Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
File:                     WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft (raw, json)
Hash identifier:          A4D7yakuoMyEFgX2bjL06hn4aMTlKvdgjPj9J1kBawY=
Subject key identifier:   D6:3B:9C:20:BD:70:E2:B2:1A:22:7A:DD:FC:53:0D:50:59:41:78:92
Authority key identifier: 59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42
Certificate issuer:       /CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42
Certificate serial:       019E1EA357470A15CEEBA808D31C1C27E237
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 00:01:21 +0000
Manifest this update:     Wed 13 May 2026 00:01:21 +0000
Manifest next update:     Thu 14 May 2026 00:01:21 +0000
Files and hashes:         1: WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl (hash: ar2guaER7I+m7a9nUjeMSggCVujIFdqdxpr6JE0AqOs=)
                          2: mFWoM2Jw-ryruWtnjaLb3-NL4aM.roa (hash: Fj1kXt+CryXtIK5HQJEsrCU21FrZJ0TBdWzjGcYN2Eg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:57:47:0a:15:ce:eb:a8:08:d3:1c:1c:27:e2:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42
        Validity
            Not Before: May 13 00:01:21 2026 GMT
            Not After : May 14 00:01:21 2026 GMT
        Subject: CN=d63b9c20bd70e2b21a227addfc530d5059417892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b0:c1:ca:fd:66:11:4b:5c:14:51:d4:a1:86:
                    86:34:07:74:23:83:cb:bc:fc:5d:79:7d:36:c7:00:
                    04:0a:d0:89:93:d8:b0:44:e6:0b:e2:43:3a:07:be:
                    2d:ae:6a:83:7b:4f:23:19:0a:c0:c3:b9:20:8a:4a:
                    82:0e:8a:7e:32:e3:b9:6b:d4:19:c7:fa:a6:09:a7:
                    4e:26:23:63:09:af:40:04:50:c5:bc:59:b5:48:29:
                    0f:fa:bf:19:9e:74:db:56:91:33:b1:92:a4:f0:85:
                    0c:17:87:f5:d5:4e:ac:bb:73:7a:cd:c0:27:bf:f3:
                    ac:7b:f3:52:04:ef:41:e9:9a:01:19:78:19:c0:c3:
                    ad:f7:e5:e7:7d:05:c0:61:32:74:aa:ab:e5:6c:a9:
                    b2:fe:2a:6b:01:bd:f6:8d:8d:03:87:af:91:b6:69:
                    dc:53:c5:5e:f0:1d:a7:1a:3b:f0:d6:11:83:91:58:
                    7f:8b:03:56:14:00:e6:e7:ba:09:bd:dc:db:0c:85:
                    96:d3:4b:f5:93:7c:00:ba:7e:f2:f0:45:74:c0:fd:
                    40:e3:e0:0c:f5:9e:4d:8f:51:cc:87:a7:9b:07:eb:
                    82:ea:a1:69:14:73:71:38:6f:e9:18:3c:56:bb:5a:
                    aa:47:13:4e:d3:24:cf:84:2f:56:9c:6a:37:50:66:
                    d7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3B:9C:20:BD:70:E2:B2:1A:22:7A:DD:FC:53:0D:50:59:41:78:92
            X509v3 Authority Key Identifier:
                keyid:59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:84:6b:cc:4c:3a:31:2c:bb:f5:8d:8d:48:d9:4a:ee:9b:ad:
         f3:c8:a1:6f:ee:eb:29:a2:93:6c:95:a4:4e:15:42:be:4e:f0:
         bf:28:0a:15:ec:cc:39:11:a7:34:f9:6a:38:48:02:f8:d0:92:
         b8:b5:9d:8b:16:26:61:7c:36:0a:6c:ff:bd:cd:73:07:08:89:
         91:e1:5e:b4:01:19:8b:b3:85:8e:f9:63:fe:86:b9:b0:9e:2b:
         59:a9:8d:e9:a2:be:b8:9d:b3:e4:77:cc:cb:06:f3:c8:58:90:
         57:33:6c:60:5c:ff:59:e4:3f:96:ba:46:d5:cb:3b:20:17:4f:
         90:0c:71:cc:40:94:5e:ec:6f:95:6b:23:49:24:1e:e2:70:12:
         c1:b6:39:9e:59:f7:7d:a6:cf:3e:18:44:8b:8c:c5:a9:6d:eb:
         44:01:46:d4:bc:5d:3f:10:b5:5e:f1:9f:6a:a0:33:76:7c:7e:
         95:74:0d:c6:70:15:fe:a6:03:e1:36:2d:5e:2a:55:89:c6:4f:
         e1:4a:d8:3a:4d:a1:20:70:9a:23:db:29:55:bd:a0:59:20:d5:
         4a:c3:4c:05:12:89:79:da:e9:f4:30:99:5a:93:49:c7:66:2b:
         1a:1e:99:03:9c:f6:36:c1:e6:c3:85:71:81:d6:6b:10:7e:55:
         4d:6f:b7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:19:13 2026 by rpki-client