Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft
File:                     1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft (raw, json)
Hash identifier:          SbDFoYeDjDXTZBi+EsGg0Ns3gnUggLQT8QGKA+d68MA=
Subject key identifier:   14:49:89:73:E2:D3:21:7E:70:23:6E:BB:B6:CA:F6:08:0F:07:5B:04
Authority key identifier: D5:9D:3B:8B:04:4F:1D:35:FF:27:19:0B:75:75:F3:08:06:B1:13:27
Certificate issuer:       /CN=d59d3b8b044f1d35ff27190b7575f30806b11327
Certificate serial:       019E3073058AD250B9AC23E7E230249426B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Z07iwRPHTX_JxkLdXXzCAaxEyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft
Manifest number:          1461
Signing time:             Sat 16 May 2026 11:01:44 +0000
Manifest this update:     Sat 16 May 2026 11:01:44 +0000
Manifest next update:     Sun 17 May 2026 11:01:44 +0000
Files and hashes:         1: 1Z07iwRPHTX_JxkLdXXzCAaxEyc.crl (hash: QsiVAqVHSiZVyF/tTpKSx9wL0BtYgHfXf68NEACnfqU=)
                          2: svPKQJREMYzzw4nrwOykMCA6_Ws.roa (hash: OO4K57XkP/w3/FtcBT7vUzOVhuobiN05zaoo8Wri7/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Z07iwRPHTX_JxkLdXXzCAaxEyc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:73:05:8a:d2:50:b9:ac:23:e7:e2:30:24:94:26:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d59d3b8b044f1d35ff27190b7575f30806b11327
        Validity
            Not Before: May 16 11:01:44 2026 GMT
            Not After : May 17 11:01:44 2026 GMT
        Subject: CN=14498973e2d3217e70236ebbb6caf6080f075b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d8:d1:c0:f0:99:8a:7c:1b:6f:93:e2:5c:48:
                    b7:a0:8a:34:25:d7:32:46:82:bc:a5:55:86:c4:ca:
                    bc:1e:6f:c2:5b:ca:5f:35:c2:88:c8:17:53:17:80:
                    b7:71:66:a9:c0:80:92:bb:82:5e:82:fb:b0:5d:fa:
                    64:f6:13:3b:7e:ec:21:ec:87:79:53:23:e5:97:4f:
                    bc:37:7b:77:f6:f6:af:f2:87:e8:9b:75:b3:14:78:
                    46:3a:c4:a4:f4:04:77:0b:ad:6a:ce:23:0c:cb:e3:
                    66:29:c1:d7:d8:fe:75:a3:45:d0:f3:9f:3c:6a:88:
                    40:64:36:2d:12:83:ca:27:16:69:25:23:24:e3:18:
                    da:e2:f0:14:2d:26:28:f2:64:51:9b:04:55:5c:d5:
                    94:6c:d3:cd:8e:88:2f:56:49:75:d1:dd:75:87:dd:
                    f7:5d:a8:5a:cd:99:87:93:0b:7f:57:08:ce:60:21:
                    cc:4c:67:8e:1b:01:ab:f5:03:fe:4e:bb:a6:06:02:
                    1e:ce:b5:ec:d3:ab:a8:b8:61:6f:81:25:cd:3b:d2:
                    e6:92:74:26:67:be:78:c9:50:cc:ed:58:77:3f:cc:
                    ca:73:ef:c6:6b:b8:5a:b1:cb:7c:56:fb:22:eb:15:
                    f9:5e:98:4e:d5:55:cf:46:8e:58:86:12:6f:5d:40:
                    8f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:49:89:73:E2:D3:21:7E:70:23:6E:BB:B6:CA:F6:08:0F:07:5B:04
            X509v3 Authority Key Identifier:
                keyid:D5:9D:3B:8B:04:4F:1D:35:FF:27:19:0B:75:75:F3:08:06:B1:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Z07iwRPHTX_JxkLdXXzCAaxEyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:67:30:c9:62:a8:65:4b:59:00:51:7f:ee:30:2d:9e:95:46:
         56:8d:f9:c0:df:cc:68:51:88:29:92:65:33:bb:e7:d7:64:22:
         f4:ab:1f:ab:f2:f9:23:99:c5:05:d5:65:cd:0e:43:5a:c1:38:
         19:cf:a9:58:c2:e3:27:01:aa:8f:d9:9d:43:3d:d6:1a:79:40:
         c0:04:28:09:d0:74:8c:91:40:a7:48:50:74:1f:c1:b6:ea:6f:
         c1:e5:7f:99:fd:e2:2e:fb:e6:b7:35:5b:2c:f3:ac:2d:b1:4d:
         6e:c7:02:a4:78:d4:cd:76:a2:f1:1f:37:4c:ac:b8:9b:f3:39:
         8f:d9:b8:31:2c:bb:96:12:bd:c1:cc:ea:15:6b:16:02:f5:e2:
         c9:ac:3e:52:3f:73:2a:1d:a7:05:16:51:7f:c5:8f:c5:27:93:
         9e:e7:cd:65:ae:56:da:a3:d6:e5:21:aa:25:78:83:a3:02:f7:
         9a:6e:cf:c4:7c:e0:88:38:7e:26:29:85:c7:63:72:04:f9:8e:
         46:44:c4:f2:73:c0:e9:9e:ea:0a:8e:1b:72:bf:a9:e5:8e:1c:
         1e:2e:e0:1f:6c:15:53:e0:0f:5b:a9:6b:4c:1b:dd:4f:cd:65:
         7b:b9:22:38:e4:1b:5f:4a:0a:99:d1:d8:ef:6f:ba:af:bb:f1:
         e0:ab:b3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:24:56 2026 by rpki-client