Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
File:                     pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft (raw, json)
Hash identifier:          EEY9DlI0OtWBawGchIGqfbhzpMCaOEYnqAjYDFg+VP4=
Subject key identifier:   3D:7D:BB:F1:55:0A:DD:4A:53:D3:71:42:1C:5C:60:3C:55:26:2C:37
Authority key identifier: A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A
Certificate issuer:       /CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
Certificate serial:       019E3229EF4D4BDEB30DCE067FC7423EA072
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
Manifest number:          1911
Signing time:             Sat 16 May 2026 19:01:09 +0000
Manifest this update:     Sat 16 May 2026 19:01:09 +0000
Manifest next update:     Sun 17 May 2026 19:01:09 +0000
Files and hashes:         1: pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl (hash: WIPbxrVYtqCjKeUuRXxos2clgxd+k4a2zTH5EWLj4SM=)
                          2: vRd4lkbID2XP7GTV89IAJrPGpPk.roa (hash: OzTqPtevWeZEZpJ3WDJJ/YsKofNfG0tZ601DSg2/22I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:29:ef:4d:4b:de:b3:0d:ce:06:7f:c7:42:3e:a0:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
        Validity
            Not Before: May 16 19:01:09 2026 GMT
            Not After : May 17 19:01:09 2026 GMT
        Subject: CN=3d7dbbf1550add4a53d371421c5c603c55262c37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8a:a5:3a:e0:7d:9a:a8:b6:1f:0b:a7:64:28:
                    4b:c4:25:a7:1b:ab:cd:19:6a:f4:71:fc:6c:37:4e:
                    59:39:bb:89:74:01:93:9d:56:00:09:20:e2:a0:d7:
                    58:55:7b:6a:ad:7b:26:8d:8a:33:a5:44:be:22:c4:
                    b9:7a:4c:b0:99:58:e1:cc:8a:40:52:e6:ed:36:bd:
                    fb:01:17:72:16:7b:26:2c:24:ad:9a:ac:4a:05:6d:
                    b9:5d:b8:3c:c8:2b:8a:c7:1b:cb:08:76:07:45:0d:
                    ce:93:2d:aa:9b:4f:bd:ce:8e:be:41:d0:da:a7:07:
                    a6:b0:92:b7:aa:da:22:3d:c6:1d:47:1e:29:85:cf:
                    9e:4d:38:73:a7:db:85:0c:a0:46:59:0b:a2:af:76:
                    2b:75:8d:21:e3:7e:b5:3d:01:27:a5:61:0d:15:02:
                    a6:04:89:0b:f0:9d:21:a2:d5:48:52:c5:2b:85:b6:
                    83:94:8e:e4:05:0c:99:bc:d0:7d:ed:00:23:8d:bb:
                    46:6e:b6:6b:d3:20:67:72:b8:9d:cf:c3:46:d7:3b:
                    72:69:8b:c2:9c:3c:45:48:06:92:e7:03:7a:ab:d5:
                    a2:f5:19:4e:83:57:eb:d2:07:64:b3:ff:79:8c:d0:
                    65:de:0e:89:a9:a4:ce:47:fa:dd:6b:e4:9c:c0:f8:
                    7d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:7D:BB:F1:55:0A:DD:4A:53:D3:71:42:1C:5C:60:3C:55:26:2C:37
            X509v3 Authority Key Identifier:
                keyid:A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:46:3d:26:45:5d:53:48:5b:16:f7:74:7f:43:fa:18:f7:a7:
         3c:73:77:c6:17:b5:40:66:65:bf:d2:10:9e:ac:60:77:79:24:
         85:50:23:cf:95:5e:e7:02:9c:ec:d7:35:d0:48:0f:a4:70:ec:
         8e:44:a1:22:22:07:9f:79:f0:20:be:ff:62:9c:95:9f:ab:25:
         d0:06:5e:01:7a:ec:07:37:24:64:ec:84:b3:05:73:81:94:47:
         90:82:ab:5c:d3:f3:06:e9:4a:c3:a6:e4:d2:f7:19:a1:93:9f:
         94:5d:83:3f:10:26:4c:82:e2:cc:a6:af:14:1f:e9:5f:fd:e8:
         8c:34:26:d9:94:8c:15:2f:aa:98:21:9b:8f:bc:6a:54:5d:4a:
         68:a1:4e:63:5c:8e:bb:03:e8:42:3c:a6:68:ae:49:e3:6c:04:
         e0:12:cb:52:c2:1e:a9:3b:df:13:d8:f9:a7:70:df:00:6d:9a:
         f6:6b:3a:bb:e7:33:8a:a8:65:ae:40:50:5b:c9:af:17:c6:56:
         16:ac:3e:db:f6:df:f4:76:2b:6f:ee:23:3a:94:9d:0d:45:b2:
         94:00:6b:1b:c9:ad:ac:f0:e4:ea:04:2a:1b:a1:c6:91:4b:6d:
         23:82:55:65:f0:55:a4:51:51:08:04:ff:42:32:a3:e9:76:e4:
         79:7e:71:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:01:10 2026 by rpki-client