Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft
File:                     1ROHJRLx8tA3tAHCYDyomU5yHlU.mft (raw, json)
Hash identifier:          edxKnrLjMtNRUIhoc0o5lcz7xLfcUmhf55Zi51E/6+U=
Subject key identifier:   92:63:57:C9:D6:09:85:10:FF:7D:80:18:69:83:D8:E0:A6:C5:DB:BD
Authority key identifier: D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55
Certificate issuer:       /CN=d513872512f1f2d037b401c2603ca8994e721e55
Certificate serial:       019E284BCD7B597A91683A1164F7BAD506E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft
Manifest number:          1918
Signing time:             Thu 14 May 2026 21:01:56 +0000
Manifest this update:     Thu 14 May 2026 21:01:56 +0000
Manifest next update:     Fri 15 May 2026 21:01:56 +0000
Files and hashes:         1: 1ROHJRLx8tA3tAHCYDyomU5yHlU.crl (hash: ZZAMoVWRiMJF5frgAyTVsD/MBeIerqW8VsWw07ZG4Mw=)
                          2: QpYzfBnkNKh1yttKF2r35caalhE.roa (hash: ErOSkBHWiEYZj20zKnAchEbhylp7yOAjTawscXS8Sqw=)
                          3: VI84dAQT7kBRBItG-CpBi1i7u2o.roa (hash: PcXRGeOwzKCNST2FKMw8zsw2WTFr5u++h/7gasiKs04=)
                          4: j60o4dW09KsfcomsLl91WfS5uIs.roa (hash: orsN4oeQS9rxzvmJ709FrlKbBIl59zacw9FKE6EQoA8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 21:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:4b:cd:7b:59:7a:91:68:3a:11:64:f7:ba:d5:06:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d513872512f1f2d037b401c2603ca8994e721e55
        Validity
            Not Before: May 14 21:01:56 2026 GMT
            Not After : May 15 21:01:56 2026 GMT
        Subject: CN=926357c9d6098510ff7d80186983d8e0a6c5dbbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ff:e1:6e:79:ff:fa:66:c1:53:71:3a:17:0e:
                    d9:0e:3f:cb:14:f9:f2:18:5d:5f:e4:94:3a:33:9a:
                    68:17:31:5c:fb:de:57:5f:1c:d6:01:a1:6e:e7:9e:
                    45:7b:d3:80:98:cd:66:58:52:f1:05:0d:6e:eb:44:
                    60:25:91:f2:1c:75:73:90:64:2e:44:ad:c9:96:2c:
                    10:93:6b:43:c5:1a:e0:6c:a1:ab:59:76:90:cd:61:
                    25:57:e4:a8:14:77:83:7f:3d:c8:81:09:85:c0:34:
                    cd:1d:57:57:17:53:b6:3e:7f:60:bd:39:ab:98:c4:
                    dd:62:88:19:22:82:41:f0:90:b7:34:0c:fb:1a:32:
                    e7:3d:0b:0b:a4:b1:1c:1c:2f:bc:da:c9:50:fc:68:
                    92:ac:ba:47:9f:c1:bf:35:3a:ec:55:68:43:33:dd:
                    9f:f8:cc:0b:f4:b2:40:d8:97:f6:7d:0a:fb:70:30:
                    5a:aa:37:7c:04:dd:34:0b:e3:94:e3:77:8e:ff:fb:
                    06:95:77:a5:53:b4:cb:98:f0:97:f6:bd:19:62:73:
                    44:e5:1c:d3:f5:21:54:4f:67:f4:1b:25:0e:8d:58:
                    c8:ce:a5:39:2d:6d:1a:88:83:96:c1:c6:e8:f8:5a:
                    c8:72:f3:96:6a:d9:81:29:7b:75:72:84:09:b6:4c:
                    50:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:63:57:C9:D6:09:85:10:FF:7D:80:18:69:83:D8:E0:A6:C5:DB:BD
            X509v3 Authority Key Identifier:
                keyid:D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:16:a1:d2:c3:1c:fb:f8:c2:52:23:1f:29:86:e7:74:9d:6d:
         db:8f:fb:94:58:af:fb:98:9c:c0:46:ff:79:ae:0d:11:ad:c4:
         97:91:fd:9e:55:6a:50:da:3a:c4:db:b0:9f:03:ed:c1:54:ec:
         d8:e4:36:5d:f1:63:d2:b5:10:96:40:a1:01:21:45:ee:38:02:
         04:66:99:1e:45:24:33:68:09:e2:78:dd:bf:9a:f3:11:ef:73:
         5d:9e:ec:d3:9f:59:30:dc:98:ac:a6:57:19:de:4b:20:3f:53:
         77:26:79:cd:ec:fd:9e:43:55:c2:c3:22:8c:f8:57:bd:08:c3:
         df:10:8e:1b:7d:41:53:e7:64:f4:e3:e1:d5:5c:a9:a4:4a:f7:
         7d:63:bc:52:1f:37:f2:a8:c7:86:8a:29:8a:11:ef:fe:12:a8:
         55:29:59:2d:e0:2a:72:10:b9:cf:6b:ed:f9:2d:2b:0a:c0:70:
         16:c3:80:65:c5:66:64:8f:c1:bf:f9:af:ca:ba:42:29:0b:92:
         9a:84:ed:8e:7c:53:6f:50:13:0b:70:85:d3:e7:8a:6d:2b:4c:
         ff:2a:71:59:ef:c1:76:be:06:44:7d:f9:74:6c:4a:db:ab:9b:
         83:bf:80:fd:8a:8b:b1:42:b4:94:7f:8f:49:5a:e6:96:fa:24:
         17:9e:c7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:59:01 2026 by rpki-client