Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
File:                     eA3hbu6UewqMdXFPxdpqAlnKG5A.mft (raw, json)
Hash identifier:          iDYRZL4wn6bWvH+YzhrGdvTqxIkHH58HSsolFPhjaA0=
Subject key identifier:   20:97:C6:E1:A1:D8:82:1A:B5:3E:75:B6:C8:98:CD:12:56:B9:6B:DC
Authority key identifier: 78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
Certificate issuer:       /CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Certificate serial:       019E1F10BF734A41E9424546F662B6B13310
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
Manifest number:          1909
Signing time:             Wed 13 May 2026 02:00:51 +0000
Manifest this update:     Wed 13 May 2026 02:00:51 +0000
Manifest next update:     Thu 14 May 2026 02:00:51 +0000
Files and hashes:         1: FZe1NTnwQLaVEwa5nKYFvYoYApc.roa (hash: LyCQTa9+bhAOhJK8DWlraV43+IT6fvhRPfMpiyuGQl4=)
                          2: cbfZrsYOtkfTsvATyxudQ2krwIc.roa (hash: LFDpBEhBWBZpbTCNf+xEuq+zB73JcCsNfl6NSUtgKtY=)
                          3: eA3hbu6UewqMdXFPxdpqAlnKG5A.crl (hash: qd7bFDFErcajWhuug2xvyKSLh7dlaAFrjRv+dWV3JqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:bf:73:4a:41:e9:42:45:46:f6:62:b6:b1:33:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
        Validity
            Not Before: May 13 02:00:51 2026 GMT
            Not After : May 14 02:00:51 2026 GMT
        Subject: CN=2097c6e1a1d8821ab53e75b6c898cd1256b96bdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:57:80:a3:e8:c4:09:fc:02:b2:6c:62:34:d9:
                    41:17:ba:33:7e:76:a9:00:7c:09:82:f5:40:eb:c1:
                    4a:de:3c:0a:1f:59:8e:7d:50:60:d4:b3:ec:ad:3c:
                    f6:a1:0c:2a:c9:70:cd:cc:bb:82:c4:e5:22:42:33:
                    e5:22:f5:0d:bb:07:02:f1:82:b0:14:47:e6:92:82:
                    b8:10:12:10:a4:34:61:87:71:a8:7e:34:47:04:1c:
                    34:0e:d3:37:22:94:6f:93:f1:d7:bb:9d:10:e3:3f:
                    09:b0:ae:cc:e7:88:af:da:ed:34:0b:c4:88:09:11:
                    bf:e0:59:a5:7c:75:b1:37:80:2e:7f:3b:ca:10:b6:
                    b0:91:70:da:b1:ec:24:af:89:15:04:e7:7c:1c:aa:
                    69:bc:b7:bb:b6:4e:f0:c0:bf:f3:a7:ed:e6:a5:6d:
                    c2:e9:f2:21:27:a3:75:3d:8d:0d:8f:d0:2a:20:f1:
                    57:63:b5:be:38:2a:02:9f:01:dc:6f:a8:3a:a4:39:
                    6e:43:a8:1f:2f:f8:07:d3:50:99:ed:31:b1:d3:2b:
                    a5:96:a4:39:6d:07:a4:c3:1a:6d:ce:af:34:8b:b4:
                    c1:5b:a4:c8:f1:26:54:4a:0a:79:b5:91:bc:fe:6e:
                    bb:0d:bf:55:8b:00:f5:72:da:44:c5:64:2b:a6:2b:
                    f5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:97:C6:E1:A1:D8:82:1A:B5:3E:75:B6:C8:98:CD:12:56:B9:6B:DC
            X509v3 Authority Key Identifier:
                keyid:78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:35:c0:a6:f0:26:05:06:e8:7b:d4:56:58:e7:1e:16:13:8e:
         4f:d0:8a:74:52:35:99:f0:3e:94:33:5b:e7:52:96:42:68:21:
         b1:1f:07:f5:84:7f:40:f1:14:1e:ce:1c:c1:09:78:d6:8f:9e:
         7b:95:91:75:46:9a:f6:9d:ff:37:3f:5f:2b:3b:42:8e:94:7d:
         e0:20:ec:58:95:54:9e:8b:60:0c:13:fe:e8:f2:8b:d4:08:6a:
         6c:72:5b:97:38:30:06:ef:62:9c:77:be:4d:f7:23:0a:68:ac:
         ab:4c:27:10:58:cf:55:3e:bf:b2:4d:0b:09:1c:6b:bb:09:88:
         8e:06:29:64:fb:4f:35:d9:6d:dc:20:46:87:46:76:79:8a:28:
         e0:a0:d1:06:9d:4a:dc:ac:a3:12:2e:eb:44:e7:2a:66:d8:16:
         69:90:7b:1d:b6:7b:8a:fc:c7:0d:b7:5d:86:c2:bd:26:d1:75:
         0f:52:c6:7a:fd:e7:05:72:41:91:ca:18:f4:80:35:68:1b:21:
         bd:fe:b7:3b:14:67:8a:1b:04:5c:9c:34:5b:ca:0f:d5:c9:96:
         0f:e6:be:6f:e6:e8:b9:b0:97:bc:11:a6:7f:ea:8e:06:73:59:
         9f:b6:b1:e2:8a:dd:09:09:c9:dd:0f:6f:69:8b:63:1c:bb:03:
         7b:0b:f1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:07:51 2026 by rpki-client