Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
File:                     4McMwtIdqMLqZIFTT0jaSVqoS90.mft (raw, json)
Hash identifier:          EK159JeLNvhZK+d+ACZmJyZB56MIXOZA7SYz3jRL9V0=
Subject key identifier:   54:37:C6:AC:95:6E:18:49:11:B2:49:20:10:95:A6:EB:63:12:C0:55
Authority key identifier: E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD
Certificate issuer:       /CN=e0c70cc2d21da8c2ea6481534f48da495aa84bdd
Certificate serial:       019E1EA2E35C6F38DA39700172A112BB91D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
Manifest number:          1906
Signing time:             Wed 13 May 2026 00:00:51 +0000
Manifest this update:     Wed 13 May 2026 00:00:51 +0000
Manifest next update:     Thu 14 May 2026 00:00:51 +0000
Files and hashes:         1: 4McMwtIdqMLqZIFTT0jaSVqoS90.crl (hash: xpquA3QXjhufP1aageygtrx8+xTJTsw12j6Xu7pgqJI=)
                          2: Rn2NWJkYlmshYFgoPzIuXMYWVGc.roa (hash: JJzFZmd7A4HTxXMIGqGZ67CiVP4Sj1WJIj0x7HOLtqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:e3:5c:6f:38:da:39:70:01:72:a1:12:bb:91:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0c70cc2d21da8c2ea6481534f48da495aa84bdd
        Validity
            Not Before: May 13 00:00:51 2026 GMT
            Not After : May 14 00:00:51 2026 GMT
        Subject: CN=5437c6ac956e184911b249201095a6eb6312c055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:87:96:a3:05:24:a4:32:68:a2:c7:c3:97:60:
                    cc:8e:5b:c5:22:c7:7e:98:09:dc:be:7e:6b:13:52:
                    4f:1a:a5:0d:79:ad:02:37:cd:e6:6b:f6:7e:cd:84:
                    4e:b6:64:d9:37:cb:5b:38:3b:c6:c6:63:5d:f5:44:
                    34:bd:b9:85:a9:52:f9:8e:cc:15:9c:d0:f6:87:ad:
                    4d:73:0b:c2:0d:fb:07:f1:8b:ff:de:7f:55:4b:d1:
                    15:58:f3:8f:3f:a3:9a:c4:d6:56:5f:3f:d9:44:21:
                    3a:df:85:99:26:ca:45:a6:36:d1:a6:51:ef:fa:d1:
                    d5:f0:5b:8b:9d:53:87:76:04:33:02:b3:bb:0d:67:
                    51:c5:b1:ad:c7:70:e4:07:2f:54:bc:7a:0d:e9:67:
                    f7:97:bd:74:4d:8e:cb:c2:64:5e:6f:5d:7d:b8:9d:
                    25:50:f2:24:a6:46:49:27:48:d5:5b:e4:17:1c:83:
                    90:a3:10:ff:9a:4c:67:2f:43:34:f4:80:63:af:ad:
                    02:8a:bb:c1:2b:83:cf:92:25:0f:86:7c:71:d3:d9:
                    46:58:a0:e7:a4:65:ec:a9:f8:ae:24:d6:50:9a:26:
                    32:87:eb:e5:32:b1:37:e7:36:56:cc:69:33:23:33:
                    57:96:e1:ea:ce:5d:d2:fb:42:02:e9:ce:de:b1:49:
                    11:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:37:C6:AC:95:6E:18:49:11:B2:49:20:10:95:A6:EB:63:12:C0:55
            X509v3 Authority Key Identifier:
                keyid:E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:5f:9a:12:20:dd:ac:d7:12:5b:93:06:31:58:03:af:e8:67:
         20:d8:81:00:aa:1f:3e:49:03:3d:ca:f0:7c:1c:b1:b4:9e:19:
         31:78:c3:2c:3b:91:22:45:be:a2:23:2a:b2:28:9b:f4:99:d4:
         3e:3c:c1:52:9a:83:4a:49:7c:c0:09:e4:0e:59:53:be:fb:99:
         85:63:4c:b8:e7:51:c3:b2:e0:35:48:cc:4b:26:6b:bb:74:57:
         f5:b6:12:88:84:85:9a:46:f9:20:35:af:61:23:0e:3d:d8:1c:
         5f:58:8a:c1:2c:8e:c7:1e:a1:45:34:18:01:c2:fe:5c:67:42:
         c1:78:4e:ba:83:2d:48:e0:50:90:56:90:06:88:43:85:95:fe:
         9d:df:57:ae:0f:29:06:83:aa:f9:60:a4:e9:06:14:b0:8f:57:
         99:10:d0:31:17:d5:62:29:a9:86:c4:b3:bd:69:97:fe:ea:f6:
         e2:79:42:62:36:2f:38:18:83:25:c1:8b:d0:ea:4e:84:b6:f3:
         fa:6c:03:1a:bb:b3:49:5e:f0:c8:d1:e0:ef:2d:a0:f5:3b:e8:
         5d:e7:d7:01:09:ee:a5:9c:8d:f2:69:a9:49:12:96:ca:df:9a:
         50:0d:37:e4:14:fb:81:a9:dd:9a:32:bb:4e:b0:03:66:63:db:
         aa:ed:58:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:07:45 2026 by rpki-client