Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
File:                     2S5c30xU_4aM6JUxXqtY8tiGUMI.mft (raw, json)
Hash identifier:          7ZkHSjZglfjSurmNjOr3Y7Zz+60GU/pJQgq1VzfSHOY=
Subject key identifier:   1D:45:EE:F2:A6:A7:8B:0C:E3:0B:54:C5:F4:24:37:51:33:16:27:D7
Authority key identifier: D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2
Certificate issuer:       /CN=d92e5cdf4c54ff868ce895315eab58f2d88650c2
Certificate serial:       019E1F47AD6E1FB77EB3DCC478E7BFABBE80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 03:00:51 +0000
Manifest this update:     Wed 13 May 2026 03:00:51 +0000
Manifest next update:     Thu 14 May 2026 03:00:51 +0000
Files and hashes:         1: 2S5c30xU_4aM6JUxXqtY8tiGUMI.crl (hash: 0ztfLy7EhOhDz8Bm98YnHhOZBmFa0623FllCL2nYWkc=)
                          2: Ini83UPVBFujNi82mFdTbIeLJ_M.roa (hash: hQSzKgBjrspgpke+S+SyF68tGyGh2lr/WJ9Pf7DCYOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 03:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:ad:6e:1f:b7:7e:b3:dc:c4:78:e7:bf:ab:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d92e5cdf4c54ff868ce895315eab58f2d88650c2
        Validity
            Not Before: May 13 03:00:51 2026 GMT
            Not After : May 14 03:00:51 2026 GMT
        Subject: CN=1d45eef2a6a78b0ce30b54c5f4243751331627d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:11:35:3c:ef:c6:a4:39:05:85:37:06:ba:d6:
                    6c:72:98:0f:a2:2a:5b:1a:d0:34:6a:1b:8a:64:2d:
                    cf:15:66:b6:2e:d3:cf:b9:e6:15:9b:4a:db:96:50:
                    e3:cc:49:d4:e1:08:c8:99:fe:c2:e9:39:1f:4a:7a:
                    bb:d0:61:17:08:c6:b8:29:8a:c7:89:8b:25:c2:1e:
                    67:bf:e5:dd:c7:f1:8d:0f:bb:d2:9a:49:3f:41:55:
                    8a:73:6c:3f:ab:e1:9d:b9:ef:ee:9d:d1:76:1d:7b:
                    b6:5f:ce:e7:0e:a2:39:4e:49:bf:2e:9e:bb:97:79:
                    42:40:44:13:e3:33:55:e8:08:76:af:da:99:6e:83:
                    5a:f0:1e:3a:a0:35:f0:05:6c:6a:2d:c3:2f:1f:db:
                    19:19:63:89:ee:67:9d:8e:62:17:7b:9b:44:b1:63:
                    d8:02:95:00:55:ea:a4:97:6d:4b:c5:8d:30:4a:77:
                    e5:a4:4f:7d:97:15:e8:be:4d:cf:61:37:54:67:87:
                    45:0e:7d:2a:43:80:34:3b:eb:88:4a:df:7e:9d:be:
                    06:12:23:14:39:88:93:fe:3f:17:b1:19:37:f9:01:
                    21:04:29:c7:c7:43:f0:19:cd:01:5c:0b:fa:73:e0:
                    e7:2b:ca:bc:05:30:b1:08:7a:fe:08:48:d3:87:ce:
                    3a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:45:EE:F2:A6:A7:8B:0C:E3:0B:54:C5:F4:24:37:51:33:16:27:D7
            X509v3 Authority Key Identifier:
                keyid:D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:53:ec:ed:68:8b:68:80:e0:fe:c4:c7:5e:b4:6f:50:8e:cb:
         25:67:1b:f4:b8:c3:89:a6:96:c2:fc:22:4a:8e:29:15:93:e4:
         be:f4:15:5f:0e:82:5d:10:c7:4d:ea:3f:13:6a:6c:27:2e:20:
         e9:6f:88:7a:e3:73:aa:db:15:23:6c:cb:98:78:48:59:8a:dc:
         cc:2b:e4:b2:30:16:9c:38:97:b5:16:64:2d:ba:67:5e:5a:d5:
         92:ee:d0:a5:39:59:e1:41:91:46:7b:f0:28:23:fe:bc:de:19:
         f4:49:5d:e6:15:0f:9f:c7:ef:5c:5f:d0:8d:1d:f6:82:3c:92:
         17:98:e9:28:2d:76:18:e4:58:6f:b4:75:81:50:8a:dd:f6:9f:
         dd:55:1e:50:96:dd:c2:66:6c:04:1d:9d:c0:91:8c:da:b2:14:
         63:1b:da:72:4a:d7:00:f7:38:9d:e2:13:e7:ef:3e:94:15:d5:
         f0:87:6b:8e:f8:3a:ca:f4:cd:1f:f5:2b:6c:7c:c8:05:4a:ab:
         f0:33:57:51:11:cd:1b:f3:90:6a:8e:9d:8d:9f:f6:8f:ae:13:
         46:bb:9d:a7:66:01:9c:ae:98:e0:86:58:76:35:24:fd:7e:95:
         41:37:a9:f6:d8:8e:cb:d2:60:42:e4:f5:2b:e1:08:b3:68:24:
         e7:50:46:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:23:41 2026 by rpki-client