Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
File:                     0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft (raw, json)
Hash identifier:          4c+Soh82jMWH+FWea628gQE+Z5q6rLIKYx3HlUA1N1o=
Subject key identifier:   44:FA:61:A2:26:84:FF:77:9A:AD:DC:48:90:D4:AD:91:B1:6D:6B:19
Authority key identifier: D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56
Certificate issuer:       /CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
Certificate serial:       019E30E0AF8BB4388CB5E649A3E771510A91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
Manifest number:          1910
Signing time:             Sat 16 May 2026 13:01:31 +0000
Manifest this update:     Sat 16 May 2026 13:01:31 +0000
Manifest next update:     Sun 17 May 2026 13:01:31 +0000
Files and hashes:         1: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl (hash: GygJU1k+4B3MLSHTgDPgxBUsBy2SbLcb5OtMNIh+KSY=)
                          2: DCqk_IhQ4FSiE_K9oD22DV8FaxY.roa (hash: NtlKgarvCVLW792kP4u1993m8xjj7hSbfL1JoLagIyE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:af:8b:b4:38:8c:b5:e6:49:a3:e7:71:51:0a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
        Validity
            Not Before: May 16 13:01:31 2026 GMT
            Not After : May 17 13:01:31 2026 GMT
        Subject: CN=44fa61a22684ff779aaddc4890d4ad91b16d6b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c3:63:39:be:fd:9a:1c:98:bf:02:1a:f7:27:
                    ad:d9:ae:e0:dc:46:c5:15:7a:ce:77:0b:65:31:cc:
                    cf:19:2b:76:31:ab:1d:9d:b8:69:b5:c6:e7:3d:9b:
                    9b:98:15:c6:1a:c6:ec:b3:ab:58:60:6b:07:6f:65:
                    15:16:9c:ac:43:45:dc:a8:e1:d6:b9:98:7b:28:40:
                    97:46:9f:e8:76:fe:fb:ee:db:c0:96:2f:f4:ec:f4:
                    04:7b:0c:15:b9:a4:12:8d:c7:46:2d:13:81:6f:81:
                    af:e6:97:90:32:31:2b:9f:f9:e4:15:7e:44:bb:ca:
                    93:7b:93:8e:82:30:3d:da:9c:ab:a9:22:43:0d:45:
                    0b:94:15:ac:50:f8:f1:cb:66:57:2f:05:40:49:b0:
                    c0:22:07:6b:0a:77:9e:ec:de:ce:31:66:17:f2:a6:
                    18:e6:1a:3e:61:c0:a3:30:d4:6a:95:84:7c:5a:0e:
                    62:84:fe:40:fb:af:fb:79:88:6e:90:f9:90:2e:99:
                    43:ae:70:29:d1:b6:3c:2d:42:c2:37:b8:96:74:86:
                    c4:a5:cb:6a:48:c0:8b:19:fb:82:8d:31:81:bf:26:
                    98:64:4b:f0:07:fc:51:05:7b:5b:43:0a:7a:58:69:
                    81:cf:f4:a1:fb:ee:23:73:e1:ce:fe:0a:bc:89:8e:
                    7a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:FA:61:A2:26:84:FF:77:9A:AD:DC:48:90:D4:AD:91:B1:6D:6B:19
            X509v3 Authority Key Identifier:
                keyid:D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:4d:02:79:3c:3a:b1:84:84:cd:13:8e:fb:c5:ed:a6:6c:d4:
         21:4d:a9:77:6d:60:51:ca:09:ae:fb:db:b3:22:a0:ce:4e:ed:
         b6:f1:d5:e5:12:b2:3c:b1:e8:c1:40:30:67:51:f5:82:17:c5:
         b6:19:a4:ac:14:b8:f6:0a:5c:46:3d:60:0f:59:b7:6c:e6:49:
         cc:8b:0c:25:0e:2b:20:a5:ab:09:02:90:6e:7b:84:cc:0e:4d:
         bd:30:0b:7b:30:7f:4b:54:26:50:7d:3b:19:0e:76:93:d2:64:
         58:d8:cd:41:5a:e2:cd:8d:7d:9b:69:5b:e8:f2:d9:84:4c:36:
         f5:8f:f3:5b:60:34:32:99:9c:c1:6d:db:9b:f3:c5:9d:6b:3d:
         20:c4:58:7c:b1:ac:7e:8a:81:31:74:92:d1:93:7f:a0:0b:68:
         30:b2:c4:49:5c:f9:df:43:8a:01:fe:af:3c:63:44:36:14:1d:
         3c:0a:c9:78:e1:1f:c6:cc:68:2e:3c:f7:79:44:54:41:c9:22:
         fe:56:83:3e:0b:f1:e5:75:dc:e8:f8:a5:5e:b5:37:18:be:82:
         1e:59:1f:b9:51:f9:6a:37:51:7c:18:d7:c1:3a:94:27:17:c6:
         81:e7:b4:a7:04:2f:25:df:3a:53:e2:00:59:8c:81:5e:28:a0:
         45:13:66:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:40:12 2026 by rpki-client