Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
File:                     02fRY1tGs8InSyh1Bbu9fZFdyvU.mft (raw, json)
Hash identifier:          bakiwE/uLRxQvna0UCl71PSAd3uB8jIRwmXNksIG1P0=
Subject key identifier:   06:88:22:D1:4D:5A:05:26:C6:BD:EF:C8:4E:22:56:B1:0C:5A:FC:35
Authority key identifier: D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5
Certificate issuer:       /CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
Certificate serial:       019E1D597CE6AC1A680F5D38D5640385568C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
Manifest number:          1908
Signing time:             Tue 12 May 2026 18:01:04 +0000
Manifest this update:     Tue 12 May 2026 18:01:04 +0000
Manifest next update:     Wed 13 May 2026 18:01:04 +0000
Files and hashes:         1: 02fRY1tGs8InSyh1Bbu9fZFdyvU.crl (hash: +VzhwsE2J6nTXoYr/jwULkmqXFQS3C9KIEdO2SnoeSs=)
                          2: Zs-v1rw9g1MYTe4z_xC60lFfzak.roa (hash: gDQsejW5I6NwbA9XiA+PvZS2jChO/DirRuBkqy+plZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:7c:e6:ac:1a:68:0f:5d:38:d5:64:03:85:56:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
        Validity
            Not Before: May 12 18:01:04 2026 GMT
            Not After : May 13 18:01:04 2026 GMT
        Subject: CN=068822d14d5a0526c6bdefc84e2256b10c5afc35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:31:bd:00:30:3e:2f:cf:7c:23:58:34:02:01:
                    d0:a5:52:18:8e:60:f6:67:dc:4a:51:67:11:9d:ea:
                    ea:2e:50:9e:7f:6e:98:02:5f:2e:84:a6:02:6a:86:
                    e3:2e:1b:10:25:0b:62:7d:00:15:a5:0c:2c:32:90:
                    dc:72:07:de:c1:c4:1f:12:1c:eb:41:f2:33:cf:26:
                    1f:4f:70:e8:cc:6c:3d:13:27:89:f2:07:61:01:f3:
                    c0:bc:68:4d:f4:a4:56:86:cb:9d:6b:6f:d1:4c:c6:
                    55:d3:a5:b1:65:81:00:ec:d9:fc:0a:37:cd:19:67:
                    33:d7:c7:1e:5c:3e:54:4b:95:82:5a:c9:30:07:22:
                    d8:91:8e:b4:dc:53:19:12:7e:9c:67:26:45:9c:55:
                    dc:18:57:8b:cc:0a:72:e3:99:3e:bf:56:5f:d1:73:
                    f8:95:34:03:24:f7:95:e6:99:c2:04:dc:07:b3:a7:
                    95:b1:24:31:ee:91:05:0e:24:6f:78:33:4a:b6:60:
                    32:a0:96:94:89:1a:49:03:06:15:ba:1b:f6:1c:44:
                    e3:c2:65:9c:cf:4b:5b:5c:7b:8c:50:d8:72:14:ae:
                    fe:47:e6:af:8a:b0:34:f3:a8:0d:ce:d5:36:62:ed:
                    53:37:84:1d:35:29:35:56:d9:e5:b4:6b:3e:a2:ba:
                    7c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:88:22:D1:4D:5A:05:26:C6:BD:EF:C8:4E:22:56:B1:0C:5A:FC:35
            X509v3 Authority Key Identifier:
                keyid:D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:36:f4:75:f4:b0:45:d7:be:e7:a8:88:b7:2c:6d:e8:1f:d1:
         ac:8e:f7:88:c2:10:98:e5:f8:a5:92:b9:69:e7:97:10:39:63:
         94:20:cb:6a:5d:0f:4c:8a:aa:5b:b9:38:9b:03:87:3e:f3:e1:
         10:5a:c9:04:a6:e8:20:1f:f5:23:d8:f6:6a:81:18:b0:59:c5:
         35:61:6a:92:40:54:e2:3a:b1:d3:3d:bc:38:ad:65:dd:6c:7d:
         e9:1e:1c:27:c3:00:42:42:db:34:01:2c:d0:a8:c6:d0:3c:44:
         98:49:d8:d2:cb:96:64:7b:05:ef:1e:13:9b:6b:48:46:df:a7:
         93:eb:50:f1:bb:3f:ff:95:ab:89:b0:e9:9f:00:08:90:fb:43:
         ec:47:93:c2:ec:c4:fa:0f:db:6c:90:dc:0f:59:de:33:3d:3b:
         2d:fb:18:91:26:f8:0a:02:bf:ca:c5:a3:bd:9a:2e:48:09:74:
         29:ba:16:2e:21:7c:92:b7:de:9a:9f:dd:11:4d:21:49:5f:f1:
         ea:52:f7:b8:c4:73:ae:a8:18:9f:2e:d5:03:6c:7a:7d:43:96:
         45:63:b9:8c:09:6c:81:bf:c3:13:6d:b6:cb:bf:2f:ad:49:47:
         66:cc:fe:f4:7b:db:0f:ea:42:0e:ce:7e:b8:6a:82:e2:24:6a:
         6d:ba:67:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:34 2026 by rpki-client