Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
File:                     rGzIYDNT1zLkscy6fqygts7kxM8.mft (raw, json)
Hash identifier:          QiUcdmlF5ydexS6O4T1iq/mVVyO3GMsk+kHd7tC58bA=
Subject key identifier:   A3:68:EA:0A:C2:E2:D5:63:84:E6:51:B3:59:65:EF:1F:FE:DE:E5:C6
Authority key identifier: AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF
Certificate issuer:       /CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf
Certificate serial:       019E1D903030C761905A4574D43B37D541BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 19:00:49 +0000
Manifest this update:     Tue 12 May 2026 19:00:49 +0000
Manifest next update:     Wed 13 May 2026 19:00:49 +0000
Files and hashes:         1: hRQCi57thYOlY1i0Di_3OEU8RbI.roa (hash: CiJ/s78ir+15MqFOT5aaVIhr5Aw/xJZZ/G08VuU4cSs=)
                          2: rGzIYDNT1zLkscy6fqygts7kxM8.crl (hash: VTwMQPR8ig0KDg7dhOmEnMOkBlQwHJ5YbthCVFyDI1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:30:30:c7:61:90:5a:45:74:d4:3b:37:d5:41:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf
        Validity
            Not Before: May 12 19:00:49 2026 GMT
            Not After : May 13 19:00:49 2026 GMT
        Subject: CN=a368ea0ac2e2d56384e651b35965ef1ffedee5c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fb:ec:3c:3b:89:9c:8f:73:5a:ee:9b:23:80:
                    28:45:c7:ce:4e:ec:43:36:f6:38:a9:99:a6:5d:3a:
                    44:00:96:fe:ff:12:ce:28:0e:0b:9c:a1:a9:10:db:
                    3c:aa:37:42:d6:74:46:54:b1:c0:01:90:16:37:f1:
                    33:6d:af:90:3c:25:94:d9:11:33:83:58:4e:81:25:
                    fb:ea:35:67:0b:a7:2a:7a:22:b0:92:95:35:c3:4d:
                    02:8a:db:5a:1d:fc:08:87:7f:1c:3f:cb:15:c4:55:
                    c2:2c:0c:d5:34:8b:0b:db:fb:0d:7f:37:37:16:ae:
                    43:6a:84:e7:e7:0b:c1:64:65:3d:40:ea:60:b7:92:
                    f3:5f:97:79:36:06:f9:fa:c0:d5:63:57:04:30:a5:
                    9e:43:15:1a:0f:0c:94:e3:e7:71:84:e8:47:f2:e1:
                    6e:97:c0:0d:44:b1:a6:7f:28:af:06:04:02:61:e7:
                    76:5f:24:d6:49:93:2e:e5:0f:75:c2:fe:5f:18:ca:
                    c1:26:59:d1:d4:9a:e1:62:cb:35:20:6d:c9:81:60:
                    50:bb:d6:27:a5:17:f2:6b:7a:dd:5e:fc:ff:15:3f:
                    30:33:8c:7b:d7:a2:a0:dc:80:22:84:61:ce:15:9a:
                    99:ec:41:b3:de:0c:4d:c5:fd:5c:e1:99:6b:a9:7c:
                    ec:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:68:EA:0A:C2:E2:D5:63:84:E6:51:B3:59:65:EF:1F:FE:DE:E5:C6
            X509v3 Authority Key Identifier:
                keyid:AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:c3:61:d5:16:00:60:a5:2a:5c:17:db:36:19:f8:c1:07:80:
         bd:81:b4:e0:2f:79:dd:41:32:cc:d7:1f:fe:2f:7d:a6:3a:a6:
         64:73:1a:e8:e2:71:10:8f:a4:d0:c2:a9:24:e9:a7:64:45:52:
         f3:61:0b:7b:f8:fa:b0:0c:5f:30:61:aa:f5:ce:a6:04:94:bd:
         34:8a:ca:e8:c3:61:38:1c:fb:a9:d0:19:f0:a1:28:92:6d:0d:
         a6:e8:d4:a8:78:d0:d1:84:b4:e9:15:e5:a9:dd:b0:d6:a3:e8:
         ea:bd:fd:20:ac:0a:68:d9:c7:f1:2b:9a:1f:d7:2c:00:02:da:
         eb:a2:18:99:19:95:e4:e0:d9:dd:3d:fc:96:77:97:c4:06:06:
         e8:41:cb:6b:77:66:a3:65:42:b1:dc:85:cc:f4:8b:fd:b4:d4:
         db:51:68:2a:31:6d:9e:26:21:87:36:71:93:fb:4b:bb:d4:1b:
         1c:61:6d:09:27:8b:b8:6f:91:27:35:a6:13:22:52:a6:ca:3f:
         bd:d4:2c:da:42:8f:cc:21:e2:03:b7:52:04:00:d5:de:06:5c:
         7c:75:c7:13:bb:b4:c3:2f:21:2a:04:6c:0b:e4:1f:0d:62:62:
         99:42:0d:70:f8:bb:10:91:db:b2:2f:66:08:43:49:73:52:a1:
         9a:5a:42:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:23:48 2026 by rpki-client