Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
File:                     2qwVt4K8MnR7U43sKiIkFs1oSCU.mft (raw, json)
Hash identifier:          Z8ztS6+CYtM8xOL/Ckjc7YKyXejMguX64SGxV6d6gxo=
Subject key identifier:   6E:E0:3E:72:58:EE:3A:86:F6:52:0C:25:A8:B3:79:F1:91:1C:DD:47
Authority key identifier: DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
Certificate issuer:       /CN=daac15b782bc32747b538dec2a222416cd684825
Certificate serial:       019E30A9AA9C2AD1ADA5CBFD3CB86521CBEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
Manifest number:          1910
Signing time:             Sat 16 May 2026 12:01:26 +0000
Manifest this update:     Sat 16 May 2026 12:01:26 +0000
Manifest next update:     Sun 17 May 2026 12:01:26 +0000
Files and hashes:         1: 2qwVt4K8MnR7U43sKiIkFs1oSCU.crl (hash: MAqKGQcS8sFkOIUYSxI48WyicZfba50Scg2z+Ixtois=)
                          2: UDdtWtEx2c-mJVngKL09z-S1X_w.roa (hash: n8+XH3U5jIdTXKGtH/veEO5lPUmQphGGe2oVJecsaes=)
                          3: j--iZbKhUiVMwHzwORmmbSJgzjo.roa (hash: mVRAagqN+1SfRIHh7+tr93Mf4bRCPwynY5hRmiuICa0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:aa:9c:2a:d1:ad:a5:cb:fd:3c:b8:65:21:cb:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daac15b782bc32747b538dec2a222416cd684825
        Validity
            Not Before: May 16 12:01:26 2026 GMT
            Not After : May 17 12:01:26 2026 GMT
        Subject: CN=6ee03e7258ee3a86f6520c25a8b379f1911cdd47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c6:e0:71:75:64:b5:3b:8a:46:5a:1c:22:68:
                    04:d1:65:de:cb:c1:af:44:51:82:79:7b:5c:b0:3f:
                    5f:91:94:ce:50:34:6c:ae:68:b3:5a:99:b9:b3:32:
                    61:4a:0c:0e:14:4e:f4:81:13:64:15:1e:fe:48:b3:
                    08:e6:e6:dc:be:8b:29:5e:3c:dc:f6:9e:1c:0a:30:
                    2a:b0:1b:e5:4e:a9:f1:7c:e5:59:42:0d:7d:98:ce:
                    96:55:53:d7:6f:16:d8:40:5d:ca:9a:1f:a3:b2:41:
                    f6:5a:d7:c0:71:92:a0:d5:71:80:aa:39:4c:85:06:
                    4a:6d:64:28:af:61:ad:52:49:ef:1f:03:39:99:06:
                    24:9b:7a:87:e3:68:79:92:8d:76:d8:37:f6:5f:bc:
                    de:a9:cc:f5:21:91:0a:13:53:05:5e:5c:2c:0d:e0:
                    72:5a:c9:0a:05:a6:62:dd:e6:a8:9a:e8:f0:e7:4b:
                    b1:49:17:0c:ec:af:26:72:5c:f7:e3:b5:23:33:76:
                    17:11:a5:d2:d4:89:f9:94:6e:93:63:a2:e6:d9:70:
                    d7:a9:38:74:1a:07:eb:7d:2f:aa:07:52:2e:84:34:
                    20:3d:53:b3:aa:7d:01:7c:75:dd:3a:75:fa:a9:5f:
                    da:13:83:62:ef:56:3d:e2:62:e4:dd:cd:83:eb:db:
                    e1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E0:3E:72:58:EE:3A:86:F6:52:0C:25:A8:B3:79:F1:91:1C:DD:47
            X509v3 Authority Key Identifier:
                keyid:DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:8c:ac:ab:a8:e5:a2:99:ba:8e:82:9b:9a:fb:0f:b6:b2:1b:
         a6:16:27:af:41:de:a9:7c:5c:ee:e9:e4:0b:c6:e3:90:3f:4c:
         4b:05:bb:1e:76:57:a7:ee:e9:fa:c5:ed:5c:48:d3:b2:81:1f:
         c3:21:2a:d8:9a:43:39:c3:01:2f:f6:b1:36:ce:4f:d0:ab:79:
         9c:7c:19:84:fb:a9:2e:68:aa:11:17:34:d1:86:14:07:1b:9a:
         d1:18:08:5b:5e:41:4d:00:e3:76:61:6d:06:23:50:c8:0c:28:
         e5:84:84:17:a6:70:de:6c:03:99:1b:7e:82:72:83:ae:43:f9:
         b9:e5:b8:b1:0b:de:2f:ce:59:73:76:29:27:96:71:f3:d4:c1:
         7b:2c:e3:23:6c:53:96:1b:f2:26:22:66:cf:b4:8b:31:de:57:
         64:ee:f6:b6:50:d3:38:2c:4f:d1:26:be:e5:7f:fb:a3:5f:e6:
         50:bc:23:4d:72:96:fd:67:7b:14:17:bb:02:f9:d8:3e:92:9b:
         6b:99:9b:82:cf:cc:78:51:e9:da:9b:c2:37:b2:a5:35:84:97:
         83:a6:dc:8b:64:32:63:8e:e0:75:04:fb:77:e8:47:f5:c5:68:
         8e:bb:72:27:91:2c:7e:8b:49:36:56:19:c3:07:26:9d:66:8a:
         6c:8a:a1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:47 2026 by rpki-client