Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
File:                     Cx5y89CVf1puO9G4RKEqYUdEkCc.mft (raw, json)
Hash identifier:          F1pRrEGHS2GzN2/ZRO9aGo62oS32Af//mBFfH8yGqF0=
Subject key identifier:   F2:68:13:AD:95:B0:04:08:1C:97:C7:DA:F9:E0:27:A0:E2:5D:E1:30
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Certificate issuer:       /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial:       019E31F31DD637A0EC866E78D587EC276F4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
Manifest number:          1926
Signing time:             Sat 16 May 2026 18:01:16 +0000
Manifest this update:     Sat 16 May 2026 18:01:16 +0000
Manifest next update:     Sun 17 May 2026 18:01:16 +0000
Files and hashes:         1: Cx5y89CVf1puO9G4RKEqYUdEkCc.crl (hash: 4LoT3oXL5IvE+npAPLamHmAsDlGqA6w6BZUBEuZeOjg=)
                          2: GPIsYlil8kPkRS6gEM2NHsqbCFY.roa (hash: kvkFMQZNWkoCHYm6i5KcWUr0FuuwyQMeHon9wF+Il04=)
                          3: hsTKNuFtecu81R43BCP7v63FtKE.roa (hash: Jfq06SGiKWbDyYONhWT4ALN3kqL199bV3kH8pBzjomI=)
                          4: sJSAOEoKH3yqMibmQkkicbcwvd4.roa (hash: 3WriKsxAWFbvJqa+g1N1RIzhXWZvpso2ZA3Pg5F32hg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:f3:1d:d6:37:a0:ec:86:6e:78:d5:87:ec:27:6f:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
        Validity
            Not Before: May 16 18:01:16 2026 GMT
            Not After : May 17 18:01:16 2026 GMT
        Subject: CN=f26813ad95b004081c97c7daf9e027a0e25de130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:91:e5:a7:7b:fe:db:aa:96:24:28:be:03:7b:
                    7f:e4:0b:15:85:c6:e3:ea:eb:ff:09:28:9d:36:47:
                    1c:6b:50:54:7c:ff:de:0a:68:d2:ff:8a:dc:fb:ad:
                    b3:50:ed:e7:81:6d:19:79:3d:98:e8:4e:7c:d5:32:
                    83:bf:06:3b:fd:9b:3a:f8:b3:8a:fd:16:95:a5:56:
                    94:5f:df:b8:ce:b5:cf:a6:58:2b:71:b9:27:9d:a6:
                    8a:e9:16:d1:b2:81:b9:5d:42:86:65:d7:ec:f0:fa:
                    bd:70:3c:98:a0:63:29:e4:04:f5:dd:68:90:e8:d9:
                    13:38:98:37:f5:94:c7:6a:42:84:e0:5a:8f:50:0b:
                    cb:ea:04:ae:87:d1:5b:99:83:fe:95:48:10:b4:89:
                    e9:ed:f5:1c:e0:f4:c2:6e:f2:7d:1e:b3:04:7a:30:
                    5a:92:2f:11:a7:2d:73:46:b3:c5:94:8c:48:fa:0f:
                    4e:14:ea:fe:c5:be:2e:35:84:75:2d:19:e7:1c:5c:
                    44:c5:7d:4f:a4:5e:eb:6a:09:2a:38:46:80:ec:ff:
                    c7:67:d0:8f:92:20:44:b7:01:2d:a4:8d:f0:50:e3:
                    c4:46:6d:24:cd:c7:2b:02:5d:46:40:cd:70:94:89:
                    44:48:b3:c2:9b:e5:c7:21:65:ea:2a:aa:c3:1b:37:
                    3f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:68:13:AD:95:B0:04:08:1C:97:C7:DA:F9:E0:27:A0:E2:5D:E1:30
            X509v3 Authority Key Identifier:
                keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:13:d3:3d:60:71:2e:32:16:6f:83:0e:4c:ae:1a:db:ea:81:
         7f:d3:70:f1:47:e0:4d:a2:d4:5e:04:bd:0d:af:0a:1a:62:73:
         1a:a6:5b:38:27:75:b2:63:76:a9:82:e4:9a:4c:a0:b8:9a:80:
         ce:ba:92:b5:35:67:e7:5a:e5:ba:ae:d0:7f:3a:64:4b:38:5f:
         33:5e:e8:04:b4:2c:a4:e1:e7:a4:ba:76:af:35:d9:89:f3:d6:
         ed:ba:42:54:be:c2:d1:99:9c:f9:9e:55:a7:13:3d:9c:cd:63:
         dd:86:c6:4b:c3:b8:c4:28:90:ef:0b:36:e0:ee:8e:8e:c6:2d:
         c0:bb:d3:1d:8a:41:d3:f8:e5:a1:f0:14:e4:7c:44:cd:e9:73:
         9c:76:4f:a0:2c:a1:5b:8d:82:47:15:f1:75:37:84:e2:82:a0:
         89:04:78:b4:f5:f2:ad:95:3a:46:8a:a6:0c:5c:4f:46:f6:a1:
         d8:2e:c9:7c:39:48:af:4a:e0:4f:6e:d4:bf:32:92:ac:ec:84:
         f3:41:ca:46:4e:3f:a0:db:cf:ec:d5:e8:39:15:98:97:35:ad:
         95:a4:b1:a7:65:b6:27:1f:ad:b9:98:20:ab:97:e4:d5:de:08:
         7a:ac:29:8f:46:42:31:71:42:9e:a2:4f:3b:bd:44:d9:20:ff:
         cd:cb:d9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:41:21 2026 by rpki-client