Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
File:                     T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft (raw, json)
Hash identifier:          TCouH7A/7D+61n1JH2k0bK7tSfnDRvjxUxyvD3h26Ko=
Subject key identifier:   43:1E:D3:32:A2:81:68:C7:99:2E:FF:3B:62:A7:E3:03:70:2F:D9:EB
Authority key identifier: 4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29
Certificate issuer:       /CN=4fd6646c93c2974789ecef7b444656ee64161729
Certificate serial:       019E1F7EF1B616668C8D7D5E83C80C96DED6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 04:01:13 +0000
Manifest this update:     Wed 13 May 2026 04:01:13 +0000
Manifest next update:     Thu 14 May 2026 04:01:13 +0000
Files and hashes:         1: T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl (hash: Rzbp6qjNB1HroHenQC7/+WNSB7Wq+j1A6p3qms7i0mg=)
                          2: VCFuIr9pM3EPsu68pVpUibKxyQU.roa (hash: apjsLzO5pIx4dzE8WjhYaxZke8s33ArYirHyx0Ruf9w=)
                          3: XlTxg3kTbgQ4ffELpk85x3UUxbA.roa (hash: hgNyQsC5iaVhcyee4oBmWD68ihN6089j1kYflggiKFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7e:f1:b6:16:66:8c:8d:7d:5e:83:c8:0c:96:de:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fd6646c93c2974789ecef7b444656ee64161729
        Validity
            Not Before: May 13 04:01:13 2026 GMT
            Not After : May 14 04:01:13 2026 GMT
        Subject: CN=431ed332a28168c7992eff3b62a7e303702fd9eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:28:e2:9c:01:9d:d3:a6:b8:0a:68:c6:c6:5c:
                    c2:5d:47:21:82:b0:a4:c5:af:e4:ea:cc:16:ea:06:
                    28:67:30:54:2d:50:72:45:b4:3c:92:78:ab:7d:8b:
                    72:1e:d7:fc:70:27:4f:2f:d4:7a:47:7a:e9:3d:4d:
                    ce:21:64:62:f1:8e:5c:80:cc:9c:34:5d:00:93:6d:
                    84:71:64:34:89:b4:9b:df:0a:68:06:dd:53:74:b9:
                    8c:33:3d:21:e9:5a:f9:e9:f7:80:50:64:00:70:82:
                    f3:fd:c0:ca:7c:fe:13:30:72:c7:e1:37:43:67:b5:
                    c4:c2:a1:b1:79:dd:b9:0d:77:8a:76:17:73:e9:1c:
                    84:1f:31:17:4c:8d:d7:00:6f:13:56:b6:1b:d3:a0:
                    1f:a2:ca:78:31:a4:17:4e:70:17:e4:4b:08:33:be:
                    d5:76:60:a0:b3:b3:90:1c:c5:7a:79:fc:12:38:2a:
                    fe:0f:46:74:e3:02:77:5f:59:c9:88:ec:5f:f7:67:
                    90:87:de:94:ba:a4:5a:48:75:d0:fe:f1:c4:9b:b1:
                    94:07:4e:ed:c6:13:a9:be:67:f7:23:65:0c:97:e7:
                    87:e0:30:e2:61:a8:ab:ab:14:6e:ef:32:a3:1d:7d:
                    fb:91:69:41:6e:c1:37:1b:06:76:0d:d7:92:44:f2:
                    a5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:1E:D3:32:A2:81:68:C7:99:2E:FF:3B:62:A7:E3:03:70:2F:D9:EB
            X509v3 Authority Key Identifier:
                keyid:4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:e9:8e:a1:48:5a:75:8f:df:e7:2c:19:db:a9:76:9e:5c:97:
         1f:b9:f8:b6:e8:4f:8c:48:8f:65:29:6b:30:39:00:05:6b:62:
         a9:bf:4d:00:d0:5f:ba:68:74:3f:82:91:85:01:7d:7f:6d:30:
         fe:13:84:4b:7d:c5:07:61:f9:48:76:dc:dd:c4:52:31:b7:88:
         0a:40:70:b4:16:28:01:7f:43:9f:f4:ec:15:26:b1:c2:03:b1:
         9b:e0:97:36:2e:d0:d2:ec:87:8c:fa:77:cd:2d:26:9c:dc:4d:
         23:d4:eb:16:b4:55:1e:70:c5:bc:50:6d:8b:7d:69:3a:95:ca:
         bf:b4:fe:61:98:c9:b3:d8:26:a0:2a:d8:45:f5:ee:e7:25:24:
         26:82:61:e7:c4:8c:a2:94:b4:75:09:1a:01:8d:36:ae:a3:19:
         f5:e8:c0:36:8d:8e:70:56:65:52:5d:84:da:3e:1c:25:92:5d:
         2a:fd:27:e3:d4:13:2c:d1:e0:ec:63:96:57:a7:06:d3:00:65:
         4a:b2:48:22:a7:c0:9d:73:64:93:50:92:aa:d1:f8:d0:1f:d2:
         ac:45:48:40:5f:4d:24:bc:21:5f:01:f6:b0:8b:04:36:35:83:
         f2:e6:a8:96:e3:78:8c:d2:33:f2:78:f0:1d:4c:f1:9e:2f:4c:
         61:10:73:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:32:06 2026 by rpki-client