Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
File:                     7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft (raw, json)
Hash identifier:          IsF9nGK12irK+lU0jO4ebsuuofgMTkfYkoatoPbaujs=
Subject key identifier:   4D:41:0C:C4:5B:37:2B:D4:A9:75:20:DE:E6:60:BC:12:BD:13:82:08
Authority key identifier: EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
Certificate issuer:       /CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Certificate serial:       019E1D22C3D58E98DE37906225E062B75086
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
Manifest number:          1906
Signing time:             Tue 12 May 2026 17:01:18 +0000
Manifest this update:     Tue 12 May 2026 17:01:18 +0000
Manifest next update:     Wed 13 May 2026 17:01:18 +0000
Files and hashes:         1: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl (hash: dNPwU0Cq53AO/qF1fs3bnBCPrIdsfR6KGBN9i20vq38=)
                          2: jI0W3FXepCGwUQYooUrSqFApgnI.roa (hash: ywNZ9Hr6Ek5jRSdgINiD2gJAFEBiWAjLS61c7FwJ6mA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 17:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:c3:d5:8e:98:de:37:90:62:25:e0:62:b7:50:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecd6bdacc521edca4c076048da86fed5dcd61220
        Validity
            Not Before: May 12 17:01:18 2026 GMT
            Not After : May 13 17:01:18 2026 GMT
        Subject: CN=4d410cc45b372bd4a97520dee660bc12bd138208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:99:46:3a:54:8d:79:e6:0a:f0:97:3e:2d:59:
                    38:28:df:21:ff:d4:9d:11:44:fd:34:04:69:eb:35:
                    10:c9:89:a8:12:88:ce:48:15:95:dd:19:26:db:94:
                    1b:f8:51:e1:3a:01:38:5b:69:76:35:63:8f:c0:24:
                    c4:47:f7:8e:3e:74:37:50:6b:0f:bc:8a:b3:b9:06:
                    ce:98:1d:71:fc:d4:cc:74:ee:93:5c:ad:c9:58:79:
                    f6:44:9a:f0:31:ea:94:76:62:83:2c:7d:93:6f:f2:
                    b2:4a:d4:2c:a7:c0:c8:09:5f:60:89:76:d0:fb:35:
                    22:4d:83:ee:2f:5c:13:8a:d5:91:11:10:ca:8d:81:
                    03:10:fe:ba:60:51:23:17:17:96:9e:86:c1:91:e2:
                    f5:a8:9c:b3:44:47:de:0f:25:ff:02:df:2c:73:2e:
                    d5:f8:de:a5:ba:6e:bb:35:70:40:89:b7:0e:a4:5c:
                    0d:4e:23:8c:a4:6f:45:f7:43:30:b6:fa:a7:29:89:
                    6b:04:e0:e3:5d:8e:d3:5f:ee:d7:c8:8d:35:14:27:
                    68:5d:aa:50:1d:f6:b3:ad:a4:a4:c6:83:50:cc:08:
                    2d:1e:bc:bd:bd:6d:fd:8e:14:72:e2:68:3c:aa:98:
                    f5:e0:c4:c5:d9:fc:65:61:3f:81:6e:b3:b1:7a:5c:
                    63:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:41:0C:C4:5B:37:2B:D4:A9:75:20:DE:E6:60:BC:12:BD:13:82:08
            X509v3 Authority Key Identifier:
                keyid:EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:a4:81:8d:01:2e:51:46:12:60:d3:7c:b5:af:35:6c:1d:5a:
         a2:74:89:e5:84:24:17:25:a5:8f:4a:d9:a0:cc:16:43:49:a2:
         90:62:89:8b:17:0a:1e:5f:02:99:9e:22:f8:db:8c:c7:aa:7e:
         9d:7a:22:57:1d:6f:c1:06:01:60:20:96:b6:e2:3c:38:43:a5:
         90:29:07:4e:ea:9a:41:a7:aa:23:13:d7:c7:ad:c9:d4:15:d8:
         b1:74:4f:8c:f0:3a:02:13:1a:c0:5d:6f:08:60:25:e2:42:c3:
         39:13:ad:fb:a6:30:a6:ee:b8:e7:07:fd:76:24:e8:e2:2e:9b:
         86:bc:95:af:99:2a:84:b8:51:12:43:e7:c1:3e:73:98:e3:1e:
         13:42:5d:d5:2b:db:57:ac:45:ac:4b:11:38:8d:34:f5:2d:99:
         2e:37:7c:03:b5:79:1b:c4:90:fc:ce:3b:64:ae:77:ec:40:92:
         9c:af:b7:44:03:3b:23:55:41:f5:e5:f9:6b:9f:0d:31:ba:1c:
         58:38:dc:95:0b:44:d0:49:d4:03:60:9c:10:e6:17:29:75:f3:
         a0:46:b1:f0:30:23:34:89:92:43:54:fb:37:b2:e3:32:90:68:
         eb:d6:34:83:e8:81:b5:11:06:be:37:d0:63:be:2c:62:85:50:
         53:86:9c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:39:57 2026 by rpki-client