Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
File:                     pb7DLWxk_7YB4nDO280-__XOekA.mft (raw, json)
Hash identifier:          HJ7UWLfzhHwpeV5MnKgVH9PmF10OvkmL0ACLAVYl1W4=
Subject key identifier:   F8:4D:CB:C0:87:04:59:9C:48:5F:95:12:CB:EB:0E:A5:0C:B0:E6:F7
Authority key identifier: A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
Certificate issuer:       /CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Certificate serial:       019E31BBBF598B1122F3415F75986B969697
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
Manifest number:          1912
Signing time:             Sat 16 May 2026 17:00:48 +0000
Manifest this update:     Sat 16 May 2026 17:00:48 +0000
Manifest next update:     Sun 17 May 2026 17:00:48 +0000
Files and hashes:         1: IxBdYAo13YF7sRrVQg3Z0e5Vbt0.roa (hash: tlcEeyFCaaPVcJ/vf8BbCsm35ivqUr1FJnJrFhHoj6A=)
                          2: pb7DLWxk_7YB4nDO280-__XOekA.crl (hash: LzMrmVFI2SH6XrHSd4zDIckQbTkZ7CWvhZ5hqg6y6G0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:bb:bf:59:8b:11:22:f3:41:5f:75:98:6b:96:96:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
        Validity
            Not Before: May 16 17:00:48 2026 GMT
            Not After : May 17 17:00:48 2026 GMT
        Subject: CN=f84dcbc08704599c485f9512cbeb0ea50cb0e6f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ef:02:64:4f:2c:10:b8:de:65:21:a0:cf:30:
                    40:17:e1:b8:39:79:32:c8:eb:68:b7:e8:47:df:0c:
                    47:3e:a6:ed:31:11:53:5d:a0:2e:9d:43:0d:15:c2:
                    f6:09:c4:70:58:59:e3:b2:74:dc:27:28:aa:c9:43:
                    ff:3f:d7:64:83:5e:0b:2d:82:fd:3d:55:cf:56:98:
                    be:47:66:3e:1c:62:53:47:36:01:2f:f7:46:97:12:
                    9e:3d:25:6d:31:f8:df:b2:c5:92:67:41:2e:59:d2:
                    98:b0:1c:2e:64:dd:3d:28:05:9b:b7:2a:46:8d:b5:
                    25:9d:dd:08:18:62:ce:d3:9a:ec:f4:74:c3:a8:89:
                    75:99:05:4d:f3:44:f5:24:74:9d:6d:96:8f:1e:6b:
                    4a:08:b2:65:d9:7e:df:4c:68:e9:e2:d9:70:36:37:
                    e7:77:13:6f:c4:e0:09:d0:86:4f:4f:df:4f:cf:fb:
                    a2:4f:98:42:42:7b:07:df:f6:24:cf:56:33:ea:41:
                    b5:86:d9:98:ae:5b:b2:95:cd:ea:9b:69:a2:0a:66:
                    5e:a4:ef:00:00:b8:8c:f2:09:72:45:c7:95:77:09:
                    d4:ec:bb:ba:37:cf:fd:88:f0:9e:bb:db:bc:c8:92:
                    ea:f5:17:80:8d:e5:5d:c0:ec:27:68:a7:15:92:20:
                    10:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:4D:CB:C0:87:04:59:9C:48:5F:95:12:CB:EB:0E:A5:0C:B0:E6:F7
            X509v3 Authority Key Identifier:
                keyid:A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:a4:67:aa:94:c2:4a:45:54:69:ec:9a:0d:23:fa:f8:a4:f9:
         5f:e3:d4:04:43:6b:f0:0b:54:64:b9:e6:d2:5b:7f:27:12:89:
         f8:1b:20:0b:b2:b5:65:e3:70:3a:f1:d5:14:c2:87:47:03:2d:
         c8:00:67:e5:f0:07:56:af:e4:0f:1f:76:0c:65:81:31:a7:d8:
         95:49:86:1c:ba:6a:a0:5f:54:6a:71:eb:2a:af:a5:44:fc:29:
         fd:25:33:07:72:6e:e0:e2:a4:57:41:9d:a7:02:e0:6d:75:a5:
         e0:38:4f:4b:3f:b4:50:c3:aa:de:90:47:f5:9b:65:8b:af:1f:
         94:cf:3e:dc:e4:8f:b4:90:5a:56:6b:6e:55:6a:50:50:aa:37:
         27:14:c7:3c:92:a6:57:66:e3:cb:6d:b2:50:fc:f7:ce:95:de:
         8a:92:4d:8f:74:36:b4:a6:2a:31:53:28:5e:c6:51:54:0d:4f:
         31:ba:7d:8a:f2:83:e7:86:fb:44:93:c8:0d:c7:97:59:2d:b0:
         3a:f4:06:9e:64:91:81:47:77:4f:9f:de:cb:eb:d5:34:95:96:
         a9:e6:e4:ca:b4:40:d3:79:76:a2:19:c3:89:dd:80:29:8c:97:
         99:9a:78:f5:c9:a9:4d:81:ca:ab:dd:03:6b:72:3b:3d:f5:7b:
         6e:8a:07:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:40:14 2026 by rpki-client