Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
File:                     1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft (raw, json)
Hash identifier:          HLvqYmFanS/djUQNXny9fIfyfXWTHBWYauxFxhu0J1g=
Subject key identifier:   DA:0A:90:35:5A:70:B3:41:A9:BB:7B:0A:C9:F7:C1:43:0F:B0:43:2C
Authority key identifier: D7:F6:F4:82:7C:58:CB:28:F9:96:A9:AA:EB:34:8F:1F:D2:6A:0C:A5
Certificate issuer:       /CN=d7f6f4827c58cb28f996a9aaeb348f1fd26a0ca5
Certificate serial:       019E30056A1E6BA6976A425BEEA8289BDA1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
Manifest number:          1911
Signing time:             Sat 16 May 2026 09:02:01 +0000
Manifest this update:     Sat 16 May 2026 09:02:01 +0000
Manifest next update:     Sun 17 May 2026 09:02:01 +0000
Files and hashes:         1: 1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl (hash: vKfqggjIl6XZ82t+GaebeIE+IFotBcsK9MIGagCTmIU=)
                          2: L_TvjuvkS8Ae6hr2C351DvSCXtw.roa (hash: iKhq8WVW3Ih/b09mpbpUlZEB5fDDBgm0pJSp3ErD2hs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:05:6a:1e:6b:a6:97:6a:42:5b:ee:a8:28:9b:da:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7f6f4827c58cb28f996a9aaeb348f1fd26a0ca5
        Validity
            Not Before: May 16 09:02:01 2026 GMT
            Not After : May 17 09:02:01 2026 GMT
        Subject: CN=da0a90355a70b341a9bb7b0ac9f7c1430fb0432c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:44:7a:42:5e:bf:c0:24:55:9f:dd:a2:08:d7:
                    f8:c9:6c:d6:68:4a:ad:ad:0e:fb:ac:10:d4:47:4c:
                    f1:81:c8:56:40:30:f0:bd:ea:36:55:46:91:32:4a:
                    8c:10:cb:ac:1a:bc:11:f0:04:b2:75:82:02:16:e6:
                    5f:33:3e:82:23:11:a3:46:80:b3:50:16:60:0c:de:
                    db:57:2a:8e:6d:be:cf:43:2c:35:2d:35:17:64:db:
                    7a:c0:33:10:0b:c7:32:a4:79:6b:5a:83:57:35:04:
                    a1:5b:71:8e:a1:09:0a:73:49:45:77:6d:8d:13:13:
                    d9:83:26:34:70:f3:76:f0:09:19:f4:04:c0:54:df:
                    ac:38:4c:4f:e6:71:aa:42:93:ab:28:ea:29:62:5d:
                    84:b7:6d:85:6c:c1:b4:8b:22:80:a8:5d:f4:40:ce:
                    33:fc:0c:a3:1f:87:7c:b5:14:47:6a:b4:ba:8c:76:
                    5b:41:cd:63:fb:ab:e2:7d:e2:f1:3c:72:e0:25:69:
                    14:84:7f:36:64:d4:5b:32:d3:ff:c9:51:02:bc:58:
                    e9:18:29:e6:74:d6:9c:85:c5:84:ea:f5:c2:a8:aa:
                    ea:ce:23:45:71:a6:70:dc:c5:9c:f7:f6:be:10:47:
                    36:dc:03:36:4d:e4:61:25:16:57:26:74:0c:43:f1:
                    7c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:0A:90:35:5A:70:B3:41:A9:BB:7B:0A:C9:F7:C1:43:0F:B0:43:2C
            X509v3 Authority Key Identifier:
                keyid:D7:F6:F4:82:7C:58:CB:28:F9:96:A9:AA:EB:34:8F:1F:D2:6A:0C:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:da:64:ea:1c:84:ba:f2:e7:ad:c0:df:00:76:f7:3c:fa:70:
         a8:d6:3c:e0:86:0a:61:2c:6a:fd:cb:89:ad:3f:34:c6:ea:2e:
         a2:4d:d9:dc:c7:41:9e:55:64:89:0f:74:a6:ad:59:1d:87:09:
         98:36:f7:79:19:d4:78:e3:1d:ad:d8:73:aa:f6:14:43:c7:bb:
         f9:a9:98:d4:5c:07:07:82:83:a4:1a:38:90:2d:bd:35:04:44:
         4c:60:ad:57:06:49:c6:68:f4:7a:94:05:3e:31:08:24:65:0e:
         bd:12:55:41:f8:c3:26:11:33:9f:fa:cd:e1:9a:6d:5c:e3:e7:
         3d:73:3f:c0:2e:d8:23:3f:12:5b:34:6f:ee:1d:ff:2a:59:34:
         62:38:50:f8:ee:8a:df:36:00:a5:ee:04:82:94:d3:92:9a:ab:
         10:a9:4c:37:7b:8c:c0:15:a6:33:fa:81:46:eb:b2:22:17:2d:
         ba:9c:80:59:b1:da:a3:a0:65:71:d2:21:44:71:63:1d:ae:36:
         c7:ea:8e:53:73:41:1a:d5:71:0a:fe:06:8d:63:19:4e:c8:a8:
         14:eb:e3:92:92:2d:ed:24:43:55:9a:e9:87:37:55:98:3f:ca:
         b7:23:08:21:d9:78:12:3c:0d:17:bf:ec:be:af:31:7d:fc:49:
         5c:42:54:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:35 2026 by rpki-client