Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
File:                     1-z2QpIni1JxWTgijovNEX7LI1AQ.mft (raw, json)
Hash identifier:          23eI1XQyWicD4Rgx/ou+VK2VFGhTwJyWnHKA3bJ/xFA=
Subject key identifier:   F9:BF:89:1A:CC:1A:90:51:31:C4:5A:AC:15:12:28:67:AA:ED:16:97
Authority key identifier: FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04
Certificate issuer:       /CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
Certificate serial:       019E2FCDA94EA15931CE589E8C351DBB8146
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
Manifest number:          13A7
Signing time:             Sat 16 May 2026 08:01:07 +0000
Manifest this update:     Sat 16 May 2026 08:01:07 +0000
Manifest next update:     Sun 17 May 2026 08:01:07 +0000
Files and hashes:         1: 1-z2QpIni1JxWTgijovNEX7LI1AQ.crl (hash: HQzR6gs0v/nHz90uTWwdOAvimKaayuLhKFtUH9E/u9k=)
                          2: q8ALlbE4IIvLhKys6r6M1Hgfxyo.roa (hash: k/Wh/c00eZEFbymGhdaEUynKj87Lx/1rWZSCYQ9Ry88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:cd:a9:4e:a1:59:31:ce:58:9e:8c:35:1d:bb:81:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
        Validity
            Not Before: May 16 08:01:07 2026 GMT
            Not After : May 17 08:01:07 2026 GMT
        Subject: CN=f9bf891acc1a905131c45aac15122867aaed1697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f9:06:93:0c:1a:8b:2a:03:32:a8:83:9d:03:
                    6b:5b:ab:e9:fc:1e:48:ab:d5:34:df:14:e2:f6:3b:
                    c7:bf:99:34:6a:a6:01:13:cc:ad:31:7c:75:ad:d0:
                    6f:cb:0a:41:ff:c8:56:b3:73:a2:15:f7:8c:1e:82:
                    ad:e4:dc:19:9b:ce:27:59:4d:b1:06:27:12:56:1a:
                    af:60:99:1b:c3:1e:9b:5c:e8:4b:d7:06:2d:2b:18:
                    93:fd:c3:70:d3:39:11:3c:d8:54:b0:b9:1c:77:a8:
                    f2:fc:8a:6e:3a:83:66:a3:a1:1e:ec:aa:74:be:be:
                    ba:30:34:e6:ce:88:bd:85:bd:17:6f:fb:28:02:ff:
                    98:37:26:ba:4d:60:eb:e9:72:fe:23:68:17:18:c4:
                    d8:c7:c2:a6:a9:78:84:2d:17:7a:f2:e6:09:c6:ae:
                    55:a6:8f:01:57:23:1f:c6:e3:f0:3c:91:19:6a:91:
                    a3:37:6e:7a:fc:9b:da:c9:0e:94:8e:1f:b7:4b:37:
                    8b:4f:7d:47:6d:4d:39:b5:08:46:a1:72:7a:b8:d0:
                    17:b1:d8:6d:17:3c:c2:a7:4c:95:f7:26:8f:31:11:
                    43:07:a8:7e:09:43:b8:0a:1a:7d:a3:ba:e4:5d:2d:
                    37:cc:9d:ba:86:3e:a7:f1:29:52:b5:41:17:17:48:
                    e4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:BF:89:1A:CC:1A:90:51:31:C4:5A:AC:15:12:28:67:AA:ED:16:97
            X509v3 Authority Key Identifier:
                keyid:FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:87:d5:c3:95:7c:af:b1:8d:d8:55:3b:df:93:5f:a7:6f:34:
         51:50:42:69:78:73:f3:e5:96:ab:3c:5f:6f:e0:1b:20:64:01:
         b5:5c:ae:42:47:0d:0c:4b:10:b5:83:42:58:47:19:e5:70:b5:
         95:c7:d8:c6:d7:bd:2e:86:4f:60:e9:5c:f2:af:dc:95:97:e8:
         52:dd:8c:d6:54:ea:4a:74:36:24:c9:a0:f6:19:b1:4a:91:43:
         ca:46:ae:41:b2:94:12:6b:4f:26:22:df:27:04:4c:49:e6:81:
         c3:04:97:4b:4a:b1:39:19:6f:e9:48:ba:70:eb:ec:6f:1f:27:
         f4:9f:3a:e9:d9:3a:fb:3e:24:f4:c0:5b:01:92:54:cc:44:af:
         0c:0e:af:07:92:6d:4f:cc:1b:25:ee:d6:29:53:71:ca:34:ed:
         ee:56:d4:9c:fe:cf:4f:7c:e8:ac:c6:ce:6e:b6:9f:6c:57:12:
         d7:38:9e:b4:38:c7:b1:51:59:a7:c1:8a:e6:09:df:15:90:d7:
         a8:25:15:90:d2:eb:0f:f8:d9:f6:c2:f2:e4:be:9b:a0:bf:1b:
         33:ee:ee:22:97:96:46:c8:29:c5:89:c4:0e:40:32:49:7c:1d:
         e3:15:e6:11:d2:33:10:db:c4:53:bd:e5:53:73:9f:19:4d:b1:
         be:5c:ff:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:47 2026 by rpki-client