Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
File:                     94Bqw18urALMoEbWUPsivv7mjUM.mft (raw, json)
Hash identifier:          uJgMegwf3wavk3qlRf5PqxRh/x2doWfhkDyXJISDRKw=
Subject key identifier:   3A:54:B2:AB:14:4D:85:84:11:AA:BB:7C:E7:28:A3:BD:AA:4E:81:DC
Authority key identifier: F7:80:6A:C3:5F:2E:AC:02:CC:A0:46:D6:50:FB:22:BE:FE:E6:8D:43
Certificate issuer:       /CN=f7806ac35f2eac02cca046d650fb22befee68d43
Certificate serial:       019E1CB4FEDF44AFC464E630C977A8B949D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
Manifest number:          1906
Signing time:             Tue 12 May 2026 15:01:24 +0000
Manifest this update:     Tue 12 May 2026 15:01:24 +0000
Manifest next update:     Wed 13 May 2026 15:01:24 +0000
Files and hashes:         1: 94Bqw18urALMoEbWUPsivv7mjUM.crl (hash: VqYWJcYcM23MpNOPXCiROwRndyO1DKNQSwM5ho3e0eY=)
                          2: lyCd8jSWuD5ylcHwCB_UZElDqqc.roa (hash: yIuhwu9g6Xxe3O7KESvgNx7V8m2Ye7H/CuRv/nEh5KQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:fe:df:44:af:c4:64:e6:30:c9:77:a8:b9:49:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7806ac35f2eac02cca046d650fb22befee68d43
        Validity
            Not Before: May 12 15:01:24 2026 GMT
            Not After : May 13 15:01:24 2026 GMT
        Subject: CN=3a54b2ab144d858411aabb7ce728a3bdaa4e81dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:19:ff:25:69:a8:f2:23:ca:72:8c:46:6c:35:
                    68:20:24:34:c5:49:7e:8e:59:b3:b8:9b:70:18:10:
                    16:23:e9:b2:14:40:d2:22:58:dd:dc:62:bf:ed:ac:
                    a4:3d:d3:cb:2a:49:a4:fd:38:c3:d8:7e:65:d9:0b:
                    64:1c:c8:a3:e3:4d:c6:d7:1d:c7:7a:87:98:61:09:
                    c4:ab:21:00:da:f3:c7:18:07:1d:db:4e:10:8f:77:
                    4a:43:cf:8b:45:e1:e4:50:b9:df:1d:7d:67:ca:15:
                    89:c3:7f:12:30:8f:aa:93:46:f5:72:6d:7a:d9:4b:
                    25:4a:8c:bb:26:ca:f9:77:50:7b:23:ae:ca:21:1d:
                    97:78:58:1c:3b:97:4a:f3:f4:08:96:ea:6e:93:67:
                    1b:f6:68:3a:fa:30:ad:98:ee:11:8a:bf:b3:d7:fa:
                    a9:08:0b:7c:41:71:f9:f8:06:48:32:06:18:00:62:
                    dc:f2:5f:f5:96:c4:5f:2b:2d:1e:ce:db:d8:d6:b8:
                    a2:4e:96:2a:64:5c:72:fb:7a:4b:80:a0:34:b1:81:
                    24:47:c6:5b:6d:ed:64:d8:d4:3a:98:6c:b1:37:16:
                    82:f0:a5:8c:41:18:26:15:dd:8e:e5:ce:fb:b0:86:
                    af:88:14:b6:9a:5f:e1:4b:60:7a:5d:fc:d0:31:65:
                    b7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:54:B2:AB:14:4D:85:84:11:AA:BB:7C:E7:28:A3:BD:AA:4E:81:DC
            X509v3 Authority Key Identifier:
                keyid:F7:80:6A:C3:5F:2E:AC:02:CC:A0:46:D6:50:FB:22:BE:FE:E6:8D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:b3:80:23:1b:68:bb:0f:8b:5b:40:ee:36:d7:9a:70:b8:b0:
         7b:ee:80:3e:fe:78:bc:a2:1d:d0:f5:53:dd:04:dd:5f:b7:29:
         ee:b6:a7:92:7f:72:5c:16:d7:f7:9e:68:fa:d3:74:83:53:4c:
         6c:f8:b2:d5:dd:b2:80:2a:89:7d:f1:dd:11:e4:42:ac:ed:cd:
         9b:3a:d0:ce:38:37:1b:f1:8a:c1:40:b8:85:22:7c:b8:04:7f:
         bd:05:4e:22:df:0e:4e:7f:c6:ff:be:1d:63:73:a3:1d:2f:5a:
         d7:74:e5:c6:44:35:44:23:68:73:5e:00:bb:fb:65:7b:69:35:
         41:b6:a4:22:83:1a:99:35:f4:e0:b7:ba:13:60:7c:3d:67:df:
         73:a4:e4:4b:db:cc:47:06:6f:23:0f:f7:bf:b5:67:bd:18:b5:
         54:e6:2a:d9:19:d3:82:54:cc:a6:7d:1e:de:fb:a6:ec:67:7b:
         ff:3a:77:65:e3:fa:87:09:53:e4:c7:15:c2:2a:27:60:8c:e4:
         39:e1:f5:aa:01:62:44:b3:3e:9d:b7:ca:5e:b5:a7:f5:ca:ef:
         f2:f0:48:be:91:3b:54:35:80:6e:b3:40:11:5f:91:f5:ce:ea:
         22:3a:7e:90:1b:fb:cd:f6:8a:68:05:0f:37:e3:50:9a:3f:68:
         4f:db:60:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:51:06 2026 by rpki-client