Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
File:                     PseNgibLWq_xXGdSWvK4q8t7X5I.mft (raw, json)
Hash identifier:          +fTPjIeN6tL+LOdM0o8D+o6/LEyohP0gHidsHigKKQw=
Subject key identifier:   33:71:2C:D4:0F:BA:31:FF:D2:5C:4D:1D:B0:77:F5:F2:EE:CF:22:82
Authority key identifier: 3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92
Certificate issuer:       /CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92
Certificate serial:       019E3072D1139BD7A46176B76E87C30CF1A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
Manifest number:          1910
Signing time:             Sat 16 May 2026 11:01:31 +0000
Manifest this update:     Sat 16 May 2026 11:01:31 +0000
Manifest next update:     Sun 17 May 2026 11:01:31 +0000
Files and hashes:         1: PseNgibLWq_xXGdSWvK4q8t7X5I.crl (hash: qXmikNqOysm2F4ZkUtv8HYHwuzEGotQorCHpgnyqMvc=)
                          2: qKVtlv3W7vjWS1xd7JwxDC1EnCE.roa (hash: pQJ4/lFMndf01cjoPvkJY3R02om+5915006Zk5RIRaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:d1:13:9b:d7:a4:61:76:b7:6e:87:c3:0c:f1:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92
        Validity
            Not Before: May 16 11:01:31 2026 GMT
            Not After : May 17 11:01:31 2026 GMT
        Subject: CN=33712cd40fba31ffd25c4d1db077f5f2eecf2282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a5:14:97:ae:75:43:75:6b:4f:c2:49:8a:39:
                    70:2c:82:c8:86:80:57:49:a3:81:10:c7:35:c6:51:
                    3e:de:4e:df:14:51:c5:46:80:1b:f6:64:f9:06:ed:
                    65:4b:8c:9f:b4:03:dc:b2:a0:20:27:02:cf:9e:e5:
                    a9:95:6f:04:e7:ad:a5:ed:7e:08:19:98:52:da:6d:
                    05:d2:d7:d2:c1:26:85:99:fd:c0:26:ab:16:38:45:
                    0e:76:24:dd:2e:b5:52:e3:52:07:1d:1e:ed:3c:b8:
                    9b:2a:8f:1f:22:76:cd:bf:0a:fe:6c:fb:e8:10:af:
                    f0:f9:2c:3d:62:9b:34:a3:d5:1a:fc:63:c8:41:9a:
                    5d:fd:fc:96:9f:04:47:f7:46:b4:da:ca:f8:5c:67:
                    7a:b7:13:40:75:10:e1:69:f5:28:b8:c1:f5:a7:b1:
                    54:11:d6:f7:c2:eb:ed:9a:35:55:a8:28:f2:91:ba:
                    8d:4f:e4:4a:df:45:47:5e:77:15:d4:3a:b3:de:ca:
                    4d:dc:92:33:a0:7a:dc:a4:3b:61:ad:7d:c6:5c:67:
                    3b:e3:1f:b2:c6:1b:f0:85:15:96:93:2c:3a:17:95:
                    17:db:58:30:9b:91:50:06:a6:37:e2:0c:ab:70:35:
                    2a:0e:25:2f:a6:da:52:8c:c7:32:c3:b6:c4:95:e7:
                    35:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:71:2C:D4:0F:BA:31:FF:D2:5C:4D:1D:B0:77:F5:F2:EE:CF:22:82
            X509v3 Authority Key Identifier:
                keyid:3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:ea:f4:0c:04:fe:c4:a5:86:b6:b7:a9:6f:e5:16:0e:79:04:
         b5:ee:de:84:3f:33:5d:92:31:a2:9f:d6:c7:96:4f:79:ce:ae:
         c4:d9:0a:f8:82:eb:d0:6e:76:c8:7a:82:4a:1c:c7:57:03:b4:
         88:32:e5:29:c2:88:71:db:47:73:c2:8d:3d:2c:14:b9:eb:aa:
         8d:dd:7b:e6:fe:93:0b:60:29:18:68:9f:f0:0b:47:7f:e0:0b:
         46:49:84:94:74:b8:c6:9f:e0:35:f6:42:d0:74:6a:50:9a:4a:
         d6:75:e2:b8:9f:e2:41:5a:4e:f3:f8:84:a4:e8:ad:ae:56:7c:
         64:06:d2:d4:18:4e:1e:a1:ec:6d:8b:5e:a4:21:aa:19:1c:59:
         ab:d8:fb:95:63:ec:64:cd:ec:b0:e1:c1:8e:c5:5f:6d:3d:28:
         f5:33:9f:cf:d8:66:2d:fe:92:cd:ba:71:98:c7:7b:3d:8b:20:
         fc:04:76:e4:f4:6a:af:7b:ef:ba:16:51:53:6b:2a:e6:41:98:
         99:18:c0:10:b5:97:37:19:e9:1f:d9:41:06:c6:f0:11:61:f7:
         67:e3:cd:9c:10:76:00:96:b5:76:50:2b:7f:f0:08:a4:7b:9d:
         e9:83:39:30:99:4c:6d:9b:8f:11:9b:f6:89:db:e5:ee:44:57:
         18:1d:d3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:01:33 2026 by rpki-client