Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
File:                     pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft (raw, json)
Hash identifier:          2Dv6mShCCB08EkkOZaS6rvXExfzi9Fg7kisI5Kgq8f8=
Subject key identifier:   FD:AE:35:BF:65:F1:F5:EB:CB:6A:F9:CE:FD:6D:AC:33:8D:2B:9C:BE
Authority key identifier: A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95
Certificate issuer:       /CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
Certificate serial:       019E205AE723F7DC6D283AB10273FFF3B676
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 08:01:28 +0000
Manifest this update:     Wed 13 May 2026 08:01:28 +0000
Manifest next update:     Thu 14 May 2026 08:01:28 +0000
Files and hashes:         1: ZMTWhcJ1e7tvXHUUl4ANoGMrIWk.roa (hash: 9yOiqGJYeL5bi8PHF9fNeVVcmhOJdy6bDsiWR0m6Ve0=)
                          2: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl (hash: Ip++s/TJdChYPCF/FipNq8XVFUbGLEVvY1XCFofkYlg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:5a:e7:23:f7:dc:6d:28:3a:b1:02:73:ff:f3:b6:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
        Validity
            Not Before: May 13 08:01:28 2026 GMT
            Not After : May 14 08:01:28 2026 GMT
        Subject: CN=fdae35bf65f1f5ebcb6af9cefd6dac338d2b9cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:3f:f8:39:65:b9:86:22:ae:d5:18:9d:48:fd:
                    d1:17:7e:04:33:16:ed:39:bf:b4:61:d0:80:a5:a1:
                    2d:c8:3a:e3:a1:7b:b5:a6:0c:f4:fa:5a:97:7d:91:
                    9f:da:a5:be:85:a4:c9:6f:0f:1e:a9:d9:53:3f:d6:
                    dc:be:96:c7:54:c2:bb:fa:47:7c:b5:b0:1f:92:74:
                    b8:0e:6c:84:ab:d7:e7:54:26:40:5b:7f:59:49:4b:
                    ca:e2:3e:ce:45:d2:3b:ff:c6:34:1f:c3:1c:b4:81:
                    5d:f0:b0:7f:8f:53:f7:34:a2:5d:b7:fd:8c:93:b2:
                    6b:77:2b:c2:43:b7:a9:3d:c2:9c:a7:41:bb:ce:e0:
                    65:d3:d1:20:30:26:d0:9f:4a:90:49:f9:00:a4:a4:
                    57:05:cc:14:e0:ec:f3:91:19:f2:02:92:c9:62:38:
                    20:3c:95:9f:8b:e6:b9:9b:07:ed:23:7a:69:8f:26:
                    12:66:99:2f:7a:d2:3e:0e:0f:d5:49:84:75:26:38:
                    53:78:7f:ba:7b:a5:0b:34:fc:0b:75:c2:20:07:c7:
                    6c:9b:db:3f:fe:07:76:7f:86:52:04:b2:47:18:6f:
                    88:8c:aa:3e:5a:8d:12:32:9f:28:a8:d5:1e:9c:47:
                    2d:bf:d2:b9:9b:00:cc:e0:f8:93:db:65:21:e5:4a:
                    12:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:AE:35:BF:65:F1:F5:EB:CB:6A:F9:CE:FD:6D:AC:33:8D:2B:9C:BE
            X509v3 Authority Key Identifier:
                keyid:A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:49:9b:97:c2:e4:89:18:70:be:1f:ce:17:9d:61:14:4e:c9:
         ce:ca:80:bc:6c:a4:50:c1:3e:00:95:b5:90:aa:5b:05:aa:4b:
         5e:34:c4:bf:36:1e:34:06:24:75:5b:d3:84:7f:84:45:c3:a4:
         1e:14:8d:d8:a5:c1:0d:d7:12:16:c2:af:46:cc:4c:a7:12:73:
         df:08:58:55:17:90:b3:0a:35:f9:47:9a:4d:23:3d:a7:35:13:
         f0:58:69:9e:95:42:7b:6b:5a:8f:22:c9:09:7a:50:0f:34:9b:
         8f:d9:30:4b:02:02:48:4e:98:ca:07:d7:84:02:30:2d:2e:ad:
         ed:8a:fe:78:22:d6:e1:45:5d:ab:bc:a3:12:0c:3b:d0:0b:72:
         4f:5a:58:99:c1:39:76:bb:f9:45:73:42:78:3f:54:9c:24:71:
         1b:d1:59:eb:c9:69:d5:a1:31:e7:28:8a:f8:24:d0:26:e9:40:
         4d:33:d1:a8:2e:7f:71:04:03:5e:4d:b9:3c:20:4d:c7:da:22:
         69:04:9c:9b:39:33:d2:fe:39:4d:c6:d1:c9:f1:26:29:52:f3:
         df:04:20:7f:ca:2b:b2:b1:27:95:2c:e6:0d:63:93:fe:d4:85:
         0d:75:8b:28:13:ae:52:82:e3:cc:10:c1:c7:7f:63:16:c9:22:
         77:3b:77:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:26:59 2026 by rpki-client