Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
File:                     H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft (raw, json)
Hash identifier:          IoENwK+YTABNmKadQTtLzZoYPmCJhjoxVd+Nb+pG5rU=
Subject key identifier:   73:8A:35:DA:91:1F:62:B9:54:E7:16:60:4F:A2:FA:BD:2D:7B:AE:B9
Authority key identifier: 1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
Certificate issuer:       /CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Certificate serial:       019E288221E55E93BEF2B1022C9C5A14EECA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
Manifest number:          1926
Signing time:             Thu 14 May 2026 22:01:17 +0000
Manifest this update:     Thu 14 May 2026 22:01:17 +0000
Manifest next update:     Fri 15 May 2026 22:01:17 +0000
Files and hashes:         1: BMPT7NzV-DRi_JSyLfbyEmpeKTA.asa (hash: 15wpV31R6UH9KqtLpqrDAtPxo5M+xz55jsCaBxJ8PWk=)
                          2: H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl (hash: G9DHd79WfIatsPi0r0oo0QSJpqrmvYcH29Z7YK1gRtU=)
                          3: RoJCbChu4UCP6HbU25IvOtcjfaQ.roa (hash: ZExXuwYNhboyV3wplBFPIwIw4SZUYPtrZTHjOMct0iE=)
                          4: TCMNO3-CS_Nx-NPlLu6HlbDn--Y.roa (hash: JY2kbXROkO8FWfujlDIjurbZxxm0qrKzSX4v6ycpeWY=)
                          5: X5485C7ZqsWTqkySl5Kn8ckUA60.roa (hash: w+70iAnq3DeMprlSCHwSgxGyujS0yHyNG0DURrrh5ls=)
                          6: Zl6fGzQYTOHjw4PolDvPxgAOgoQ.roa (hash: GhUA9dcCQFJ4Ezs37D2x3nBwq7ffRWZrt0wbE9KxdKY=)
                          7: aPxKVSvNRXkuueNUo0oD6qVAbdI.roa (hash: 61RoVPH2gZzr7aCEfyXLcJOn37DXu2XNDfa7Kms2beA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 22:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:82:21:e5:5e:93:be:f2:b1:02:2c:9c:5a:14:ee:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
        Validity
            Not Before: May 14 22:01:17 2026 GMT
            Not After : May 15 22:01:17 2026 GMT
        Subject: CN=738a35da911f62b954e716604fa2fabd2d7baeb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:db:f2:db:4b:51:7c:78:62:37:be:0c:bf:24:
                    dc:45:83:f9:60:a6:3d:0e:a6:cf:7f:25:40:57:84:
                    52:91:61:ee:e4:86:94:e4:80:9a:7c:b9:64:0c:cf:
                    c9:f3:d6:1b:c6:e0:87:f4:e8:21:4e:d0:8f:2e:0f:
                    b8:bc:65:4b:4b:77:e4:fd:6f:3c:ee:3f:52:9c:33:
                    51:2c:70:b0:b7:6d:04:14:e3:79:23:fc:5c:3d:f9:
                    00:ca:38:d7:43:72:33:20:cd:f8:ba:a8:66:24:9d:
                    60:00:ba:aa:92:f4:fe:03:7c:81:65:fd:59:1d:53:
                    81:1d:db:70:44:52:90:47:7d:c2:de:f9:a0:ea:aa:
                    f4:6f:0a:d8:98:e6:4d:3f:40:8d:a0:1c:fa:91:0d:
                    80:47:6b:9a:e3:59:2e:fe:89:b1:71:ac:aa:72:97:
                    21:a0:10:25:b4:c5:e1:24:87:aa:8d:20:82:4d:63:
                    a1:a3:a1:92:e2:8c:c9:05:f1:0d:61:cf:8e:e8:10:
                    6e:43:40:f4:be:12:d8:74:c9:5e:3d:40:90:55:b2:
                    38:6c:04:f4:32:44:1a:ad:d7:e3:91:a5:96:15:cc:
                    d8:ef:ad:85:9e:42:6e:48:02:fa:b8:9f:e5:4a:24:
                    12:ba:7e:16:3c:44:16:86:68:f0:87:d7:76:91:21:
                    03:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8A:35:DA:91:1F:62:B9:54:E7:16:60:4F:A2:FA:BD:2D:7B:AE:B9
            X509v3 Authority Key Identifier:
                keyid:1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:a5:ae:70:ea:17:25:3e:21:68:6f:c2:6d:21:bd:37:be:a5:
         61:20:5e:02:82:91:04:52:ea:a4:48:32:a5:01:ec:f8:b5:c8:
         5c:f8:67:f8:6e:3b:56:1b:3b:35:06:fa:fe:ba:9c:43:a2:c0:
         88:51:ce:bb:bd:02:23:ea:f1:c6:41:c0:21:e8:b0:93:64:7e:
         ce:20:26:c0:1b:32:b3:e1:bf:65:a7:3e:2e:4b:75:26:28:5e:
         c9:fb:f9:73:e6:77:3b:d3:7a:72:d0:00:8e:3c:4c:5e:9a:f0:
         c0:32:3f:31:da:88:d0:cd:47:04:6b:32:f3:61:59:e5:da:bd:
         19:50:de:06:f1:77:d8:10:5e:75:29:26:ee:07:84:ee:86:f0:
         17:5a:a3:b4:31:28:80:71:e3:44:f3:6f:b5:5c:4b:18:e7:b4:
         5d:cd:69:48:7c:51:dc:a4:cf:27:e4:5b:92:f9:58:f2:29:0a:
         94:04:34:fa:23:87:36:4a:b8:69:fe:1e:53:2b:2f:ff:26:bc:
         2e:31:a0:06:ae:8a:f9:dd:74:ac:6a:d6:8b:81:5d:ce:69:a1:
         b6:ee:d2:fb:d6:d5:4e:de:fb:2d:41:35:e5:e9:f9:6f:51:8f:
         b1:e7:94:7c:3e:b2:27:20:23:ee:73:04:1f:18:b0:ce:1c:aa:
         66:4c:eb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:20 2026 by rpki-client