Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
File:                     aaUdRFt2erm2YncC5KKzkE0gP3c.mft (raw, json)
Hash identifier:          mftYYiAdEtsnOsevMDTg2SwAtHL1fUEfcmlMmmDGtIo=
Subject key identifier:   76:97:84:6F:7C:D0:55:1F:66:F2:95:CC:D6:91:B1:BC:61:99:AD:38
Authority key identifier: 69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
Certificate issuer:       /CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Certificate serial:       019E1D909114D0D114E309A47EB547037C8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
Manifest number:          1898
Signing time:             Tue 12 May 2026 19:01:14 +0000
Manifest this update:     Tue 12 May 2026 19:01:14 +0000
Manifest next update:     Wed 13 May 2026 19:01:14 +0000
Files and hashes:         1: aaUdRFt2erm2YncC5KKzkE0gP3c.crl (hash: ak6VkIoRS6B5/RIQCWhWG6ibDXqBlrGxaHhFmYFMIaA=)
                          2: hEk7NXMz_9tjphRF_f-2BiYVxl4.roa (hash: YzdcSrHbAL6AdxaXBrwECMdGtQJ8+zIyV5HDkXK31kg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:91:14:d0:d1:14:e3:09:a4:7e:b5:47:03:7c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a51d445b767ab9b6627702e4a2b3904d203f77
        Validity
            Not Before: May 12 19:01:14 2026 GMT
            Not After : May 13 19:01:14 2026 GMT
        Subject: CN=7697846f7cd0551f66f295ccd691b1bc6199ad38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7c:b7:36:36:97:d6:1d:a7:9a:b5:97:41:42:
                    02:71:b9:a4:71:87:cb:91:00:ae:7a:eb:ee:d7:bd:
                    a3:1c:b4:3d:dc:66:e5:31:a4:13:78:6f:29:57:7f:
                    25:c8:71:26:b3:c7:98:7a:07:d0:56:ba:15:76:5d:
                    24:fc:cc:41:6d:c3:f3:5b:19:57:f9:2f:81:20:12:
                    8f:13:b0:d9:cd:1b:5e:1a:54:a6:47:d1:e0:e6:8c:
                    6c:fa:cd:35:ca:8b:82:b4:50:46:fc:d3:6c:90:44:
                    b7:88:89:f6:ad:14:97:a2:4b:da:6b:68:20:64:ac:
                    26:bc:c8:19:21:55:4c:52:22:91:21:99:3e:6a:1b:
                    15:cb:6e:9e:62:e7:ef:31:51:ef:5e:46:21:92:9b:
                    b7:5b:f3:62:8d:bb:80:2f:64:a6:77:e2:c6:ed:e8:
                    eb:4e:df:aa:24:ab:62:bd:0a:0c:7f:cd:22:4c:fc:
                    10:74:32:05:9e:3f:c7:92:1c:13:fc:b9:b5:2d:86:
                    2f:95:18:ac:78:61:5e:af:78:0b:91:cc:b8:98:d8:
                    cd:79:d5:4a:e2:dd:10:b1:11:24:00:6a:42:b5:9d:
                    63:c6:f0:b7:17:85:ae:53:fb:6a:0d:ca:be:d0:ab:
                    98:02:56:6b:6f:e0:64:10:36:08:04:34:7a:5c:fa:
                    c5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:97:84:6F:7C:D0:55:1F:66:F2:95:CC:D6:91:B1:BC:61:99:AD:38
            X509v3 Authority Key Identifier:
                keyid:69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:89:de:18:c5:09:97:8b:6f:cb:ff:c1:02:6b:b5:aa:1a:ca:
         97:3d:d2:2c:e9:5b:49:2a:fd:50:57:48:2b:6e:16:6f:a8:76:
         be:d9:38:8b:6f:c6:40:5b:b7:04:c0:96:8b:f8:10:26:e4:66:
         1d:d3:5c:c3:19:86:c9:bc:a9:4a:36:ab:e7:64:f9:32:01:71:
         25:3e:1a:b3:cf:c1:a4:38:a0:6f:2d:d8:a8:9b:fb:ca:33:83:
         bd:a3:de:2f:30:fa:76:88:24:d7:07:cc:64:9e:ee:08:85:4c:
         69:81:28:8e:09:2d:34:e4:fb:92:d1:75:18:0b:e0:15:7f:ad:
         f3:e3:b2:57:cc:8c:98:c3:33:dd:8f:5e:8e:49:85:6f:b5:aa:
         50:bc:85:73:aa:76:24:f6:5d:29:4e:ad:70:49:73:18:f6:05:
         96:75:f3:26:44:a0:69:69:fb:89:01:a4:f1:cb:d9:80:10:93:
         1c:1c:38:7b:6a:28:fc:8f:41:40:e5:de:02:c7:ee:e9:1f:b8:
         a3:96:9e:29:5d:4b:20:34:f4:34:63:14:d9:20:c3:8a:8f:e5:
         50:80:bf:21:0b:e8:2c:48:9b:e1:2f:04:5a:c8:88:b3:78:a2:
         0e:38:2f:a2:d3:db:11:9f:b6:fe:7a:4d:ac:a4:ba:70:b3:80:
         cb:62:07:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:19:50 2026 by rpki-client