Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/192afd-e08e-449e-80d0-98ca75018dbf/1/c2yDRp0oB-vjlxFbvYT5RIjMgUs.mft
File:                     c2yDRp0oB-vjlxFbvYT5RIjMgUs.mft (raw, json)
Hash identifier:          Uw8T+FdKzkiQEGJk3k10UT1klvvQZYfsUrh2bMPNh84=
Subject key identifier:   E9:DF:FD:1F:5F:13:5C:58:32:34:97:3F:FA:88:97:72:A5:BC:BB:21
Authority key identifier: 73:6C:83:46:9D:28:07:EB:E3:97:11:5B:BD:84:F9:44:88:CC:81:4B
Certificate issuer:       /CN=736c83469d2807ebe397115bbd84f94488cc814b
Certificate serial:       019E3117C4F88200ED2A8E644A2BB6B484D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c2yDRp0oB-vjlxFbvYT5RIjMgUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/192afd-e08e-449e-80d0-98ca75018dbf/1/c2yDRp0oB-vjlxFbvYT5RIjMgUs.mft
Manifest number:          22
Signing time:             Sat 16 May 2026 14:01:41 +0000
Manifest this update:     Sat 16 May 2026 14:01:41 +0000
Manifest next update:     Sun 17 May 2026 14:01:41 +0000
Files and hashes:         1: WCRvbp_nJ61w_L7dB6Hf7IOGAtY.roa (hash: 64WvdrrvzHpzDzkmPq1Up/4HxutVHHLjzEFwNnqxnK8=)
                          2: c2yDRp0oB-vjlxFbvYT5RIjMgUs.crl (hash: CoAQ4OySiZ9aPrjqUSi92LIV2mRcR0QpoMdTF1CvZ/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/192afd-e08e-449e-80d0-98ca75018dbf/1/c2yDRp0oB-vjlxFbvYT5RIjMgUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/192afd-e08e-449e-80d0-98ca75018dbf/1/c2yDRp0oB-vjlxFbvYT5RIjMgUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c2yDRp0oB-vjlxFbvYT5RIjMgUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:c4:f8:82:00:ed:2a:8e:64:4a:2b:b6:b4:84:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=736c83469d2807ebe397115bbd84f94488cc814b
        Validity
            Not Before: May 16 14:01:41 2026 GMT
            Not After : May 17 14:01:41 2026 GMT
        Subject: CN=e9dffd1f5f135c583234973ffa889772a5bcbb21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:86:5c:40:fa:9e:44:73:d4:e3:8f:da:84:36:
                    95:1e:32:4f:25:f0:9a:8d:4d:ed:c3:56:5f:3b:1a:
                    3d:81:a1:c6:5e:12:80:69:1c:bd:dc:02:c3:ea:e3:
                    1d:1e:43:2d:d1:57:32:22:b6:ac:b4:f3:64:03:4b:
                    f0:d1:2c:4a:a0:0a:e1:cf:20:db:c3:1e:c5:83:74:
                    6d:da:df:0a:54:e3:7a:a9:f6:1a:0b:09:35:7f:f1:
                    c0:4c:19:9d:9e:0b:ec:1f:e8:a8:e1:5e:46:1d:a1:
                    c3:62:6f:21:cc:87:c3:56:e7:ed:db:50:a2:08:23:
                    2f:f7:c0:e0:1b:1b:30:a5:7b:ef:d7:92:78:91:ce:
                    a0:ea:ad:9a:7f:04:32:29:7a:10:b3:53:c6:ab:86:
                    fa:f6:e3:ba:85:1b:64:86:72:4b:c6:e0:98:5c:b3:
                    81:df:86:ad:d7:3d:4e:61:d5:dc:04:65:1f:34:14:
                    c1:ea:df:3b:72:96:c7:a6:6a:93:8e:8c:37:32:f0:
                    26:4e:d3:70:08:e0:3b:3b:66:85:dc:fb:36:b7:ea:
                    2b:0c:c8:05:35:19:c3:31:fc:39:f9:72:d4:54:0f:
                    5d:73:6f:6b:2b:6e:ae:6a:08:84:d0:c9:c9:08:0c:
                    38:49:10:9f:d2:3f:1d:ae:72:2c:c2:34:9b:c1:c8:
                    cf:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DF:FD:1F:5F:13:5C:58:32:34:97:3F:FA:88:97:72:A5:BC:BB:21
            X509v3 Authority Key Identifier:
                keyid:73:6C:83:46:9D:28:07:EB:E3:97:11:5B:BD:84:F9:44:88:CC:81:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2yDRp0oB-vjlxFbvYT5RIjMgUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/192afd-e08e-449e-80d0-98ca75018dbf/1/c2yDRp0oB-vjlxFbvYT5RIjMgUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/192afd-e08e-449e-80d0-98ca75018dbf/1/c2yDRp0oB-vjlxFbvYT5RIjMgUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:8d:9f:49:06:e7:5e:5d:3a:b8:97:c7:ec:f8:4f:44:3b:1e:
         93:0e:ba:ff:bd:9d:8a:6e:2f:ec:92:3e:60:02:8d:02:89:b0:
         6c:dc:6e:03:d1:e2:17:4a:a2:4a:71:50:f2:3d:c2:69:87:89:
         de:e0:a3:bc:c9:28:4a:36:3d:be:c4:0e:47:90:20:d7:0d:be:
         8a:3c:3f:15:19:f1:f3:f7:8f:38:3a:16:74:d3:36:37:c6:d8:
         9c:30:e9:5f:4e:f5:c0:6c:cb:55:79:0b:2d:07:6e:b3:95:f3:
         e9:56:e0:22:fd:b0:3f:84:e3:01:fc:ce:f4:d3:e7:ef:31:59:
         45:2a:72:1d:c6:05:9b:93:d9:6d:0f:fb:c6:9d:3a:35:9c:48:
         85:7c:37:db:0c:63:d3:8e:79:1a:ff:86:0f:e3:16:5d:fa:a1:
         eb:aa:6f:c2:31:1d:eb:40:50:45:6f:a2:7c:45:6d:5f:72:68:
         bc:33:e1:20:51:f4:b7:84:a6:6c:97:19:3f:3e:f8:60:2c:ec:
         59:31:97:fa:0b:2a:07:1d:97:ad:eb:eb:d9:2c:45:d7:f5:e8:
         9a:19:1e:59:47:a2:05:12:a8:6f:37:e2:ff:5a:ca:25:c4:1f:
         aa:18:c7:05:af:8d:f1:3a:04:32:a9:2f:84:c3:84:a4:6b:c6:
         94:d5:61:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:23:02 2026 by rpki-client