Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
File:                     2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft (raw, json)
Hash identifier:          6hp8jBXrndmiOCyvec6+kLieivXmou41fvpfX0eYeIE=
Subject key identifier:   81:A4:56:70:F6:D3:9E:87:E3:00:F5:4D:59:E4:D0:03:94:26:45:03
Authority key identifier: D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68
Certificate issuer:       /CN=d8073d06b58652f849fa8bcf3cec6b950909bd68
Certificate serial:       019E1F47DA55BBCFFC98E2C359BAC9F5E7C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 03:01:03 +0000
Manifest this update:     Wed 13 May 2026 03:01:03 +0000
Manifest next update:     Thu 14 May 2026 03:01:03 +0000
Files and hashes:         1: 2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl (hash: G0SWI64RdhAQGfZqRF7S8zgeo0A3VzqoqVhYcTFWSSo=)
                          2: LpFRmX9PzrWkSCAE9MBkhoB4NC0.roa (hash: O5h6RKwcek/boNWUKWdfTylprmmWoB0fVIyV7iyo7Aw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:da:55:bb:cf:fc:98:e2:c3:59:ba:c9:f5:e7:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8073d06b58652f849fa8bcf3cec6b950909bd68
        Validity
            Not Before: May 13 03:01:03 2026 GMT
            Not After : May 14 03:01:03 2026 GMT
        Subject: CN=81a45670f6d39e87e300f54d59e4d00394264503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:50:63:98:8e:be:91:bc:52:73:3d:44:c7:5c:
                    f4:34:d0:68:49:01:77:53:21:4a:63:b8:aa:62:71:
                    85:04:2b:79:27:7a:fb:78:0a:03:08:3e:01:d8:7e:
                    c1:67:83:86:02:a7:5a:0a:7b:8f:d6:ff:a1:4d:b9:
                    e2:ba:9c:94:3c:70:60:18:0a:51:65:1a:df:00:74:
                    b3:75:79:a7:c6:06:da:00:66:6b:8f:10:0b:d2:eb:
                    99:10:89:d6:a2:23:33:98:e8:cf:19:f4:5b:17:ef:
                    81:7f:b5:37:e0:9d:d0:66:d4:51:df:1d:22:df:d7:
                    07:ab:0a:d4:c7:a7:8b:7f:1b:b4:b4:33:60:0b:78:
                    11:ed:7b:87:92:73:e5:47:f0:b8:02:8b:b5:5f:e8:
                    c4:0d:94:9e:5c:bd:6f:33:22:ee:a9:d4:ec:4a:8f:
                    87:6c:1d:e3:9c:e2:47:33:06:0f:f3:3e:4c:dd:18:
                    8c:d0:d7:82:97:5e:de:66:f2:fb:48:04:25:39:22:
                    f9:0f:80:14:97:6c:c6:bf:f5:19:75:67:69:b9:68:
                    65:5e:fd:2b:f4:e4:1e:70:23:e5:35:1e:c2:02:a3:
                    3f:e0:7c:77:9d:52:63:ab:47:ff:d8:15:e5:b5:0a:
                    12:9c:b4:d2:09:e2:0f:06:ee:ab:0e:32:bc:49:6e:
                    35:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A4:56:70:F6:D3:9E:87:E3:00:F5:4D:59:E4:D0:03:94:26:45:03
            X509v3 Authority Key Identifier:
                keyid:D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:32:26:e0:fc:2f:cc:af:4f:14:89:95:90:56:2c:8e:e1:c9:
         d1:8b:7f:b3:ce:e2:9a:8c:61:6f:54:c5:3c:4c:45:e3:05:78:
         0d:f8:ef:27:29:c8:c5:e3:95:e0:fe:c3:14:87:74:34:98:9d:
         63:10:0a:ed:a9:30:35:ee:da:9f:44:92:74:eb:95:11:23:f6:
         64:d1:73:c9:4d:69:b3:f1:ea:88:5b:00:60:7b:82:c7:a5:c2:
         88:4f:be:01:1b:cc:3e:2a:90:d3:8e:5d:54:24:51:7a:87:13:
         34:0b:02:eb:13:87:17:7f:9f:a1:7b:c0:a7:8b:ba:32:b8:dd:
         ad:e2:7f:9b:cd:ff:f9:b4:5d:5d:d7:6d:85:3f:bb:3d:74:f3:
         72:d1:48:05:c3:1a:27:11:fa:ba:c5:f0:28:0d:a2:b8:54:dc:
         af:5d:98:ff:db:b4:59:74:d8:4c:1d:9c:bd:51:9c:1a:04:23:
         8c:de:95:de:bf:24:61:85:f4:ed:44:1e:f4:ee:e6:76:01:14:
         d7:3c:9c:10:47:e5:2c:9e:7b:66:48:2c:3b:1f:9f:08:7b:db:
         26:55:7d:21:b2:68:d9:e6:c3:4e:b6:7f:e4:c2:27:75:98:d8:
         d2:d0:01:81:2f:aa:77:97:6a:a9:00:43:24:13:78:b8:91:0d:
         d0:c8:fe:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:21:39 2026 by rpki-client