Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
File:                     1LDBHmZmz8G38baZTg9Dcymt7AQ.mft (raw, json)
Hash identifier:          aS78v+/sUM7xY7ETOva44ws8TESlizdS9WJlzdbt16Q=
Subject key identifier:   9E:94:47:7E:4A:42:E5:99:63:B5:0B:6E:C3:65:BD:EA:92:AC:CE:4D
Authority key identifier: D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
Certificate issuer:       /CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Certificate serial:       019E1D904D425F0ABB98109CB2A468437B5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
Manifest number:          1899
Signing time:             Tue 12 May 2026 19:00:56 +0000
Manifest this update:     Tue 12 May 2026 19:00:56 +0000
Manifest next update:     Wed 13 May 2026 19:00:56 +0000
Files and hashes:         1: 1LDBHmZmz8G38baZTg9Dcymt7AQ.crl (hash: FDJdHOvCDNMquUaRzjUwvJVork3IfL3yaZr7iL8sTxw=)
                          2: jGUPhdM1XZTdzsS3lD-IYIE9S9g.roa (hash: 69/RQWyt8lYUh/QhtvMFFUSfV50PWIikyQS0MBItp/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:4d:42:5f:0a:bb:98:10:9c:b2:a4:68:43:7b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
        Validity
            Not Before: May 12 19:00:56 2026 GMT
            Not After : May 13 19:00:56 2026 GMT
        Subject: CN=9e94477e4a42e59963b50b6ec365bdea92acce4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a2:98:76:3a:d3:d1:20:47:43:61:73:7b:3f:
                    32:40:9c:18:19:d4:96:89:7c:38:1e:c4:43:1d:59:
                    c9:56:aa:cc:b4:7f:27:55:77:a3:cf:79:f1:26:a2:
                    56:19:ae:8f:c3:5f:bf:9b:a7:d5:73:b2:a9:f1:7d:
                    b9:1a:06:1f:63:e4:3e:0f:07:19:df:22:6a:91:55:
                    3e:4d:f1:0f:b7:d3:b1:09:02:2a:d1:a0:67:22:03:
                    6c:cb:7f:54:7a:17:a2:53:91:42:f9:c3:db:bb:df:
                    db:7a:7e:b8:43:d7:ed:b8:b6:95:05:c3:81:b4:ed:
                    e9:0f:fc:7f:a7:84:be:0f:fc:ad:1e:8d:96:0e:5c:
                    46:cc:4d:70:31:2f:74:be:4d:1e:b4:92:2a:82:8d:
                    24:30:70:ed:85:4f:05:2b:e9:35:63:b1:a4:eb:98:
                    c7:c0:57:14:05:1b:ae:99:5f:ba:d7:ea:53:c9:10:
                    57:e0:fd:c9:b1:d3:cf:74:b0:fb:8c:ac:e5:f6:3f:
                    16:fd:0b:94:09:08:0f:4f:73:11:84:e7:18:44:68:
                    5c:72:5c:b5:17:af:d3:b9:71:bc:0a:5f:f8:f3:31:
                    c4:04:f3:de:b9:64:b3:43:39:0e:aa:ad:1d:24:4b:
                    96:68:68:df:93:3d:7c:6f:e5:02:9d:f4:f0:d4:77:
                    7b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:94:47:7E:4A:42:E5:99:63:B5:0B:6E:C3:65:BD:EA:92:AC:CE:4D
            X509v3 Authority Key Identifier:
                keyid:D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:da:e3:0b:64:34:7c:e0:df:60:bb:ca:38:53:da:99:a7:09:
         d9:3c:51:13:a7:a8:e5:db:8e:99:0d:4a:a5:f2:d0:fb:e9:fb:
         d5:6e:be:4d:bc:80:f3:35:84:e6:c3:d7:3a:03:7c:dc:12:55:
         47:34:88:85:b9:7d:07:c9:96:f9:52:e0:e7:9d:86:af:53:58:
         a8:d5:e8:e5:09:b4:5b:62:31:bf:6c:73:a8:15:6b:a3:91:c7:
         6c:cb:01:21:0a:e1:e5:bc:26:d8:44:08:2a:28:10:e7:53:3e:
         0b:91:0b:ed:b2:fb:cd:46:a9:90:84:ef:b5:ca:23:09:33:30:
         71:f5:19:a4:5a:52:4c:b5:31:4b:39:ba:04:84:ef:14:e3:9a:
         5c:b8:b3:ca:82:ce:8e:50:d4:a1:d3:d7:67:18:d1:3b:05:92:
         44:20:3a:4c:89:3d:36:8f:72:b8:5e:08:49:81:6c:91:50:ab:
         75:8a:df:fd:94:52:ed:58:28:28:96:c2:b4:c9:29:05:eb:1d:
         75:a7:81:83:74:fe:c1:68:7d:0b:3e:3c:08:ba:72:c9:b8:1a:
         5a:09:c8:a1:f7:e9:87:cf:43:72:62:ae:3b:2d:f7:c5:35:a0:
         a4:3d:5c:2b:ee:b8:bd:07:f7:29:1e:fb:46:a3:04:09:ad:d2:
         22:b1:6a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:29:39 2026 by rpki-client