Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
File:                     RMDyoqVgB-TEXMxx59oJKGEwWyA.mft (raw, json)
Hash identifier:          V11ZyYcqabL7y7ArmBW59FoVZg6YfYQ8Qt8gwSz9lRE=
Subject key identifier:   43:F9:F9:15:EF:4F:A4:EC:72:95:B8:49:E9:3B:8D:FD:03:06:54:D4
Authority key identifier: 44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20
Certificate issuer:       /CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
Certificate serial:       019E1D59229084F436ADACE5B180D4D884D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 18:00:41 +0000
Manifest this update:     Tue 12 May 2026 18:00:41 +0000
Manifest next update:     Wed 13 May 2026 18:00:41 +0000
Files and hashes:         1: QdPFDtWVxkEJpznnKF6tITle6G8.roa (hash: DNgnhPj30PZlfK71mnwNTLe3HEwOKQYeLOXwSPHiQp0=)
                          2: Qtm2y6O9fQOxDLh4r9HUduXRJPk.roa (hash: EeZqlsTqzdCbFC/CM71VpRuG30gKSOjHa90sXicLvG4=)
                          3: RMDyoqVgB-TEXMxx59oJKGEwWyA.crl (hash: k8uVFw/x4x7diSRxWzMD4hJULW26pwgZqjflseoG0dI=)
                          4: qkZbad248G4D0mXEkOMEjzYi1Ec.roa (hash: fqso9UJIp15vhELsb8vv3FftzXgRXh9zaLx7ly4FaQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:22:90:84:f4:36:ad:ac:e5:b1:80:d4:d8:84:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
        Validity
            Not Before: May 12 18:00:41 2026 GMT
            Not After : May 13 18:00:41 2026 GMT
        Subject: CN=43f9f915ef4fa4ec7295b849e93b8dfd030654d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:67:59:5a:8c:6d:e9:2c:04:8a:82:d5:33:60:
                    63:16:b2:74:6b:cf:34:9f:14:f0:04:09:b3:59:58:
                    66:90:21:53:4c:33:a2:21:d1:46:d1:f8:d0:aa:6a:
                    c7:d7:6b:91:4f:3b:68:07:cb:a3:13:16:25:00:cf:
                    dd:69:f5:1a:1c:94:cd:64:1f:ef:b6:79:93:5b:27:
                    16:b5:17:df:76:70:94:cc:ac:fe:17:cf:6c:28:53:
                    7b:93:cd:bd:8b:3c:53:dc:3c:46:83:35:5a:93:b8:
                    b5:da:be:d4:80:a6:9f:de:c3:42:25:31:7d:52:a2:
                    2c:f2:41:78:bd:eb:d9:75:d0:25:5d:89:90:74:4c:
                    77:92:2e:03:94:05:ce:fb:33:28:4a:15:52:94:0e:
                    9a:cd:72:26:94:fe:37:5f:0a:75:f4:44:e1:fc:ad:
                    ce:81:7f:33:05:8e:74:cc:ce:fb:30:91:0a:7a:be:
                    80:47:81:df:7f:d7:0f:15:62:06:f4:83:1f:64:71:
                    19:cc:de:f8:e5:f9:ba:8c:04:1c:bc:ee:7c:90:ec:
                    25:7d:79:38:95:08:7f:44:08:ff:73:34:75:57:31:
                    ef:25:ee:d6:8c:bd:dd:4d:10:d6:47:61:ef:57:ef:
                    f0:aa:7e:8c:89:27:7d:7a:01:3a:90:97:7a:be:af:
                    45:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F9:F9:15:EF:4F:A4:EC:72:95:B8:49:E9:3B:8D:FD:03:06:54:D4
            X509v3 Authority Key Identifier:
                keyid:44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:a7:f0:43:96:1d:0b:23:2a:46:6b:7f:1e:06:d6:a0:97:32:
         75:3b:b8:b3:55:60:83:e7:4a:0c:c8:2e:19:68:01:e1:35:12:
         f3:27:e4:58:eb:7a:99:e7:6b:f2:bb:e2:da:7a:56:1d:8b:11:
         6f:2f:b2:27:49:65:66:12:a3:00:00:db:71:3d:49:40:ad:77:
         ed:81:50:96:c9:07:5f:34:fb:1d:68:49:d5:56:e8:9c:0b:25:
         e9:96:97:16:83:c4:47:ee:e6:f5:d3:aa:c9:47:3a:d7:ae:cd:
         78:cc:02:af:16:04:ae:74:01:c0:54:fe:2c:57:ce:2b:23:47:
         dc:7a:77:29:77:4b:0a:f3:25:cf:b4:2d:ea:06:86:d7:3b:fd:
         42:fc:7b:57:ea:e3:56:84:d7:ca:76:77:9f:c3:a7:17:d6:4b:
         46:63:23:af:6b:59:f7:1f:b3:88:07:4c:ea:29:19:96:b8:b3:
         bd:60:5e:f8:56:ea:23:f3:34:d3:30:71:09:db:f8:f9:e9:57:
         7a:71:42:38:5e:a4:ac:34:2e:1b:98:05:77:b4:9b:bc:79:3e:
         bc:44:7c:a7:db:8c:bb:ac:9d:ba:b3:97:de:5a:3a:a7:be:53:
         79:6e:b7:28:87:06:02:0f:9d:4f:6d:73:de:4e:ad:d7:8e:52:
         6e:bb:2f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:34:17 2026 by rpki-client