Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
File:                     3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft (raw, json)
Hash identifier:          IA3Cp7Et9o/8C2rZ9CYfJbtJKYochoqQ2LokLVgOIIo=
Subject key identifier:   0C:A5:37:4A:80:49:C3:E5:8C:1B:F1:09:45:99:FD:73:0C:2A:B0:B0
Authority key identifier: DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49
Certificate issuer:       /CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
Certificate serial:       019E30E04746DE02649CBB5A33413C89E424
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
Manifest number:          1912
Signing time:             Sat 16 May 2026 13:01:05 +0000
Manifest this update:     Sat 16 May 2026 13:01:05 +0000
Manifest next update:     Sun 17 May 2026 13:01:05 +0000
Files and hashes:         1: 3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl (hash: Qzv2G8ysv1QSuBjtYS/02EsBtwfmQfvNRrJStnc8Tzk=)
                          2: 7x2m-lU6FNS5yqv5lwyGFac_X4Y.roa (hash: y5TlPBhDp/P3UW7VHo9Ke01pzrHP6whRVTrTY5Gd794=)
                          3: Sci8cSSHIwK8cAd-Z2NXFaGyt8A.roa (hash: RPjdlL4lf1ZtlD+1fltmcMb4oq51gUanC3qSsemgh8s=)
                          4: pUQRSDfWqJEoJFfVuZVUVOmlYsk.roa (hash: 9jvQHXY6BnSchwKk/mPiFTBcmMYYo7JbR6ZjMBc/ZDo=)
                          5: uLHH6IqO22bZWZTgO9nKR2wQbJE.roa (hash: laj7eTzK3jKEChy9oG/lzbHF9H3dpCdbB2ksudV3h+Y=)
                          6: wt4arE8aq0j9QUnZdYjCgQA4KE8.roa (hash: Wf+8drhwEyYnWOvWQqOC+IPf2/ohM2ew9EmbUhWiq90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:47:46:de:02:64:9c:bb:5a:33:41:3c:89:e4:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
        Validity
            Not Before: May 16 13:01:05 2026 GMT
            Not After : May 17 13:01:05 2026 GMT
        Subject: CN=0ca5374a8049c3e58c1bf1094599fd730c2ab0b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:db:fb:ed:a5:e5:e7:0a:5e:6d:5c:d2:7b:37:
                    a8:33:dc:38:90:ed:05:52:af:66:db:4b:be:50:31:
                    8e:00:37:28:99:4d:b2:7a:c7:89:67:73:57:63:46:
                    23:49:3d:68:0d:23:74:25:06:6b:fb:66:af:a4:33:
                    e6:80:f8:5f:78:e0:bc:5e:f4:d1:19:6a:77:ab:17:
                    32:19:c6:a1:7e:1f:32:1a:ba:2c:a4:32:37:6a:79:
                    c6:4a:0b:c7:02:47:0e:31:40:a5:77:2c:22:4b:e3:
                    0c:8f:0e:7f:74:8a:db:03:57:1a:fb:f1:1a:ae:c9:
                    56:f6:f3:67:ac:8d:fd:1a:86:ee:3a:43:30:d1:10:
                    a2:f0:f6:9b:dd:1b:63:48:40:33:91:24:01:30:09:
                    6f:8b:78:2d:a4:e5:2d:0c:e8:de:d9:22:4a:38:64:
                    b9:8a:02:93:4c:cf:1a:7c:05:c3:ae:89:50:de:b4:
                    f6:45:f9:dd:67:ea:b2:16:c9:6b:63:7e:bb:92:61:
                    de:d9:69:3b:71:a9:cf:24:0a:99:32:c9:7f:dc:d6:
                    da:eb:52:69:6d:51:9e:27:ab:a3:3c:e3:c5:27:f8:
                    0c:26:c4:fd:81:8d:85:89:77:00:67:68:07:11:c4:
                    6e:90:5b:62:3a:22:9e:f4:f3:33:21:e2:a9:32:12:
                    da:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A5:37:4A:80:49:C3:E5:8C:1B:F1:09:45:99:FD:73:0C:2A:B0:B0
            X509v3 Authority Key Identifier:
                keyid:DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:94:85:89:8d:5e:d9:bd:18:b8:0e:92:9e:a7:61:07:3b:33:
         eb:1d:07:04:fe:5b:a3:05:14:16:e9:ee:71:45:0f:9f:ae:ff:
         6b:ed:ad:6a:88:ac:4a:b2:4a:9a:b3:6f:97:2b:1b:58:e0:11:
         2e:52:62:5d:52:26:4f:99:0e:32:26:c1:c9:d7:d0:c9:fa:83:
         d4:98:c7:d7:d3:83:c3:ec:72:ad:dd:06:e8:9e:6f:7a:58:84:
         bc:c0:86:a0:28:64:d1:34:a9:0e:49:62:76:fb:f5:c3:ee:e3:
         b4:39:ca:ea:5b:03:ab:0e:09:92:22:c1:9b:cd:d5:88:f6:ac:
         3b:b2:64:73:75:ba:a4:84:2b:13:96:a2:d5:6c:c7:cf:08:8c:
         89:66:86:f1:5b:72:13:63:1c:87:5d:9a:3d:99:32:d8:c6:1c:
         01:16:15:ff:c7:0e:96:39:b2:ad:a8:58:ac:91:95:61:8a:7d:
         16:79:85:e4:58:a5:36:62:7b:c0:8a:ee:1b:77:22:23:34:0f:
         f1:b2:4e:69:d4:74:d5:0e:f2:3c:8d:b9:e9:9f:45:f9:b9:d2:
         18:ad:5f:d5:e3:b8:34:52:bb:64:88:9c:c5:3d:5c:97:c6:03:
         aa:cb:16:58:31:84:13:46:07:61:49:b5:41:4c:95:e5:04:9a:
         30:fb:14:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:46 2026 by rpki-client