Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
File:                     1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft (raw, json)
Hash identifier:          +B/ZlkHq+gXXZNTUx+UlqvjLxuyI9XcMWaEYYCY3IOU=
Subject key identifier:   B4:57:DF:37:20:9E:92:B3:C1:5C:14:76:18:D6:C4:D1:53:E6:43:C2
Authority key identifier: F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94
Certificate issuer:       /CN=f9e0257d067ef8b85f620c67220cf977ddde3994
Certificate serial:       019E1E6C6977FF756F2BDCF5002E9F2AAAE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
Manifest number:          1909
Signing time:             Tue 12 May 2026 23:01:21 +0000
Manifest this update:     Tue 12 May 2026 23:01:21 +0000
Manifest next update:     Wed 13 May 2026 23:01:21 +0000
Files and hashes:         1: 1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl (hash: SK1rBlb4tZnwEqjvUC6wNqHettBv/xrPz7w6gAo/fRo=)
                          2: 5335TVWq-TAy75K-3w-T_kbzaH0.roa (hash: 9SO05Pcou3qWF6g88dlB6s3gfpWtXt6YbpW1v8iIrjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:69:77:ff:75:6f:2b:dc:f5:00:2e:9f:2a:aa:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9e0257d067ef8b85f620c67220cf977ddde3994
        Validity
            Not Before: May 12 23:01:21 2026 GMT
            Not After : May 13 23:01:21 2026 GMT
        Subject: CN=b457df37209e92b3c15c147618d6c4d153e643c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a5:d0:f6:8a:a5:e4:6f:62:41:9a:02:03:fe:
                    a4:66:90:b6:8f:e4:25:4f:81:09:2c:68:c6:c8:3e:
                    4b:53:67:c2:40:fc:4c:b4:7e:c5:a0:67:40:f0:ac:
                    d8:69:1e:da:7e:93:1f:5f:71:20:75:b3:92:df:8b:
                    0d:5d:a1:28:97:76:8f:02:52:fb:ae:11:81:61:c3:
                    82:24:91:75:a3:ec:b3:37:69:58:d0:92:fe:45:89:
                    9d:ab:39:31:84:d2:48:b0:5c:ca:54:c9:52:e9:2f:
                    6c:b7:f9:d6:cd:b0:70:08:1e:69:83:85:da:ba:c4:
                    8b:44:b3:94:0f:02:eb:6c:04:e9:bf:14:f1:d6:7a:
                    04:f5:4a:e7:3c:2c:ff:3f:bd:b2:70:36:4b:f7:a7:
                    85:c2:ec:00:fa:52:6c:0e:ab:d5:70:56:dc:21:e9:
                    fb:0d:90:4f:dc:27:50:0a:fb:c8:be:8f:e1:8d:0d:
                    ba:d8:53:b1:6c:a4:98:d9:ea:55:0e:37:1a:0b:5b:
                    93:3d:4f:7d:bc:06:d2:44:6e:d1:5a:14:e6:d3:c9:
                    16:72:cf:c2:21:dc:66:bc:f5:79:b1:cf:8e:e0:83:
                    e6:55:78:9b:1c:8f:81:2a:12:03:cc:c8:9f:bb:5f:
                    43:39:35:b1:d4:a7:f5:b1:5d:c8:63:4a:6e:2e:44:
                    1b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:57:DF:37:20:9E:92:B3:C1:5C:14:76:18:D6:C4:D1:53:E6:43:C2
            X509v3 Authority Key Identifier:
                keyid:F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:51:d1:a9:af:f6:94:99:03:9e:d1:b6:4f:96:7c:00:b9:1b:
         87:b0:1b:e7:70:18:b1:dd:d6:0b:ee:18:e6:b9:f9:01:39:7d:
         af:b7:86:4d:3f:7b:4d:f6:43:4d:d7:ac:7c:70:72:da:dd:1b:
         ad:03:e1:88:3d:59:3e:2d:e9:a1:f1:13:10:96:21:1b:c0:aa:
         16:20:b2:7f:47:3a:d9:00:1c:2f:b0:d6:5f:d3:40:4c:ad:4f:
         d6:ab:0e:07:a5:63:6b:95:98:b7:df:a0:ed:48:b8:1b:72:77:
         cc:0a:9d:31:2d:ee:f5:b0:be:a7:9c:e2:81:d3:29:06:b8:ad:
         0a:27:f8:f8:83:58:f1:78:09:7b:4b:d7:7a:c1:6a:4f:8b:19:
         e2:ed:04:ed:fa:f2:80:f5:55:ea:f1:17:ed:13:67:5d:d3:cd:
         27:8e:4c:e1:e8:90:5b:4c:6e:9f:fd:07:53:bc:36:8c:66:e7:
         c9:5c:b2:e0:c3:4c:4a:49:f7:ef:0d:99:34:6e:d6:ad:28:f9:
         c0:4c:c7:b9:e4:1c:a8:0c:72:d2:1b:75:96:c3:fc:81:1e:d1:
         7b:f1:b4:45:06:14:02:e4:0f:ba:a0:eb:ed:0f:f4:24:3c:06:
         0e:43:33:d1:d3:2c:78:c7:fd:71:75:62:8e:47:6f:2d:12:70:
         f0:fc:94:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:07:59 2026 by rpki-client