Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
File:                     u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft (raw, json)
Hash identifier:          4E8PsdZM7Ll0JoF8ge3EOFcu8HCL8rdk/ti/uXMXu1Y=
Subject key identifier:   22:22:19:AB:A4:26:3A:1F:0D:92:EA:FC:11:A3:80:FA:52:E7:FA:87
Authority key identifier: BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
Certificate issuer:       /CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Certificate serial:       019E311780D95619F12F984B571FBB34FF64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
Manifest number:          1912
Signing time:             Sat 16 May 2026 14:01:24 +0000
Manifest this update:     Sat 16 May 2026 14:01:24 +0000
Manifest next update:     Sun 17 May 2026 14:01:24 +0000
Files and hashes:         1: Sz0NLTrsK1zvfocWZIMOcuuroT4.roa (hash: MpuB2aIbgKIxgNnY5nxxHbqI1kRjgw1UedzDmdWgU1o=)
                          2: oNKjJGIAPXT8dZall2O4S4AYq6M.roa (hash: 56SmuGoIwTXV/CRw0vPr6Byhn2+aY12OfodEclBMp80=)
                          3: u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl (hash: pPYDEfZzuOhFZFgFdJskUsrb0gMM3R9CLaTeZCBa19w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:80:d9:56:19:f1:2f:98:4b:57:1f:bb:34:ff:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
        Validity
            Not Before: May 16 14:01:24 2026 GMT
            Not After : May 17 14:01:24 2026 GMT
        Subject: CN=222219aba4263a1f0d92eafc11a380fa52e7fa87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:69:f6:03:dd:8c:1a:a2:aa:43:08:bc:61:87:
                    48:cb:7d:39:ce:aa:30:8c:7b:30:92:10:2c:33:bb:
                    8b:36:f0:1c:22:92:dd:e0:06:5e:28:8e:98:2c:d2:
                    0d:40:24:f2:27:0c:74:60:98:a1:e8:de:0b:ac:ab:
                    93:66:de:1c:82:54:b9:08:08:c2:e8:44:6c:4c:31:
                    68:a3:50:7f:c8:ac:dd:a0:5e:ba:ea:80:be:dc:b8:
                    90:f5:ec:fe:75:7d:b7:36:56:40:be:c9:b2:d8:6b:
                    ea:6e:2d:f5:a2:f2:65:04:20:48:30:aa:be:3d:0c:
                    97:e9:48:53:1c:27:4f:2c:72:74:11:42:23:2a:4d:
                    13:ee:95:82:85:1f:35:8c:17:f0:fc:9d:0a:23:47:
                    1d:cf:b6:30:da:2a:d3:2a:46:ea:0e:97:c5:69:11:
                    d1:d1:20:6b:15:5f:07:fe:7f:2a:f7:59:52:47:27:
                    03:5b:69:f9:a6:37:33:c6:c1:98:03:bb:6c:4d:f5:
                    24:39:35:b5:78:ee:16:21:02:65:3f:8c:d3:24:c8:
                    eb:b2:57:d1:9a:3f:17:27:90:34:f0:a9:95:6f:69:
                    a3:a7:ac:d3:f1:b4:63:d3:32:58:df:a0:15:c1:9a:
                    15:20:73:53:b3:25:0c:03:22:e5:fc:06:bb:83:89:
                    d9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:22:19:AB:A4:26:3A:1F:0D:92:EA:FC:11:A3:80:FA:52:E7:FA:87
            X509v3 Authority Key Identifier:
                keyid:BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:70:72:82:d4:e1:82:24:5f:eb:89:09:e1:95:06:79:a2:06:
         1c:5a:85:de:4a:13:f3:68:d2:84:77:24:8b:b5:a9:39:6b:de:
         e4:0d:48:7f:08:b9:b8:2c:2b:a3:40:a9:39:e2:d1:b1:51:88:
         f0:e3:f5:07:74:b3:7c:79:31:85:49:d9:fd:2a:da:69:3c:f5:
         7b:0e:49:38:e6:72:b1:7d:5b:55:e1:82:02:4c:53:9e:c9:3d:
         b9:b3:34:39:43:34:11:2c:44:d7:b0:08:7e:24:1b:89:24:bc:
         09:79:c8:72:92:e8:b6:24:24:19:12:2b:69:c9:24:be:8f:b3:
         3b:9d:27:56:c5:49:ad:fa:65:df:7f:0d:10:11:ee:97:6c:11:
         d3:6a:ff:77:96:fa:12:07:49:55:01:c6:b1:f6:4b:61:b9:9b:
         b7:c4:df:c1:9a:8e:fd:58:46:3a:e4:5d:1a:31:93:4b:56:53:
         26:38:a3:71:a8:46:56:2f:ff:26:fa:e1:2d:c6:63:38:e4:0d:
         c3:44:f4:88:ac:af:bd:aa:ec:31:18:cb:28:23:20:56:de:74:
         d6:42:ab:97:44:2c:fb:5a:d0:dd:0d:24:3c:0e:6f:82:db:77:
         fb:d2:38:db:95:51:5a:23:22:93:e3:77:f4:46:09:1e:35:37:
         2b:ab:14:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:42:07 2026 by rpki-client