Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
File:                     x9qC6HeTPZwslSyzdsk6qjN919I.mft (raw, json)
Hash identifier:          hKCAakvA+sbRmfEZrRLw1sCphOBQmqhk2sNqFkFBN+g=
Subject key identifier:   2D:DB:29:29:C2:FD:9C:0C:A4:D1:00:2B:06:57:B7:49:D8:90:B4:6B
Authority key identifier: C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
Certificate issuer:       /CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Certificate serial:       019E1F10D65D48EAF1A23248861F7A89EDA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 02:00:57 +0000
Manifest this update:     Wed 13 May 2026 02:00:57 +0000
Manifest next update:     Thu 14 May 2026 02:00:57 +0000
Files and hashes:         1: iLa7f2S3_d-gftGTw6gty0-Uiak.roa (hash: rM0PahqNF2zfpsbMJjY2LhMIvSX7eg/hz/KEUHOLLAA=)
                          2: x9qC6HeTPZwslSyzdsk6qjN919I.crl (hash: eovslMe+o23xJgkjFJACYeAQegjgst1aqbSEDrs1Wk8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:d6:5d:48:ea:f1:a2:32:48:86:1f:7a:89:ed:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
        Validity
            Not Before: May 13 02:00:57 2026 GMT
            Not After : May 14 02:00:57 2026 GMT
        Subject: CN=2ddb2929c2fd9c0ca4d1002b0657b749d890b46b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:eb:c1:af:f0:ed:1b:ea:1e:43:35:f4:06:56:
                    c2:62:e2:14:bf:6b:27:77:71:c1:b4:4d:4c:0c:91:
                    76:95:14:cd:30:98:ad:a4:d9:1a:83:40:2d:e1:92:
                    73:6d:10:17:74:d9:0b:c0:13:b7:9f:a8:97:45:82:
                    3c:49:36:47:82:42:6c:b7:e3:dc:97:d0:45:b6:85:
                    dd:5f:98:6a:e4:dd:5d:dc:17:1a:89:ff:fd:ad:0f:
                    29:ad:62:69:9b:a7:46:a8:13:7b:1c:ec:25:a5:a4:
                    c8:74:c2:49:44:d5:d7:fb:de:53:fe:fd:eb:d1:83:
                    93:d1:89:61:06:16:15:14:fb:d6:4a:40:5a:fc:dd:
                    1d:fe:78:9b:a1:b1:f4:10:ba:00:5f:e5:21:be:61:
                    10:5a:2a:b6:cb:ec:1a:80:af:20:21:fb:35:09:57:
                    7c:2b:22:a2:8c:0e:ed:e5:c3:0a:f7:ed:80:83:06:
                    38:09:fb:19:0d:92:d9:4f:9f:51:87:49:5f:cb:27:
                    df:c2:8e:8a:0d:8d:fa:ae:d3:57:7f:cb:22:29:18:
                    62:9a:d7:75:f5:9c:58:ed:02:0f:95:a8:fa:c8:5b:
                    52:ea:2f:37:fa:f8:f8:01:a9:99:f5:56:1a:53:c0:
                    4d:51:f0:31:77:aa:34:16:60:6e:98:83:fd:7b:53:
                    19:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DB:29:29:C2:FD:9C:0C:A4:D1:00:2B:06:57:B7:49:D8:90:B4:6B
            X509v3 Authority Key Identifier:
                keyid:C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:93:15:d9:cd:2e:e2:05:40:6c:43:06:4a:a4:e3:0e:43:35:
         f5:4d:72:aa:52:59:55:a6:9a:bb:d9:92:14:99:16:db:02:a8:
         19:fe:76:f6:39:be:c3:78:a2:c1:7b:e1:e7:b6:23:a6:63:14:
         d1:e4:db:11:f1:90:b5:05:18:0a:69:47:68:7c:22:37:0a:9a:
         08:fe:b6:6d:ad:4c:97:ab:65:c0:cf:0e:50:47:eb:b3:fe:af:
         68:e3:83:fa:ea:c5:43:e9:cb:42:e2:69:4e:48:dc:c0:25:d3:
         75:18:6f:55:86:6a:eb:b8:59:24:f1:80:33:9e:e0:db:25:56:
         ee:3b:7b:17:d9:fe:b9:60:06:bc:1b:03:2a:c8:a4:7f:7a:17:
         f9:5c:cd:3b:0a:5f:c0:e3:65:81:74:1d:ae:d2:7f:d3:ed:0a:
         da:37:8a:86:c5:ab:1e:3e:c3:32:ad:9d:62:e9:8f:a7:54:d1:
         d6:7b:c8:24:db:dc:b8:5a:3f:fb:33:1d:0d:47:43:38:bc:a5:
         3c:f2:97:a0:23:37:f7:ed:fd:64:32:f4:fc:7b:0e:5c:4a:00:
         da:2e:cf:4c:40:f8:a6:48:ce:2b:6b:7b:f3:0a:d8:f6:79:87:
         cc:3a:00:c8:fd:a8:74:be:ed:ce:45:6d:d4:36:49:39:ec:97:
         88:fa:f2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:00:40 2026 by rpki-client