Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
File:                     s_7bUAlSbwxrrUI_AM2gigkzt4s.mft (raw, json)
Hash identifier:          3jWRkZnzv/TqNmZv42HGGSyfD3fWRvXwsBhqH4W/x2Q=
Subject key identifier:   7C:7E:B4:9B:26:9A:6E:79:F7:D0:0F:56:11:C9:AC:E3:50:43:EB:82
Authority key identifier: B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
Certificate issuer:       /CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Certificate serial:       019E303B0CBD379444E43ABB5411A77D28C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
Manifest number:          1910
Signing time:             Sat 16 May 2026 10:00:36 +0000
Manifest this update:     Sat 16 May 2026 10:00:36 +0000
Manifest next update:     Sun 17 May 2026 10:00:36 +0000
Files and hashes:         1: BSBTdISOwUSk76V2qhorPXUYcls.roa (hash: gMCNavqIUpRgqrn5vcMqwPcSr1Q6xSaeOjz/QGd0jJc=)
                          2: s_7bUAlSbwxrrUI_AM2gigkzt4s.crl (hash: UPiUM/Rp3rK4VLjPoL7KCKlzJVRJR0ABcIIeZEQEssg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:0c:bd:37:94:44:e4:3a:bb:54:11:a7:7d:28:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
        Validity
            Not Before: May 16 10:00:36 2026 GMT
            Not After : May 17 10:00:36 2026 GMT
        Subject: CN=7c7eb49b269a6e79f7d00f5611c9ace35043eb82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4f:6c:33:f4:b8:4b:75:be:b4:53:18:b9:5e:
                    eb:fb:ff:f9:d4:fc:98:9a:69:bc:3e:1a:c3:b1:de:
                    4e:f1:29:04:65:b7:e4:6d:09:48:cf:89:2a:82:b7:
                    58:72:f7:46:2f:0e:83:9e:48:1a:63:57:a9:b4:e1:
                    37:f6:1c:be:24:55:f4:66:c4:d4:76:d4:0c:fe:28:
                    a4:02:e1:6a:48:b3:80:00:d9:f2:38:e3:eb:03:c2:
                    9f:b6:b3:e0:1d:93:de:58:6c:11:79:f2:9d:bc:8c:
                    32:e0:bb:31:8c:bf:f8:75:bd:8e:ed:91:f0:1f:b3:
                    14:10:33:c6:97:16:0b:cd:bc:79:62:0a:95:4c:e9:
                    0c:06:c0:60:0b:5b:94:75:96:23:2b:d6:43:ce:60:
                    1a:8a:20:b5:1a:31:0d:d7:36:e3:fb:2d:3e:f5:e5:
                    48:fc:1b:bc:bb:72:25:6f:2e:0a:e1:a5:fc:cd:22:
                    db:50:3e:22:1b:68:55:f2:66:67:66:9e:b8:c9:34:
                    55:7a:28:a8:67:83:34:e7:13:90:e6:c8:34:80:2c:
                    35:fd:68:73:49:e5:66:12:17:4b:b5:f3:e3:4c:5f:
                    f7:ab:ce:f8:a9:d3:1a:00:d2:02:be:0a:22:9a:56:
                    c3:a5:2b:71:b9:89:e7:84:87:ba:d4:fb:d8:98:cd:
                    c4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:7E:B4:9B:26:9A:6E:79:F7:D0:0F:56:11:C9:AC:E3:50:43:EB:82
            X509v3 Authority Key Identifier:
                keyid:B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:c3:7c:48:01:ce:fc:36:ab:7f:43:eb:fa:44:bf:a6:13:c6:
         dc:c5:a1:b0:b6:d5:6b:e3:52:38:ff:10:99:44:a2:49:5b:b1:
         82:46:f1:07:a8:51:82:7c:6d:d5:61:2b:2d:d7:4b:a6:ad:ec:
         8f:8d:3b:54:6c:4b:5c:b4:46:3c:33:b9:61:e8:c5:00:c1:0d:
         9d:25:6d:e7:41:ac:36:3f:23:f6:65:54:1f:a8:32:72:f2:ed:
         bd:b3:50:1b:ef:76:14:4a:c5:c0:76:48:fc:8c:78:87:3b:3f:
         5f:d7:a3:2e:1a:0f:3a:e2:53:9d:27:16:23:52:af:25:6f:bc:
         ec:0d:a2:b3:04:f3:d6:59:ce:88:4d:64:04:9e:f6:e5:d1:42:
         66:37:99:d7:8d:c5:bd:d9:7e:8f:4f:29:04:89:d0:27:37:cd:
         74:19:e0:e1:34:a6:8b:67:4e:e2:58:1b:ed:30:bc:ba:57:da:
         52:38:c4:81:a9:05:0a:c6:1c:60:7d:b0:fb:4e:d5:4d:1f:63:
         86:20:e4:20:a8:f1:62:ab:1c:3e:fe:b0:00:9c:2a:01:ba:3b:
         06:a1:57:28:6a:b7:dd:1c:90:a6:40:21:5e:5f:fa:67:d5:fa:
         13:be:96:c8:4d:68:7c:ba:a2:8d:f2:aa:c9:7e:e4:10:d7:ad:
         16:31:8a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:29:42 2026 by rpki-client