Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
File:                     CChUc8l4ylHOVGmqSu3KFkRb1lI.mft (raw, json)
Hash identifier:          WUzGEm2cFIRWd4R9P1VT7sVT66m0oBQDXqrWwby8nXM=
Subject key identifier:   50:D5:98:79:64:C9:9A:A7:C6:C3:FE:E8:9C:A7:E8:F7:50:5C:D9:6D
Authority key identifier: 08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52
Certificate issuer:       /CN=08285473c978ca51ce5469aa4aedca16445bd652
Certificate serial:       019E30048B5A129A60A5617F319409EFC1FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
Manifest number:          1911
Signing time:             Sat 16 May 2026 09:01:04 +0000
Manifest this update:     Sat 16 May 2026 09:01:04 +0000
Manifest next update:     Sun 17 May 2026 09:01:04 +0000
Files and hashes:         1: CChUc8l4ylHOVGmqSu3KFkRb1lI.crl (hash: xz9q15X+Yg1zFZ48xvZ3vWXQQH6yvi+7gmp4tV1miHA=)
                          2: KYwuzPdQcxFtvMJ482Z-no0-rlI.roa (hash: WFv3oIQNO2UW+gImEV96V10XtC3ybgEz6IBrXZKDplc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:04:8b:5a:12:9a:60:a5:61:7f:31:94:09:ef:c1:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08285473c978ca51ce5469aa4aedca16445bd652
        Validity
            Not Before: May 16 09:01:04 2026 GMT
            Not After : May 17 09:01:04 2026 GMT
        Subject: CN=50d5987964c99aa7c6c3fee89ca7e8f7505cd96d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:5a:7a:0a:7f:fc:48:7c:3e:ab:e7:b4:aa:5c:
                    e4:40:1b:78:27:5d:7c:0e:d5:57:8a:f8:dd:20:70:
                    86:78:6c:76:83:4e:d9:1f:f5:49:7d:0b:93:4c:22:
                    42:92:42:1c:b4:c0:48:7a:40:29:80:3f:ce:16:62:
                    0e:6d:01:6d:0c:27:6e:bf:03:13:43:8f:ac:1d:ab:
                    e7:d1:d0:09:1a:5b:f4:43:6b:ae:f0:6a:c1:27:1f:
                    68:60:8d:3e:54:85:99:cf:c6:b1:e6:ef:bb:a0:53:
                    38:10:04:3d:4a:d3:1c:9c:82:ff:3b:74:ce:f5:af:
                    5f:e3:5d:65:a5:80:a6:ab:44:18:ad:88:3e:49:8f:
                    9a:93:af:fc:c8:2e:a6:cd:a3:fe:f1:0f:c1:17:4c:
                    70:2a:e7:25:16:1b:e2:48:fb:70:08:a4:20:c4:02:
                    73:e7:6d:fb:86:cb:d5:81:a8:47:dc:48:3c:d3:c7:
                    46:82:64:8f:b1:47:f4:23:3d:23:b9:60:ce:c3:9d:
                    04:ff:4d:c0:6d:32:6f:54:ac:1e:70:df:c2:7e:d1:
                    49:f1:6d:d8:b8:4e:cb:52:4c:ca:1f:e8:a8:47:92:
                    a5:d0:b3:a7:5f:1d:91:85:6d:6b:9e:66:0f:14:56:
                    e6:87:ee:cf:5d:fa:33:19:fe:81:3f:6e:63:73:e4:
                    0b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D5:98:79:64:C9:9A:A7:C6:C3:FE:E8:9C:A7:E8:F7:50:5C:D9:6D
            X509v3 Authority Key Identifier:
                keyid:08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:5b:f5:b7:4d:15:ca:92:73:30:9e:b0:50:45:39:81:c9:8e:
         af:43:cd:da:01:57:0e:24:24:5f:b1:af:c3:81:ed:ee:b9:2b:
         6f:49:84:8e:f5:f0:0c:11:3f:ab:77:23:10:43:c6:44:e6:26:
         eb:8d:37:cf:b7:d1:10:c5:27:e8:cb:89:0a:13:57:ff:80:3b:
         50:3c:fa:6c:96:7a:8b:ff:81:93:63:fa:9a:1b:a0:19:a3:93:
         f2:e2:5d:99:d9:5a:2a:1c:1e:39:17:49:e8:29:04:94:d3:c4:
         bf:ff:90:2d:28:28:33:37:75:4e:bd:1c:23:7d:8e:1a:40:e0:
         45:b3:6d:a3:b3:1a:91:4d:2a:ef:5f:48:6a:aa:e3:83:e6:72:
         43:46:ae:1e:4b:47:d1:c2:26:72:10:70:7c:09:21:8a:9b:0e:
         e3:a3:5b:d7:bf:af:e4:75:4d:26:06:55:a4:75:39:37:83:3d:
         b3:6d:92:48:24:81:f7:fd:a9:d6:8a:ff:bb:24:1c:97:b4:b7:
         00:ca:be:a7:25:1c:c1:54:51:ce:cc:71:de:88:e2:4b:2e:07:
         86:d6:b4:d9:24:e1:e8:fc:57:61:c7:93:9f:1c:ee:6a:1c:dd:
         42:a7:63:c9:4a:54:df:a8:43:e4:43:48:1c:50:c0:ab:cc:40:
         85:3f:86:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:29:55 2026 by rpki-client