:3d:fa:0f:01:50:e7:e4:3b:d2:
                    b3:1c:96:ea:9c:e2:e5:52:62:0d:0b:4d:65:29:8b:
                    f6:f7:ca:f6:5d:94:55:7c:49:61:46:e9:a0:8e:6e:
                    a4:fc:f1:ae:f8:bb:e4:c7:0b:54:2e:cd:f3:47:4e:
                    b3:7c:4c:56:d6:04:12:bd:22:51:a6:5e:c1:7a:a9:
                    49:82:e3:05:de:22:f7:b7:c2:20:c9:fb:51:10:7b:
                    bf:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:73:AB:2A:52:78:2C:81:1A:58:66:C1:6F:14:7D:65:CA:1B:86:8D
            X509v3 Authority Key Identifier:
                keyid:E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:a7:ff:a7:22:50:6e:47:53:6a:10:a5:a2:2a:87:eb:d3:28:
         63:a0:ca:45:38:1b:5e:b8:dc:ff:d3:fe:c4:5d:85:9b:79:39:
         04:00:f6:c5:08:03:ed:0a:2e:bb:71:5c:40:a6:3d:9d:0a:1b:
         42:d9:94:87:bb:ef:78:f6:b9:b6:a2:4f:5b:35:0d:f1:15:af:
         94:ab:a6:ab:dc:41:53:88:d5:e7:61:bb:35:2a:25:6f:58:01:
         13:36:a7:d2:95:4b:35:ce:fb:d4:68:49:89:fa:20:84:d4:d4:
         c7:af:f0:e2:37:80:2c:0d:dc:4a:79:8d:25:20:b7:1d:92:1d:
         e7:e5:d6:80:60:42:fe:49:09:b7:20:2c:f4:e4:34:43:5f:f5:
         38:c9:9c:e6:10:c2:13:ce:2f:02:53:a9:d9:aa:70:8a:b4:3c:
         f4:a7:23:d0:25:24:56:5d:39:70:86:36:db:53:86:9e:7a:73:
         f0:4d:d2:f6:8b:93:9b:9b:f5:fd:4d:6d:da:d4:87:dc:c1:82:
         62:46:2f:f1:d4:59:d0:56:15:fb:72:15:55:f3:eb:1a:f5:f2:
         9b:f1:1c:04:d1:03:d7:e9:10:23:25:ec:ee:17:47:44:82:6c:
         b7:ea:4e:50:d6:cb:88:7a:dc:ec:b6:9e:23:ed:d9:0f:cd:ad:
         f2:22:6b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:36:00 2026 by rpki-client