Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.mft
File:                     ECgK10HnIygIXV-leXqEUfX7Ajg.mft (raw, json)
Hash identifier:          jaOUSiKTOpba0c8HapLromFLlPFeB0BZW2bnodYU7Cw=
Subject key identifier:   2D:DC:BB:A9:09:FA:53:B8:C0:9F:3F:DE:83:61:FD:AE:25:B2:25:A5
Authority key identifier: 10:28:0A:D7:41:E7:23:28:08:5D:5F:A5:79:7A:84:51:F5:FB:02:38
Certificate issuer:       /CN=10280ad741e72328085d5fa5797a8451f5fb0238
Certificate serial:       019E307310A1DB5168CDBDA9E319578D1396
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECgK10HnIygIXV-leXqEUfX7Ajg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.mft
Manifest number:          0904
Signing time:             Sat 16 May 2026 11:01:47 +0000
Manifest this update:     Sat 16 May 2026 11:01:47 +0000
Manifest next update:     Sun 17 May 2026 11:01:47 +0000
Files and hashes:         1: ECgK10HnIygIXV-leXqEUfX7Ajg.crl (hash: 6rJmw05fXZItVDiZWJMfXAZe3DiJnOdeK3WOF1BijRE=)
                          2: cFBz2VwRtAE7Ewcz64ZDacXfB5Q.roa (hash: 8S34S+6olNesEjRXQB7m9lNGl0nTPvWZwfDko3leMVc=)
                          3: f4YlcOOq_31WT7fc27bbteRGEMw.roa (hash: E8VFyjnJbu0a/NApI535E/vwvrXP+nlwEeePdVD35Jo=)
                          4: ylp5NiXG-DWol4IjywEA3MrLU5k.roa (hash: ev143/+cymXpiGa9zVi8mgdvQUw00MuKnS6trW4s38w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECgK10HnIygIXV-leXqEUfX7Ajg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:73:10:a1:db:51:68:cd:bd:a9:e3:19:57:8d:13:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10280ad741e72328085d5fa5797a8451f5fb0238
        Validity
            Not Before: May 16 11:01:47 2026 GMT
            Not After : May 17 11:01:47 2026 GMT
        Subject: CN=2ddcbba909fa53b8c09f3fde8361fdae25b225a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:92:f1:9d:0b:2f:70:5d:79:86:a4:92:01:e0:
                    bd:91:cb:7a:0f:da:1a:6b:d6:aa:23:1b:7a:0e:2b:
                    cf:99:37:08:ed:33:3f:b7:9f:4b:a6:ff:a7:82:17:
                    a0:5f:6c:e0:30:99:6c:73:ef:a6:c2:55:0f:00:c0:
                    62:13:35:74:0a:44:15:a8:40:67:90:84:da:b2:e6:
                    b1:93:a7:56:91:4f:f2:a4:9b:43:af:85:ad:73:73:
                    cc:8c:da:76:37:75:97:fa:cd:bb:bc:e9:25:fb:e5:
                    bb:a8:16:97:6a:d3:43:fb:a2:27:aa:3b:24:61:66:
                    29:73:76:2b:bb:1e:98:30:27:2b:2e:04:65:9c:89:
                    23:12:42:30:10:8f:30:27:31:68:90:a9:d5:74:a6:
                    5b:47:d2:49:5b:ab:8b:eb:bc:69:64:a3:91:c8:6f:
                    71:21:75:b7:e1:f4:5d:81:45:2c:7f:16:07:c4:42:
                    7c:27:e1:3d:db:68:50:df:37:f8:f9:ac:14:b1:e0:
                    91:e9:a5:b5:87:ea:bf:c2:48:75:1c:d8:53:d4:1e:
                    c4:05:f1:e3:2c:5b:39:1c:b2:d2:5e:87:dc:57:d5:
                    5b:b1:70:65:8b:8c:bb:0b:75:dd:b3:3d:f7:21:63:
                    49:69:5a:05:e2:11:55:81:60:a3:7f:44:1b:50:64:
                    73:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DC:BB:A9:09:FA:53:B8:C0:9F:3F:DE:83:61:FD:AE:25:B2:25:A5
            X509v3 Authority Key Identifier:
                keyid:10:28:0A:D7:41:E7:23:28:08:5D:5F:A5:79:7A:84:51:F5:FB:02:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECgK10HnIygIXV-leXqEUfX7Ajg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:a9:b2:7f:53:e9:c0:1c:1f:a6:10:43:3d:07:b1:d8:a9:de:
         fa:34:bb:71:73:e8:32:37:45:0f:6f:52:bd:83:3c:b0:41:af:
         a3:56:a8:b1:da:22:9c:f6:b1:36:7a:8c:26:12:80:ff:6a:17:
         fb:1f:65:0a:25:10:83:0f:df:6b:58:93:c8:85:8b:f0:f9:60:
         3a:5e:cb:ff:50:18:99:2a:05:c8:18:81:f4:2b:16:af:c6:83:
         c5:b4:e3:e3:10:a6:d5:67:ec:8f:40:71:bb:13:1f:69:77:9a:
         7b:75:f0:0a:7e:85:5e:df:56:3f:a6:d9:16:f2:58:fd:3c:ed:
         70:9f:84:ee:4e:54:eb:56:2b:44:9c:6e:3e:c7:e2:d8:a3:46:
         2b:8f:d0:a7:b0:3c:eb:b5:4f:0d:92:c8:98:93:b5:a9:08:a2:
         81:52:14:bf:fb:c2:56:51:89:0c:1f:1c:a5:f5:14:85:57:5e:
         f7:76:34:b1:f6:f1:33:1c:1a:5a:f9:fd:b2:59:c7:a9:63:7b:
         8a:fb:e2:af:6c:ab:a7:37:37:b3:91:89:84:b6:de:77:4b:8a:
         fc:b8:f5:18:5e:19:15:62:52:fc:98:99:62:8b:34:9b:ba:88:
         80:c9:a3:e7:1a:b0:0b:d4:22:95:b4:e7:75:c2:1a:a8:ac:84:
         ca:34:ab:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:51 2026 by rpki-client