Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
File:                     CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft (raw, json)
Hash identifier:          SPMXbk4c87fzwH2T0N4GrMM4C+wqZMWCnzoKZ08YJ1Y=
Subject key identifier:   40:CC:75:1A:EA:98:26:07:7B:71:FE:48:FF:44:4E:0F:A4:61:B4:A5
Authority key identifier: 08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB
Certificate issuer:       /CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb
Certificate serial:       019E3072D076A1A1C42D9CF5E0A31C00CE38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
Manifest number:          1911
Signing time:             Sat 16 May 2026 11:01:31 +0000
Manifest this update:     Sat 16 May 2026 11:01:31 +0000
Manifest next update:     Sun 17 May 2026 11:01:31 +0000
Files and hashes:         1: CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl (hash: lGcugsnuaLGJFsGFJvo7i9R6wV/6oAYs8YdnTwejruQ=)
                          2: zEy0pk54hpQCTPJdO8DJpXzu5Mk.roa (hash: c/kQGOpuLkAoXhL/9Dr99YVfpLAZ/7AUwIQ22ANKUaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:d0:76:a1:a1:c4:2d:9c:f5:e0:a3:1c:00:ce:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb
        Validity
            Not Before: May 16 11:01:31 2026 GMT
            Not After : May 17 11:01:31 2026 GMT
        Subject: CN=40cc751aea9826077b71fe48ff444e0fa461b4a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:67:69:b1:67:c3:d3:67:d2:02:c6:09:ae:d3:
                    7b:3b:74:51:fe:36:dd:70:16:b2:7e:f5:a6:1b:f1:
                    62:10:3c:86:0a:fc:e9:7d:22:b8:74:1e:55:af:96:
                    83:21:7f:4f:44:3b:5d:24:76:55:35:61:b5:eb:a7:
                    be:2d:14:d0:9b:9f:d9:2f:00:77:cf:0a:0c:ec:87:
                    75:9e:af:da:f2:b3:bc:47:d2:f9:d1:7b:d0:95:7e:
                    35:f0:df:48:c9:ed:38:6f:34:00:26:14:e0:59:a0:
                    e6:77:5b:6e:27:e3:8a:b6:ba:74:0a:9e:5f:2c:a4:
                    dc:40:d4:44:e4:44:2b:2a:6e:92:88:a2:5a:d6:fd:
                    81:34:88:1c:f8:af:46:f1:73:c5:f7:7b:1c:dc:86:
                    5f:1d:5e:22:a7:33:b2:a9:c4:1a:cc:ea:4f:17:26:
                    ac:2f:fe:d3:13:7a:dc:56:04:51:1f:92:84:3e:46:
                    3f:56:5d:c9:a1:67:20:18:e6:d0:53:a2:ac:33:a2:
                    38:c2:60:08:59:26:70:d7:d8:42:d5:e7:d6:ef:f9:
                    3f:22:73:ad:3d:8a:b2:87:a2:92:dd:d1:53:ed:d6:
                    07:23:be:16:05:eb:27:7d:37:f9:62:f9:f4:06:6e:
                    6d:ac:e0:ff:d4:03:15:e9:4e:40:c0:24:95:71:6d:
                    65:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:CC:75:1A:EA:98:26:07:7B:71:FE:48:FF:44:4E:0F:A4:61:B4:A5
            X509v3 Authority Key Identifier:
                keyid:08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:78:0f:30:46:bf:78:25:4e:c8:5e:7b:9e:09:1a:01:90:60:
         e8:94:20:45:64:44:7f:a0:99:c2:28:8f:95:e1:c8:f3:10:21:
         bf:d2:91:f8:9a:73:50:87:d4:3f:d8:b0:f7:d0:54:a9:29:2b:
         ab:2e:fc:5e:57:b6:09:63:22:62:16:db:0e:66:b9:bc:7c:d5:
         69:a6:81:ee:8a:b0:79:dc:b1:9e:e5:86:98:83:20:b7:b3:7f:
         58:9e:40:f2:9c:b7:92:b9:9a:c8:f2:74:72:46:1c:89:d1:14:
         33:ac:2b:f9:fb:2a:7e:0f:e7:d4:c5:35:d3:ae:a3:e4:dc:08:
         7c:81:b1:b8:f5:dc:24:24:10:40:53:13:a8:6f:2b:eb:6d:9b:
         21:c7:1a:d3:cc:26:e8:3b:d8:4a:af:63:ab:ad:72:4d:92:8a:
         b7:14:bc:16:1d:ab:af:3e:91:e6:88:0c:16:f4:71:b1:99:95:
         1e:16:64:cc:bd:7f:a3:b2:d7:bc:23:e0:54:a7:76:b3:0e:f1:
         b7:3f:69:b7:4f:a6:8f:e8:84:b9:56:ec:77:d1:1d:5a:31:89:
         b4:dd:d5:e6:f5:05:b4:0e:ad:1d:b7:d9:d0:78:14:a1:5b:0e:
         a5:79:63:e5:9b:99:0e:69:33:c1:74:74:fc:7a:44:c0:60:4c:
         7e:e6:3c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:48 2026 by rpki-client