Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
File:                     f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft (raw, json)
Hash identifier:          6+3JCMJOeH77DgT8gropqLNXoQp5uzf+1psS3SU7mKI=
Subject key identifier:   3C:26:AB:85:D8:7D:D8:13:9D:FC:BF:1B:83:62:6E:66:EB:F0:64:78
Authority key identifier: 7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB
Certificate issuer:       /CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
Certificate serial:       019E322A082AA23409D359760AE320F1835D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
Manifest number:          1917
Signing time:             Sat 16 May 2026 19:01:15 +0000
Manifest this update:     Sat 16 May 2026 19:01:15 +0000
Manifest next update:     Sun 17 May 2026 19:01:15 +0000
Files and hashes:         1: 1-JpO8q1qatRpRIjMok1nlLPPJtY.roa (hash: lxSDrjSJfDdxFsFnnvYvxdk4e0Y7x830KJAg7m4hvFQ=)
                          2: 3kbw1gEBJPgdXB0IaWihDI9SnkY.roa (hash: wc+w33BWiYv9rEBwRELoelpcxbBZ5Kq+Pp0M0nU7gkg=)
                          3: AkISYLOC_fnGrIUjLvM1LtDRQ5k.roa (hash: SsHVMDv4qWTRMiOyQPgpmacaVt+8MOyUS0XN6APKH7k=)
                          4: f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl (hash: 05lUt8Hp0bi+cCyCDn09Ir0x1oP1rolIkveA/352H1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 19:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:2a:08:2a:a2:34:09:d3:59:76:0a:e3:20:f1:83:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
        Validity
            Not Before: May 16 19:01:15 2026 GMT
            Not After : May 17 19:01:15 2026 GMT
        Subject: CN=3c26ab85d87dd8139dfcbf1b83626e66ebf06478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:63:aa:b3:63:e0:95:46:df:1b:2f:51:a6:4d:
                    fe:ad:23:55:c3:13:d2:a2:69:ed:3d:8b:04:80:97:
                    99:57:88:4e:c0:f5:3e:e1:6f:0c:3a:e3:76:0c:05:
                    b0:ca:3a:fa:66:ff:32:b6:4b:8d:b6:7e:eb:e6:c1:
                    23:1e:85:76:05:ef:6b:b2:b3:35:44:c8:17:c8:81:
                    51:46:c0:f6:21:2d:77:4d:c0:2d:31:f3:8a:fc:ba:
                    90:44:46:f3:51:b0:7d:0a:d7:a1:ba:ef:d9:f0:3e:
                    ad:1a:29:0d:a3:a7:b2:46:30:5c:31:c7:11:93:c1:
                    26:27:48:f1:ce:e7:14:18:78:79:0b:6a:2c:f0:02:
                    42:e5:e8:5f:8b:44:f6:80:92:b1:9f:ba:29:5d:22:
                    cb:a2:33:d2:1c:92:ae:3f:93:25:bb:3e:ae:2d:64:
                    b5:6c:df:97:c8:41:28:23:38:1c:45:3d:e0:da:de:
                    97:8c:21:17:e0:36:00:ca:f0:14:3f:63:06:57:ae:
                    63:58:31:17:c8:ed:1d:0e:38:e3:d8:e9:98:f4:c1:
                    52:2b:f3:e9:66:37:7d:01:90:07:bf:c3:49:18:26:
                    96:e6:9d:4e:e4:f6:f9:78:c1:3a:1a:d9:8a:92:cc:
                    ea:d6:c4:69:d8:cb:86:0b:f9:5c:51:5b:14:23:09:
                    1b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:26:AB:85:D8:7D:D8:13:9D:FC:BF:1B:83:62:6E:66:EB:F0:64:78
            X509v3 Authority Key Identifier:
                keyid:7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:c7:bb:32:4a:26:f9:b9:20:6a:f6:20:d8:63:a3:25:f6:1d:
         fe:e2:6b:89:e7:06:3e:68:cc:7c:83:a1:a9:05:30:45:52:65:
         c1:16:fc:f8:2a:d2:d9:2a:40:e8:e1:8e:02:c3:d2:fc:0b:74:
         af:a6:12:e7:42:bb:cb:97:75:57:8e:43:fe:14:ce:c9:35:c9:
         55:bc:f3:66:c8:d4:1d:f3:83:79:3a:76:32:bb:15:2e:3f:90:
         cd:29:56:d0:fe:9c:7d:91:c7:9e:c0:d6:2a:d8:75:16:32:88:
         a0:0d:6e:9f:07:1b:d0:a7:a9:c1:d1:86:f6:05:29:cb:5f:81:
         54:13:c8:da:13:1c:37:b0:0f:18:ae:88:19:70:7c:5a:22:53:
         79:07:3b:1f:47:79:ca:9c:30:c4:02:63:ca:a6:f1:19:f1:d8:
         ca:80:a8:82:b7:50:ad:4c:3d:48:46:b9:bc:53:8d:c7:28:eb:
         71:cb:03:4f:e8:52:74:bd:c6:5d:16:1a:47:46:cd:ab:00:9b:
         40:78:93:ab:3b:0a:cf:93:af:e0:70:10:55:d2:44:5f:fd:cd:
         26:d9:e8:69:cd:e2:d8:e3:bb:df:75:c8:6e:70:9e:e6:85:17:
         7d:dd:9d:8a:7f:84:33:a1:76:2c:31:65:c5:9b:66:2f:ec:71:
         18:7a:0f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 01:07:25 2026 by rpki-client