Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
File:                     1-lbH5mCxx047AxixQzjD8A3XvHI.mft (raw, json)
Hash identifier:          DeZpDXMoZYbZzPWun4iqjeB5Af2NXiHaWWoh+ah9ufI=
Subject key identifier:   A5:33:19:B8:83:2A:2E:88:16:2A:60:81:66:EB:59:88:5F:7A:7A:CC
Authority key identifier: FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72
Certificate issuer:       /CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72
Certificate serial:       019E3184FE6EB39076A6C7F8A58A5C4F8747
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
Manifest number:          1914
Signing time:             Sat 16 May 2026 16:00:59 +0000
Manifest this update:     Sat 16 May 2026 16:00:59 +0000
Manifest next update:     Sun 17 May 2026 16:00:59 +0000
Files and hashes:         1: 1-lbH5mCxx047AxixQzjD8A3XvHI.crl (hash: 6T5D68pNGZJBwgzYomcFJjYoRY8TT0DGwrKcQaOuK+s=)
                          2: B_KGcXQ0DuIdghhkI0CttQjaBiY.roa (hash: vrjC5dTNYvxDZ+tn/uxjJ/eLDEIZEWZ3qbbhNWSnHdg=)
                          3: Fzbx011u7RVOot7S1xohG9qyhz8.roa (hash: d3cH8nlBzo4ygFaoC3yncTUnU72/qEe1SfOmm7ZS+sU=)
                          4: ZMvIxxGP7qocWq6cskVSeYzqx0o.roa (hash: 3C3h+rU23U84LO7lG7BTF7dtlYQvYrPkr1tHRpjMHRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:84:fe:6e:b3:90:76:a6:c7:f8:a5:8a:5c:4f:87:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72
        Validity
            Not Before: May 16 16:00:59 2026 GMT
            Not After : May 17 16:00:59 2026 GMT
        Subject: CN=a53319b8832a2e88162a608166eb59885f7a7acc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4c:85:f7:ce:08:5e:08:f5:95:10:d2:c2:27:
                    d2:51:f3:a5:02:ee:de:f2:a4:0a:b6:c6:6e:a7:90:
                    d2:cd:c1:69:e9:f9:e7:97:16:b0:84:47:dd:de:68:
                    3e:10:99:6e:d6:7f:92:fb:50:e1:28:71:ca:93:3d:
                    40:01:0f:bd:67:af:85:2d:1c:65:39:c7:2e:ff:f3:
                    2a:94:6d:8e:5d:26:6f:56:ed:07:9a:de:4d:da:74:
                    04:80:7b:9b:0e:29:dc:df:4b:7c:ca:dd:83:c9:b3:
                    7d:ee:77:ab:c1:69:9b:a2:af:f0:7c:8f:ac:8f:72:
                    f6:31:26:4f:e8:23:f2:87:7e:7b:47:c8:41:ed:21:
                    f3:1e:b9:7b:1b:c5:3e:7c:13:61:86:7c:2f:3e:7d:
                    66:ba:5b:b1:0a:c8:b1:50:de:cb:c9:20:46:55:bd:
                    84:5a:f5:58:3e:d2:9e:d5:69:87:cc:5e:e7:72:df:
                    f1:cd:0d:44:03:16:cd:ba:bc:0d:c6:4f:37:31:9a:
                    e4:a8:60:7d:9e:7c:a4:89:9c:72:53:3e:2b:61:64:
                    96:ae:16:83:10:3f:ee:a1:e2:f8:ac:9a:19:82:ae:
                    ad:b7:4e:90:d4:10:25:0b:bc:e1:fc:b1:0e:43:0b:
                    2a:4e:66:87:6d:ae:e0:8e:76:1d:e8:f4:4d:1e:64:
                    0b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:33:19:B8:83:2A:2E:88:16:2A:60:81:66:EB:59:88:5F:7A:7A:CC
            X509v3 Authority Key Identifier:
                keyid:FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:2d:fd:93:29:33:55:7b:f5:41:7c:e8:af:1c:55:d3:39:4c:
         72:f3:71:23:f5:30:62:15:c4:cd:18:6f:36:36:6b:17:20:51:
         13:98:24:ac:83:31:8d:34:6a:9a:4f:c4:e1:a2:e5:48:fb:e8:
         b7:f3:02:c8:61:53:db:69:81:6a:09:de:07:af:f3:64:a1:ed:
         30:ba:47:d4:e8:5f:60:30:09:fa:5d:c9:a1:09:d8:81:c5:82:
         cc:fa:3b:4a:47:9c:84:32:a0:3d:f6:a5:a1:c5:22:eb:e8:78:
         d5:f7:c4:08:1e:24:25:39:a4:c8:b3:70:f6:1b:46:e6:9a:30:
         a7:d6:c7:e1:cc:5b:ce:c1:1c:4e:77:04:19:c5:fd:97:26:71:
         94:9c:4b:59:d5:fd:a5:08:dd:25:d4:d8:06:b7:ec:83:bd:c9:
         e3:36:8a:ab:f8:55:42:b9:d9:48:bf:ba:7d:b5:02:36:97:6b:
         9b:94:d5:40:93:28:ba:38:46:00:01:f4:2e:98:94:72:cb:f9:
         b2:ad:33:17:9d:cd:3f:84:29:b5:2a:c0:04:5e:22:b7:9c:fe:
         a5:b5:ea:95:97:0e:27:9f:e9:42:ee:3d:07:93:e7:3f:78:04:
         f5:b4:9e:bb:a3:9e:09:ea:5c:43:b3:bd:de:d9:3c:56:78:4c:
         d2:43:39:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:40:29 2026 by rpki-client