Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
File:                     Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft (raw, json)
Hash identifier:          ZzXp8HBAzB1lgNUsmmx9Npo21SMzfA0CiGWn4x6YOK0=
Subject key identifier:   37:7F:20:17:24:B2:9A:0D:95:6F:C6:95:07:F0:48:EC:BA:6D:F6:AB
Authority key identifier: 3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27
Certificate issuer:       /CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627
Certificate serial:       019E1FECD98122E416780E0D9B17F178324E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
Manifest number:          1906
Signing time:             Wed 13 May 2026 06:01:16 +0000
Manifest this update:     Wed 13 May 2026 06:01:16 +0000
Manifest next update:     Thu 14 May 2026 06:01:16 +0000
Files and hashes:         1: 6LPLfXRjPfIhjODnqMp3dSMQhpE.roa (hash: SwmREtsfcX2USnXEaEXyt246LdWmwOC0/X0ED+RKl5c=)
                          2: Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl (hash: rxSZNU7VNT1CJeM4czuS8mivMAqkkhriLe04BVXkBmg=)
                          3: kvgue6TS--DcN7HG6o1wL6cSaEs.roa (hash: FoFeIWZgKjpGFpo+unUKSXljq5ce3QE7qtWREotLcT4=)
                          4: qLhFmr4T7lmhKT8keUmQGB3IPPk.roa (hash: 2UcGL5CSyZb5XFh4zJbKoqd+DUw15c/cw5GBlQgBwdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:d9:81:22:e4:16:78:0e:0d:9b:17:f1:78:32:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627
        Validity
            Not Before: May 13 06:01:16 2026 GMT
            Not After : May 14 06:01:16 2026 GMT
        Subject: CN=377f201724b29a0d956fc69507f048ecba6df6ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:59:65:20:49:df:19:28:b5:a3:93:67:aa:ec:
                    c2:28:2e:7d:26:18:13:02:bc:9f:60:3f:42:00:08:
                    28:fe:24:ac:1d:0a:db:81:70:da:23:ab:1b:00:3e:
                    2a:51:cd:c7:34:b8:fd:d7:53:62:ca:e8:b2:47:c3:
                    0e:06:9a:74:e7:5b:08:4c:a0:53:45:b2:0e:80:b7:
                    a8:dd:4d:9f:d2:64:96:69:ce:35:d2:5a:33:95:90:
                    d4:a0:9f:16:fe:2f:34:3a:31:62:cb:64:bc:19:44:
                    48:93:82:5b:6a:0e:f9:03:60:40:4c:a8:2c:82:23:
                    2c:e1:27:88:8c:dd:cb:2d:5e:19:38:ff:7d:c5:12:
                    d7:e2:91:b3:f4:0c:9c:85:97:50:fd:7c:62:c1:29:
                    60:77:42:cc:30:75:12:c8:40:8e:60:4b:af:4c:03:
                    cb:70:a1:5d:f4:0b:cf:50:c9:9c:d0:30:c8:7e:22:
                    f8:75:3b:3d:65:2f:66:16:b1:bf:31:72:08:ca:18:
                    dd:0f:9d:09:c4:7b:3d:61:6a:7c:27:08:f3:4f:22:
                    e4:7e:ee:fc:50:eb:9a:23:4d:a1:bc:25:db:f3:ac:
                    4c:ea:0d:82:8e:83:02:f4:24:52:4a:7e:47:79:d4:
                    06:fd:7d:3e:d2:44:38:2c:54:07:16:19:4f:30:0a:
                    b4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:7F:20:17:24:B2:9A:0D:95:6F:C6:95:07:F0:48:EC:BA:6D:F6:AB
            X509v3 Authority Key Identifier:
                keyid:3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:98:a4:a6:f7:62:0a:dc:b1:68:68:48:0f:0f:5b:8a:1a:9c:
         38:7e:33:34:53:cc:9e:b6:06:aa:10:38:25:94:00:d4:44:c4:
         16:fc:e7:49:32:60:65:f4:25:77:16:7c:79:59:b2:23:00:d9:
         03:b0:06:6f:84:d5:26:3d:a8:e3:99:d0:ef:be:98:fb:16:d8:
         d6:29:10:35:9a:d9:e6:25:eb:e9:4e:97:e1:ef:89:0a:7a:c4:
         b0:f4:ee:70:c7:0a:e5:19:27:1b:66:fc:77:9a:ff:9e:c3:ce:
         73:39:40:59:0e:2e:6e:cc:33:cd:88:39:af:28:ea:f0:76:28:
         12:0a:b6:59:7c:f3:eb:8d:88:62:71:7f:29:ea:69:db:03:79:
         28:a2:be:7c:ec:d6:67:56:c7:07:55:f2:b7:1c:28:e0:33:52:
         35:9a:73:41:4c:42:c4:b9:af:ff:38:70:59:05:27:02:fc:8b:
         e7:88:67:86:4a:c8:81:45:89:8e:59:74:e4:b4:91:0e:5c:66:
         34:82:3e:25:b6:10:4c:11:e9:d1:43:fe:ae:da:ca:a7:31:74:
         d0:bd:e1:37:82:73:2c:ff:ea:cf:70:d7:ba:b5:ba:31:b8:f2:
         a1:27:76:cf:35:34:ba:39:cb:e2:b6:7d:9b:49:a0:43:75:c7:
         a9:0a:4e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:12:23 2026 by rpki-client