Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
File:                     xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft (raw, json)
Hash identifier:          D9ar/8l3fl4LDR7538qkE+S3erRt3UIdvlTsGiXsjzs=
Subject key identifier:   18:27:80:6B:AD:4C:78:30:07:24:65:50:6D:09:0E:2C:BC:4A:2D:E0
Authority key identifier: C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71
Certificate issuer:       /CN=c441738baab988b1d68693bb05e29bfbb4f0f671
Certificate serial:       019E2B4C0DB4720D9345B3CB9549CB0F1940
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
Manifest number:          1910
Signing time:             Fri 15 May 2026 11:01:04 +0000
Manifest this update:     Fri 15 May 2026 11:01:04 +0000
Manifest next update:     Sat 16 May 2026 11:01:04 +0000
Files and hashes:         1: 0sxkLDFdb4QelHCb0OZcMbO1jDM.roa (hash: 1xnWSoVsnQK8dLyDSxHxSRJdCC9QJVhSYDLS7qz0b0o=)
                          2: AjeR0O3ITsCO65xWw0QykqgxNA4.roa (hash: DgIKpLNUmEsPkrau/sY/HOWPCo1ggWtDwl6wxDzmrWM=)
                          3: JYg_CAMB4ZN8DGnRJNHFpnRes5M.roa (hash: 8yyEuQEPL63uz0pA2x8egSWHyWTxI5pMdw0GJbheT0g=)
                          4: XfbSuzWnSJ0R_yOnkIG4F7s1WPk.roa (hash: I7f3HuHYguoVsLgmKIELlpLwLVz1wyD/5cmJZXhghjI=)
                          5: cUu6zP1qDNJzdBpEfOD7tH9ZEq8.roa (hash: voL4FK/goy3Ucp4jv2hDvT1VmoRVg+99FBMAXu49zQk=)
                          6: sQNC3PZhtT00aBnksKdxFAVZzQQ.roa (hash: 0L2z2BzNlMPl3E12ZeAaZbBCG9ys89MDIPcvR5FtVNI=)
                          7: tfaKP8IvgQkAwmU3RK8qZmHmzts.roa (hash: hyWKZ+AjnMpt6LR61ItU5+Wmy9Q8i+PxJ269z65RWH0=)
                          8: xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl (hash: CrgunX68nEwNUFjK2oDT1xPdZeTdONsmxluLp9nnOzo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2b:4c:0d:b4:72:0d:93:45:b3:cb:95:49:cb:0f:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c441738baab988b1d68693bb05e29bfbb4f0f671
        Validity
            Not Before: May 15 11:01:04 2026 GMT
            Not After : May 16 11:01:04 2026 GMT
        Subject: CN=1827806bad4c7830072465506d090e2cbc4a2de0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9c:11:e7:89:37:90:c1:fc:c2:d7:49:fa:8d:
                    9e:24:31:41:bf:34:37:22:66:f1:35:e5:dc:f4:00:
                    88:2f:be:95:08:1a:92:88:56:06:76:64:19:7b:c6:
                    ca:30:39:da:95:ae:74:f0:a9:0c:e3:0d:c2:2f:62:
                    0a:01:3f:92:43:78:f6:c0:7b:b1:7b:42:a3:b0:06:
                    45:75:2c:41:08:c9:1a:4f:95:b4:45:10:e0:36:4d:
                    7d:db:d4:9c:91:39:9c:de:46:fb:3b:f1:52:58:0c:
                    4c:c8:29:d0:87:2e:7a:e6:3f:8c:c4:18:fb:00:63:
                    be:7b:b0:d4:e7:f4:19:c4:e8:95:24:83:36:8b:f2:
                    f3:6d:9f:9d:4f:25:8f:5d:cb:82:39:dc:b8:e8:9b:
                    3b:1a:39:3c:0f:4e:ef:83:2e:8e:56:d2:c0:15:27:
                    06:9f:2a:93:4f:7b:8d:75:94:1f:74:55:00:60:a0:
                    70:f4:a0:c1:47:ba:76:98:08:42:eb:9f:42:53:4d:
                    14:4a:fb:0e:09:75:90:a1:68:be:1b:73:91:25:ef:
                    01:64:39:e9:66:61:5d:2f:00:4b:b6:3f:c5:0e:8c:
                    39:08:37:2e:51:90:9f:72:26:f1:5b:ae:29:f9:b4:
                    62:24:ff:4b:71:14:1e:bb:c1:7b:ef:4b:0d:6b:a6:
                    b0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:27:80:6B:AD:4C:78:30:07:24:65:50:6D:09:0E:2C:BC:4A:2D:E0
            X509v3 Authority Key Identifier:
                keyid:C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:aa:64:fe:02:da:87:61:ae:02:c7:27:1e:39:51:c1:a0:fa:
         f5:0e:d1:33:e6:20:d7:3d:e1:2f:80:da:e0:48:59:84:1b:de:
         0c:42:e2:a7:e5:ab:b6:6f:56:84:d8:e9:67:b6:bb:7a:9b:76:
         f3:5f:9c:68:24:5e:d9:6f:fa:dc:fe:49:8b:9c:ac:03:6e:ee:
         bb:11:2c:4a:3c:0d:0a:84:1d:78:bd:6d:aa:80:46:25:c3:4d:
         4e:5c:4e:23:21:f5:ac:a7:47:0f:88:f4:9f:57:4c:7e:fa:68:
         89:f7:57:03:2b:98:e5:a3:43:f8:d9:4b:89:60:60:00:35:16:
         da:3b:f8:12:6e:58:94:79:0f:42:7a:52:88:5f:89:9c:b8:1b:
         d9:98:1d:86:ff:f6:da:41:41:e9:ec:8c:8f:6f:2a:1f:39:63:
         6b:04:3b:35:45:97:9e:59:c0:4c:10:6f:26:6c:3b:25:f0:ec:
         1b:93:84:dd:d3:89:f3:dc:aa:a9:2d:4b:68:f4:0c:ab:23:46:
         7c:2e:9a:77:60:7e:9f:99:4b:99:27:63:f6:d1:db:ad:0b:de:
         89:0d:d1:ee:35:71:af:64:76:16:0d:31:1c:ea:5c:e8:c5:0e:
         ef:92:5f:a5:16:8c:bd:a2:25:b8:d8:4d:ce:3b:26:48:06:f9:
         2c:2a:3d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:31:47 2026 by rpki-client