Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
File:                     1-VkY92suBLF1FE4jy-SKY8yaqo8.mft (raw, json)
Hash identifier:          K5++834w5WnlPpPoBXPwGRfaEOfsxjYSr1zYft2bpZI=
Subject key identifier:   2A:CA:18:B4:95:F2:ED:B2:D2:4F:8B:4D:4F:4C:85:77:BF:42:2E:B1
Authority key identifier: F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F
Certificate issuer:       /CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
Certificate serial:       019E1CB486EFBB9EC5973676CBFFAA429CF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
Manifest number:          0CBD
Signing time:             Tue 12 May 2026 15:00:53 +0000
Manifest this update:     Tue 12 May 2026 15:00:53 +0000
Manifest next update:     Wed 13 May 2026 15:00:53 +0000
Files and hashes:         1: 1-VkY92suBLF1FE4jy-SKY8yaqo8.crl (hash: eLOraHhNYAV9kRQyIr+oPBEg/ijSq9mFfKIVDf04C5U=)
                          2: WOVURcgrOmo7CFBcFUmHZlO20Y8.roa (hash: wePf8ahRzSpTcfeEJN249YcPQyh2uGg5TQezwCJoWwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:86:ef:bb:9e:c5:97:36:76:cb:ff:aa:42:9c:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
        Validity
            Not Before: May 12 15:00:53 2026 GMT
            Not After : May 13 15:00:53 2026 GMT
        Subject: CN=2aca18b495f2edb2d24f8b4d4f4c8577bf422eb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:23:92:52:4a:8e:42:a0:73:58:1e:9a:24:9d:
                    1f:c5:61:83:76:56:36:3c:78:6f:47:fb:e8:ec:f5:
                    5c:8e:11:db:8b:b0:8c:4e:90:59:5a:9d:f1:ff:e9:
                    7d:92:ec:b1:6f:55:c2:72:ca:92:80:2b:17:e7:4a:
                    33:5e:95:56:e7:f2:f9:3f:3e:90:34:0f:40:c6:b4:
                    3f:ff:38:ac:ae:e7:27:fa:0b:f9:70:a3:28:f4:13:
                    d5:da:56:06:50:c3:76:05:17:ed:85:82:76:bd:94:
                    4e:5f:bb:ef:d6:62:b4:c1:73:20:9b:44:88:dd:16:
                    c7:c7:ea:78:f6:61:47:c5:8b:38:74:84:8f:03:53:
                    b7:4f:e3:36:59:fd:47:2b:cf:94:a4:fb:a8:4e:63:
                    e0:d8:5d:91:8a:81:c4:22:a3:3f:9f:ba:7e:aa:8e:
                    5f:c2:c7:36:9f:dc:e1:65:3c:3b:98:a5:03:4e:14:
                    44:d8:d8:b1:3d:71:5b:9e:a6:ef:51:53:5d:50:26:
                    f8:0b:96:24:05:8b:5e:89:ff:c5:31:b0:cf:59:a6:
                    a3:b0:b9:1c:d0:4c:27:c2:1d:f1:7f:a3:de:d6:83:
                    93:ab:36:c5:c5:8c:9b:36:09:5e:d6:ed:82:3c:9e:
                    19:6f:73:78:fa:bf:ea:a6:6a:80:05:56:73:98:b0:
                    6f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:CA:18:B4:95:F2:ED:B2:D2:4F:8B:4D:4F:4C:85:77:BF:42:2E:B1
            X509v3 Authority Key Identifier:
                keyid:F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:4f:73:6e:97:9d:75:ce:bb:d9:d5:a6:5a:be:91:f0:c0:d4:
         f9:8a:87:c4:94:7a:d2:f5:e0:dc:8b:ce:b9:63:c7:84:87:31:
         6f:f4:85:19:6a:eb:f3:41:06:80:1a:9a:ad:17:50:0f:46:93:
         a4:01:5d:f0:24:39:25:82:08:64:cb:e2:32:10:d9:5a:3c:39:
         07:e8:4f:2b:72:c2:eb:9b:e7:e1:8f:94:2a:7b:68:3b:b5:12:
         e4:b5:a9:58:43:be:9d:c0:6a:19:ae:29:00:72:b6:06:cf:22:
         9f:9a:24:46:79:ed:89:97:9f:99:28:b4:34:76:3e:c0:b3:3e:
         f2:5b:87:9b:22:36:38:1e:c6:22:9c:05:2b:93:12:0a:10:5b:
         f6:48:83:4b:46:a7:22:16:42:c7:ba:a8:fe:78:a5:98:b3:55:
         cf:32:70:bf:c7:0e:14:a7:4c:80:e2:89:ee:82:1a:80:a2:ba:
         e6:79:09:76:71:b8:f1:be:89:18:33:1d:52:45:5f:54:92:e3:
         01:27:20:d4:91:80:2b:af:3d:dd:79:bf:5a:0d:1d:f3:6d:af:
         74:82:00:0a:8f:56:db:e2:6d:2c:8e:e5:73:36:c5:8c:4e:dc:
         03:da:6e:f5:8d:69:87:f1:e5:73:14:a1:bb:80:05:3d:22:b4:
         32:9c:42:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:24:01 2026 by rpki-client