Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.mft
File:                     wPvVh2YT7cVuD13kaMzl6yiF_yk.mft (raw, json)
Hash identifier:          YF9hpdfM5xPJD+ry2dHxSdPHxoRxYegzb921c5BT4fs=
Subject key identifier:   89:C2:FA:B8:5B:FF:CF:08:65:E2:08:21:CD:C6:26:D2:C8:F5:7F:05
Authority key identifier: C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29
Certificate issuer:       /CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
Certificate serial:       019E1F11379615FDF4EB4E0340ACB937A92D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.mft
Manifest number:          1911
Signing time:             Wed 13 May 2026 02:01:22 +0000
Manifest this update:     Wed 13 May 2026 02:01:22 +0000
Manifest next update:     Thu 14 May 2026 02:01:22 +0000
Files and hashes:         1: Bv5Sg8vgi9S842H6dRuR7sJxzko.roa (hash: hT9sbrvQRiXid7sYPnl4Iixs+zdMa4hm1hg6rDtrIYs=)
                          2: K6nvFDqRGh8xVM7IrF0Rd6Raqmo.roa (hash: EVwo0E7SIOBx5iGAFKfj/k4qRw0//D9TaPWIiThqtao=)
                          3: axRaMfkBmO7VzbCGyjkhx1P2A-8.roa (hash: sc0Yj3PBpLZ4CbPFA/VIugOR8JNz2sSyXRFn+nL0m+g=)
                          4: c8rdVYuNpflJD29KauvVYvS5wQA.roa (hash: bC9GRMHN9BrtnveTDOEwyMbzEqZzFN4CkCTMBFjErAc=)
                          5: wPvVh2YT7cVuD13kaMzl6yiF_yk.crl (hash: CkmyTfeZ6li11s0TZchyEFHU8/u8GKZ6t9oq5rbWNfU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:37:96:15:fd:f4:eb:4e:03:40:ac:b9:37:a9:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
        Validity
            Not Before: May 13 02:01:22 2026 GMT
            Not After : May 14 02:01:22 2026 GMT
        Subject: CN=89c2fab85bffcf0865e20821cdc626d2c8f57f05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3a:34:ff:e7:7f:49:ef:13:09:5d:e8:54:da:
                    52:0b:b7:fa:de:ef:5a:a4:a2:32:8e:38:b2:42:98:
                    9b:67:0b:ae:ba:09:56:53:a1:12:f1:02:8d:16:35:
                    31:be:24:ab:c1:66:ea:e0:39:1f:19:74:88:c4:8e:
                    7e:1d:76:e0:cc:a6:68:2d:e6:ac:de:ce:7d:e1:19:
                    e5:b8:70:ea:2f:f4:33:31:d4:65:9d:98:53:42:cf:
                    4d:b6:07:16:1c:b6:79:d3:19:a6:d1:fe:da:37:2c:
                    53:7d:3b:b9:3a:46:07:67:8d:91:65:12:4a:3c:ef:
                    d1:dd:f2:c3:a7:99:cb:59:c7:a6:e3:01:10:97:c6:
                    34:27:3d:8d:f5:ee:5c:0f:a9:8e:ec:59:47:56:34:
                    1d:0d:ba:4e:3c:79:b2:4a:a9:b1:3c:35:80:d0:26:
                    00:86:a4:1f:df:ce:7e:37:c4:7a:39:c7:c7:9d:b8:
                    d6:be:d7:e0:53:2a:a2:ca:85:4b:a1:5f:6e:8a:e6:
                    b7:75:7e:e0:8b:27:4e:b5:8a:a2:ca:46:7d:37:5a:
                    03:a5:7a:b9:73:11:cc:c7:63:d6:f5:75:98:17:b4:
                    65:38:3b:66:ea:3d:7d:4a:d5:eb:6a:73:4c:b1:34:
                    86:61:27:dd:ce:af:8b:88:b2:fe:e9:2a:8e:10:04:
                    80:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:C2:FA:B8:5B:FF:CF:08:65:E2:08:21:CD:C6:26:D2:C8:F5:7F:05
            X509v3 Authority Key Identifier:
                keyid:C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:a7:13:64:dd:d9:74:35:0a:a2:bd:54:12:c9:89:3e:da:6f:
         28:ab:af:05:8a:fe:30:20:4a:b6:95:c9:2d:c8:0a:a8:2d:b9:
         38:46:1c:de:6d:c4:ab:43:f2:18:26:68:30:d5:91:66:b2:51:
         da:9c:e5:6f:a0:c7:53:e6:d3:df:4f:11:07:1c:77:7b:61:b6:
         8b:4f:03:c4:e4:64:d0:0e:0c:19:f5:4a:11:05:8c:50:70:9e:
         cc:64:3a:42:17:a9:a3:aa:26:5c:ce:bb:32:66:4a:22:79:48:
         e3:16:76:9f:00:a5:89:bd:7a:6f:8e:03:bf:7b:19:e3:66:1c:
         85:aa:4f:5a:1f:5e:df:0e:bd:8b:cd:52:a6:74:d4:5f:cd:6b:
         99:3f:93:1d:aa:97:9c:85:b8:f1:38:0b:40:d3:d3:98:15:fd:
         d0:c5:e4:1b:dd:ea:bf:97:4d:f8:ba:d0:bf:37:55:ef:8e:54:
         aa:5a:f2:d0:7a:7a:32:db:25:ac:44:1a:a0:13:4d:c1:ee:64:
         88:6d:8f:fd:f2:b7:be:59:7c:79:9f:35:16:0e:00:bf:2e:5a:
         bb:99:57:7b:8f:46:3e:31:10:90:cd:ec:b6:3d:fe:c5:b8:68:
         c8:c1:ca:e9:72:7c:22:22:bd:14:cc:51:ab:63:be:a4:e3:6d:
         9e:18:78:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:04:35 2026 by rpki-client