Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
File:                     FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft (raw, json)
Hash identifier:          dI6+kPYd/S4Iztiu4MxFVtsXMQDjDoNHYy6GUdqrWl4=
Subject key identifier:   9C:1C:D5:06:10:07:99:8E:E8:BE:73:46:98:48:36:B0:54:D7:82:B5
Authority key identifier: 15:3D:75:7B:77:06:7B:EF:D9:44:66:94:74:8A:D2:B0:4E:97:B3:8C
Certificate issuer:       /CN=153d757b77067befd9446694748ad2b04e97b38c
Certificate serial:       019E31F28BB78454678A3D7FD2156498E8F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
Manifest number:          1913
Signing time:             Sat 16 May 2026 18:00:39 +0000
Manifest this update:     Sat 16 May 2026 18:00:39 +0000
Manifest next update:     Sun 17 May 2026 18:00:39 +0000
Files and hashes:         1: 2_PmjSq2ymAnVudAlocm7T1tmn4.roa (hash: QSuT7TExW9U0JzR64tb3XYLCTidPjZYgevzpEmIents=)
                          2: FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl (hash: AjlClcaneioVaLVaNwuwiI95JjdJfDyV0Dxj12H29Z8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:f2:8b:b7:84:54:67:8a:3d:7f:d2:15:64:98:e8:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=153d757b77067befd9446694748ad2b04e97b38c
        Validity
            Not Before: May 16 18:00:39 2026 GMT
            Not After : May 17 18:00:39 2026 GMT
        Subject: CN=9c1cd5061007998ee8be7346984836b054d782b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:ab:e5:c3:41:01:cf:cb:94:6c:36:23:a3:d0:
                    b0:3f:c4:da:87:d9:ca:ab:68:7d:76:5f:a2:c8:45:
                    4c:1c:09:16:24:3d:33:47:23:30:21:2a:54:a7:6f:
                    05:2a:47:26:11:26:e0:55:6d:a1:4d:1d:23:7b:ec:
                    9d:25:39:c0:12:52:0d:19:96:5c:cd:e4:97:66:fb:
                    f9:a3:6b:43:8c:7d:0d:49:f1:51:ec:ff:b5:02:c1:
                    81:d4:20:0f:62:b4:3f:fd:7f:c0:38:54:cb:cb:47:
                    55:e4:7f:63:40:e7:54:74:f9:04:4f:18:de:02:85:
                    7c:66:0c:2d:df:ec:2d:33:d4:02:e0:84:48:30:3e:
                    88:ba:3c:9d:95:9f:35:6e:c7:47:60:a6:df:fc:ea:
                    da:5d:7c:6e:d9:8a:2e:e7:19:41:50:97:e6:c1:ca:
                    ae:ab:ab:40:72:1c:71:78:9a:b3:ec:9d:57:28:a0:
                    be:ac:08:82:e6:55:e7:ec:51:9d:84:d3:05:79:e1:
                    6f:2b:fa:28:ac:54:d4:41:e5:91:b2:28:cd:53:87:
                    24:2f:fe:33:45:cd:32:64:a0:09:13:3b:13:66:47:
                    6b:db:3c:1b:62:05:b1:d0:5e:da:a6:72:19:98:d8:
                    5d:26:db:43:c7:f7:21:51:05:37:98:2c:90:bc:7d:
                    eb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:1C:D5:06:10:07:99:8E:E8:BE:73:46:98:48:36:B0:54:D7:82:B5
            X509v3 Authority Key Identifier:
                keyid:15:3D:75:7B:77:06:7B:EF:D9:44:66:94:74:8A:D2:B0:4E:97:B3:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:f8:97:54:36:5f:5f:29:69:6b:c8:42:5e:40:58:97:53:07:
         6c:50:fe:d1:0d:38:52:5b:a0:f5:58:f9:b3:7d:17:f1:06:00:
         d2:43:42:b7:50:45:64:df:d9:de:59:77:fc:43:a1:26:6e:04:
         7e:f3:7c:03:94:37:a6:7b:76:ad:14:bf:2e:2a:a9:3c:25:ed:
         20:2f:d5:1e:30:52:2b:0b:da:74:cd:1a:1d:f5:56:c8:43:75:
         4a:3d:85:46:be:b2:63:4b:a0:f7:5d:b0:49:8a:26:76:9e:a4:
         b3:37:a2:86:b4:8e:7e:69:b7:8f:43:ae:b5:e2:60:fc:36:62:
         4c:ae:d1:48:a5:46:81:de:d1:13:1f:f1:8f:9a:83:15:9b:45:
         1c:f3:30:ab:16:03:bc:be:94:9c:b0:9a:af:b9:79:26:37:ba:
         c1:2b:29:e7:79:2c:a5:63:59:01:c6:5f:5b:97:e2:2e:1a:22:
         ee:7f:6c:b8:94:99:51:11:d8:2d:40:04:b7:88:32:f8:01:40:
         94:59:dc:b6:45:be:a7:5f:45:16:2d:de:10:79:77:9a:34:29:
         6a:a8:3a:80:54:8b:78:e1:16:12:61:10:b8:4f:d6:07:a8:cc:
         af:eb:18:5f:2b:73:cf:84:cb:06:23:e1:27:b1:c3:03:e2:18:
         cc:01:9b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:28:06 2026 by rpki-client