Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
File:                     aFeXIsOgywwzUcWV36PX6tgfFr8.mft (raw, json)
Hash identifier:          RDfVCwtPuxxoPVHuKB590+mhBZVrm65vOKbUu6F2pDo=
Subject key identifier:   3D:5A:27:27:B0:60:D4:38:7E:01:6E:42:18:7A:39:AE:CE:12:A0:1C
Authority key identifier: 68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF
Certificate issuer:       /CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
Certificate serial:       019E284B210C341F9BC315D9E1CA3B581CB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
Manifest number:          1913
Signing time:             Thu 14 May 2026 21:01:12 +0000
Manifest this update:     Thu 14 May 2026 21:01:12 +0000
Manifest next update:     Fri 15 May 2026 21:01:12 +0000
Files and hashes:         1: HICUQlEYTGNDZC_TZKBNt1I9ZtI.asa (hash: ygy820xgpaVNMBFtptvsRnnaNpcXzgsBO0L4W7uH2bw=)
                          2: aFeXIsOgywwzUcWV36PX6tgfFr8.crl (hash: BpGY1nrx4R2fQ+4DndHun3UNc1mU7keLxVHu0SnLI6o=)
                          3: npOqAYvnANeWVx-N9kdesV15avg.roa (hash: drW0amYbYWP6y8FhNua3sy9aXQKsIxf1FhuvgPhf3tY=)
                          4: qgrlS83bNE9MYEyjpHkdusYjIJs.roa (hash: qVLwJn1cT6OqEeJhayLqN8KErzeBq7qBWaQJP1ttmcw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 21:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:4b:21:0c:34:1f:9b:c3:15:d9:e1:ca:3b:58:1c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
        Validity
            Not Before: May 14 21:01:12 2026 GMT
            Not After : May 15 21:01:12 2026 GMT
        Subject: CN=3d5a2727b060d4387e016e42187a39aece12a01c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:85:aa:0f:73:71:0d:c0:18:9e:dc:42:e9:15:
                    5f:72:bb:d3:c4:69:c5:a5:26:00:52:77:5f:a7:78:
                    7c:22:9d:2b:6f:ea:58:56:50:ae:96:45:ee:f4:fd:
                    44:cf:1f:17:90:8d:51:88:dc:14:a0:dd:23:8c:e0:
                    3a:36:a6:d6:6d:1f:83:3e:23:f2:a6:e3:51:8a:db:
                    ee:6f:33:07:14:2f:cc:00:ec:64:1d:9f:97:fa:d1:
                    31:ad:f4:9e:72:87:11:69:87:e2:73:9a:4b:81:16:
                    a8:57:13:b8:b6:a3:b8:c6:42:4f:34:41:90:86:54:
                    4b:5e:9b:4e:20:ce:a3:cc:ef:5f:58:c2:0f:3a:95:
                    56:10:f3:9b:b6:44:24:8d:11:0a:6f:6e:1b:b8:43:
                    92:06:d9:33:f2:d1:11:85:3f:9c:31:06:83:b1:71:
                    36:e2:0e:29:9d:3d:0b:95:9a:6e:39:ff:07:ae:58:
                    06:09:66:c9:a8:39:20:31:09:82:90:b9:03:7a:eb:
                    f1:df:44:35:fa:02:e0:fd:3b:be:c4:c8:86:04:6c:
                    d6:02:53:3b:cc:1f:9f:4f:a9:46:04:12:5d:c8:cb:
                    65:01:91:79:b1:5a:7e:e4:0f:4c:e4:33:36:c0:31:
                    4c:a6:20:06:b2:19:86:8f:d6:36:1d:bc:b4:26:4d:
                    eb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:5A:27:27:B0:60:D4:38:7E:01:6E:42:18:7A:39:AE:CE:12:A0:1C
            X509v3 Authority Key Identifier:
                keyid:68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:08:5e:8e:3f:d4:82:c0:bc:e6:ca:70:1e:ba:23:25:50:a0:
         a0:cc:2d:7c:07:df:31:95:c6:2d:00:09:94:e0:d9:21:78:12:
         a0:56:c9:4b:a0:36:2d:d4:a5:f9:0d:6c:0f:6b:69:dc:64:7c:
         0d:b6:16:7e:79:8a:2e:33:9c:7c:81:a1:69:b4:80:21:7e:c7:
         99:1c:1e:c7:91:04:c3:30:5b:3f:37:57:7b:8c:e5:81:04:fc:
         d8:e5:1b:f1:c7:89:a2:cf:a8:42:56:c5:11:73:c8:30:fd:90:
         3f:4a:e0:52:7a:a0:92:15:d0:8c:91:b0:7c:95:cd:d9:25:b9:
         24:74:a4:b3:30:6c:c0:46:34:fe:37:aa:7b:eb:24:d7:3b:57:
         8e:a1:1c:35:22:61:40:b0:5a:80:58:99:8e:6d:62:a5:a8:6b:
         55:ad:a9:c8:40:cc:91:8c:3d:a0:5e:3d:ee:83:4a:d2:1e:ee:
         59:44:5e:6d:e3:b0:e9:4e:c0:cc:4a:99:45:8f:71:ac:c4:26:
         8c:d4:f5:09:43:d5:c0:52:86:c7:39:26:d7:d4:22:25:77:78:
         dc:f0:f7:1b:e3:87:6f:5e:53:c5:e4:c2:63:7b:8c:77:1d:36:
         89:09:a4:50:2b:0c:91:4e:e0:95:7a:dc:dd:13:b7:5d:41:3b:
         3c:1c:53:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:58:43 2026 by rpki-client