Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
File:                     22QfyQPVtMyXFkkySks05PgkIsU.mft (raw, json)
Hash identifier:          hLGM6Wokw4W97lVgT48gHhHLOGk21nt26Z75uV/03P0=
Subject key identifier:   39:CD:12:60:31:FE:A0:E0:0D:3B:CC:BD:06:6B:40:4D:7A:33:7D:42
Authority key identifier: DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
Certificate issuer:       /CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Certificate serial:       019E1F10EA4389CA6E4796AB3C3279200449
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
Manifest number:          1913
Signing time:             Wed 13 May 2026 02:01:02 +0000
Manifest this update:     Wed 13 May 2026 02:01:02 +0000
Manifest next update:     Thu 14 May 2026 02:01:02 +0000
Files and hashes:         1: 22QfyQPVtMyXFkkySks05PgkIsU.crl (hash: LB46VDFA5DJteIqsO1aA9E5CuJdZxKzj4AKFVLixVSQ=)
                          2: DGuA7DOyGXAn98oCAGhbl48323g.roa (hash: KaiwSlSCPAgF52IKRYkPf8oMfbhIntogM/QW0s5kztk=)
                          3: fmcwhaidzArdA6kvh0y-Aej9y88.roa (hash: bKNi3L38o7bRnB56dZw/HCV46FJZnj7F35iWZ5QhbjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:ea:43:89:ca:6e:47:96:ab:3c:32:79:20:04:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db641fc903d5b4cc971649324a4b34e4f82422c5
        Validity
            Not Before: May 13 02:01:02 2026 GMT
            Not After : May 14 02:01:02 2026 GMT
        Subject: CN=39cd126031fea0e00d3bccbd066b404d7a337d42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b4:f1:da:0b:e7:c5:40:e3:07:7a:63:f6:0a:
                    fc:5f:c9:03:7f:4b:79:69:15:24:5c:99:b9:1a:a4:
                    a9:e9:ba:4e:29:ff:b7:79:95:59:a2:dc:9a:a9:30:
                    96:17:b1:11:bb:9f:52:59:db:3d:41:8a:19:36:5f:
                    fb:03:56:69:31:e8:9e:0a:34:d0:1b:7f:90:57:60:
                    fb:c1:d5:c3:38:85:39:05:30:b7:1a:0b:9f:75:86:
                    d7:e3:d9:fb:db:58:bc:d2:dc:61:b2:d8:37:f6:b6:
                    1d:19:f3:7c:27:17:23:2e:a1:61:f4:0f:66:34:5c:
                    e3:6f:b8:1f:3e:81:7d:1b:e8:f3:52:8a:2d:73:85:
                    97:01:6a:8e:58:26:23:e8:56:71:2b:20:7a:b3:c5:
                    78:95:21:31:58:29:74:2e:90:d1:4b:27:b9:50:6a:
                    59:15:df:ac:58:3b:1b:5d:a2:b1:be:5e:c9:d3:68:
                    9b:43:ba:08:85:2b:99:42:d7:c6:31:13:55:ef:ed:
                    45:38:c2:6e:d1:df:84:f5:5c:76:8e:12:95:c4:68:
                    86:19:1d:89:5b:45:5d:df:c4:6f:8a:c3:16:42:0d:
                    3a:0c:57:5e:0d:a7:6a:04:d7:65:65:f6:4f:1e:eb:
                    4c:37:e6:e2:85:2e:8c:68:4e:3f:67:67:ea:52:d3:
                    d7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:CD:12:60:31:FE:A0:E0:0D:3B:CC:BD:06:6B:40:4D:7A:33:7D:42
            X509v3 Authority Key Identifier:
                keyid:DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:70:6a:a4:63:ae:14:3e:08:f9:33:57:dd:ec:5a:90:52:c6:
         9f:db:71:72:a4:ed:36:d8:06:dc:78:c7:6c:6e:6d:57:bd:7b:
         d9:d3:e5:ec:29:8a:e7:43:d0:2a:3e:d4:8e:47:91:24:74:cd:
         df:d7:10:f1:77:96:df:80:d5:57:0c:cb:af:55:3b:2b:9d:65:
         68:9f:81:d4:7a:8d:b5:ab:28:bd:6f:3b:02:df:d9:62:53:c4:
         95:59:12:d3:f8:8e:97:99:64:7a:5c:d8:3c:a2:74:8c:b4:ca:
         47:bf:a6:c3:aa:79:14:57:94:8b:8b:4f:10:88:f2:e1:09:40:
         8c:c8:0d:41:20:b6:39:cb:96:bf:16:3a:46:8b:61:2c:a6:a6:
         a2:ea:6a:49:9b:17:ad:04:56:e7:e7:b0:ba:bc:a7:76:e1:29:
         6f:99:2a:4f:85:87:f5:d9:cf:fb:10:70:77:26:52:16:fa:40:
         38:dc:b6:62:77:78:40:bd:03:aa:26:89:ca:3e:a3:53:2d:29:
         71:ae:b2:8c:d2:b6:bc:bd:94:0a:ab:d8:25:5b:26:7a:25:d0:
         8b:f2:82:a9:af:82:8f:f3:47:29:a5:f8:b7:a9:e8:c2:af:f1:
         5d:f7:0e:65:0c:fc:f6:71:5c:2d:e7:aa:4f:f2:11:eb:de:ac:
         52:e4:e0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:21:59 2026 by rpki-client