Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
File:                     BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft (raw, json)
Hash identifier:          p7Y3/KfTw8G5Cbc8br8e8wxaDi4KWXkpNysLs341rgE=
Subject key identifier:   2B:D7:6A:9D:98:D5:7A:2F:93:9D:24:BF:81:9A:21:62:16:C5:5E:C0
Authority key identifier: 05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8
Certificate issuer:       /CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8
Certificate serial:       019E31171DDDF71C44EA6D91C1D733999504
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
Manifest number:          1910
Signing time:             Sat 16 May 2026 14:00:59 +0000
Manifest this update:     Sat 16 May 2026 14:00:59 +0000
Manifest next update:     Sun 17 May 2026 14:00:59 +0000
Files and hashes:         1: BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl (hash: zPsLvDy6N0GH4I0DkjnbqYeTmq1ARastweDbhMeH00I=)
                          2: p22i5NlXphpjpdeMcOJN9-jvrCA.roa (hash: QDB1Dxkmg+JHCcUldIxoeyJYQCEAZzbZFwoEItJyux4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:1d:dd:f7:1c:44:ea:6d:91:c1:d7:33:99:95:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8
        Validity
            Not Before: May 16 14:00:59 2026 GMT
            Not After : May 17 14:00:59 2026 GMT
        Subject: CN=2bd76a9d98d57a2f939d24bf819a216216c55ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:27:af:41:a3:1a:a8:47:aa:21:9b:f6:64:ae:
                    93:6c:6a:8c:c6:cf:d1:1c:bb:59:3a:4c:55:30:3c:
                    c3:56:34:74:59:71:81:65:3d:cb:de:ab:10:5a:eb:
                    b4:8d:3a:e6:2c:01:71:4f:0d:32:a6:9d:14:79:07:
                    8c:05:a3:a4:98:f5:f9:73:32:5c:b8:21:f1:24:c8:
                    8e:e0:af:11:82:a4:93:8c:75:c8:c1:0d:5a:1d:45:
                    d1:63:3c:bc:42:67:2d:93:2b:09:de:7f:2c:1e:8c:
                    ee:bc:a7:d7:82:6b:19:b2:78:f9:12:ef:83:bb:e7:
                    fe:72:2f:14:b0:29:e9:f7:86:37:f3:48:28:a9:91:
                    4a:6b:7d:fc:4b:64:34:5e:41:1e:62:75:3a:71:35:
                    bf:19:da:c9:50:88:f5:bd:5f:92:ee:80:6c:cc:43:
                    1f:92:49:ce:f5:4e:f1:17:22:2b:30:d4:d5:56:f6:
                    28:da:40:ed:25:a8:fc:d9:3c:9b:a3:6c:cc:a3:37:
                    e3:37:22:78:d7:31:c6:f1:90:98:59:1e:ff:66:ab:
                    42:1f:78:e5:2f:60:78:f2:5b:d6:3e:f0:fa:fa:c4:
                    e5:84:92:f1:1e:e6:6d:b9:5c:2c:89:7c:9d:51:83:
                    30:7b:d7:49:b9:2e:72:fb:7d:a4:a5:4c:08:2d:f7:
                    f5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D7:6A:9D:98:D5:7A:2F:93:9D:24:BF:81:9A:21:62:16:C5:5E:C0
            X509v3 Authority Key Identifier:
                keyid:05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:9a:f8:5f:95:f5:b8:15:fe:37:29:06:9a:66:0e:75:90:6b:
         ac:61:31:7b:8f:df:1d:6d:c8:9e:b4:48:2b:aa:f4:cf:c1:aa:
         90:b8:5d:fc:96:c8:e1:fa:f1:29:57:6f:7e:a6:99:40:fb:60:
         0e:a2:6f:47:8a:de:93:cf:2b:6c:bb:e3:47:23:16:04:c7:7c:
         63:53:ce:70:ec:3c:af:2c:51:c7:3c:d5:a5:70:3f:79:f6:72:
         2e:a3:07:08:c7:a7:1d:7e:f8:65:12:59:e7:15:79:45:29:17:
         f3:37:65:f0:04:9f:be:4c:c3:f8:60:e0:50:65:04:85:b9:1b:
         66:a8:e5:47:8d:2b:75:fa:d5:e0:13:91:f0:90:bc:16:9d:cd:
         32:4d:36:7a:d6:1e:9f:35:f6:ce:1d:2f:42:0a:a9:00:d0:49:
         e4:35:5b:27:ca:f2:12:1a:97:88:49:bb:f6:34:a5:20:35:fe:
         3e:6e:71:d8:c5:7b:28:77:82:83:86:bf:c7:cb:7d:b8:f2:59:
         0a:22:74:ac:30:82:04:97:d2:b4:a0:1d:40:ae:b3:2d:b1:ac:
         e8:76:b3:0b:0c:5f:47:ec:f9:4a:db:96:eb:9c:38:f5:c8:b2:
         5c:a1:80:f7:9f:5b:93:ec:ef:d1:1a:f5:28:54:ca:27:83:50:
         a8:0c:79:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:14:04 2026 by rpki-client