Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
File:                     31kIP69fArumaAmhoicuryboo3g.mft (raw, json)
Hash identifier:          AyPirkWRVnHMgiCUt08XLtzwOa7NhoKA7RrFj/NtgwM=
Subject key identifier:   54:3C:BD:0D:E9:A6:E0:61:CE:C1:42:68:87:8D:44:F4:93:90:00:7D
Authority key identifier: DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78
Certificate issuer:       /CN=df59083faf5f02bba66809a1a2272eaf26e8a378
Certificate serial:       019E2FCD575C5F75510B341A0C135A474050
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
Manifest number:          1910
Signing time:             Sat 16 May 2026 08:00:46 +0000
Manifest this update:     Sat 16 May 2026 08:00:46 +0000
Manifest next update:     Sun 17 May 2026 08:00:46 +0000
Files and hashes:         1: 31kIP69fArumaAmhoicuryboo3g.crl (hash: adLSk0GGcsHieUZAY4uISLG9tAGQxgpMgs36M4L3ud0=)
                          2: bFzdMPznlOjSbXFpquaFvhugI8E.roa (hash: K3/O8FhhB6ddNanECmUzETBKUHzHCD/aSiUCGY1B2qk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 08:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:cd:57:5c:5f:75:51:0b:34:1a:0c:13:5a:47:40:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df59083faf5f02bba66809a1a2272eaf26e8a378
        Validity
            Not Before: May 16 08:00:46 2026 GMT
            Not After : May 17 08:00:46 2026 GMT
        Subject: CN=543cbd0de9a6e061cec14268878d44f49390007d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:9a:de:cf:46:9a:23:d2:60:98:72:e9:8b:ad:
                    89:f9:5a:74:91:53:61:76:95:ff:df:69:cc:09:cc:
                    d2:b0:30:fe:89:32:97:14:ea:b4:16:53:84:67:73:
                    6e:de:ae:6f:f6:c1:97:55:01:c0:3c:7d:0b:06:28:
                    57:d2:72:f9:fa:ae:5e:dd:c4:37:a3:cd:bf:d9:31:
                    dd:d8:78:22:d2:26:02:83:25:08:e1:ab:78:55:4e:
                    b6:7a:8f:bc:dc:56:a1:8e:10:79:4c:50:68:95:63:
                    3b:1b:38:aa:78:ae:30:31:b5:29:d3:a8:31:6c:40:
                    88:d3:3b:27:8b:f3:42:91:d4:a4:13:20:4a:9c:bb:
                    8e:7b:51:6b:82:87:c8:fb:8e:87:0a:10:8f:07:b1:
                    2b:70:c5:f6:47:70:7a:df:18:94:b7:13:e7:ab:ac:
                    04:72:ea:87:69:71:5d:0e:41:c3:3c:d5:fe:58:1c:
                    d5:7a:68:bb:5e:d1:75:f4:7d:bd:01:a7:82:0d:58:
                    21:cf:9f:1f:ee:f8:53:a2:4d:e1:75:72:ee:b3:c8:
                    c3:e5:4a:2c:32:5a:8e:d3:56:45:3f:8b:2d:5c:09:
                    0d:bf:13:77:20:29:cf:47:24:77:f4:ef:74:61:6d:
                    f8:f9:36:bd:ed:7f:ce:7e:5b:2e:a6:62:f3:f6:7e:
                    d2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:3C:BD:0D:E9:A6:E0:61:CE:C1:42:68:87:8D:44:F4:93:90:00:7D
            X509v3 Authority Key Identifier:
                keyid:DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:2a:10:f9:28:e3:23:e8:df:73:34:21:3a:8e:15:25:77:75:
         fe:1b:1d:7b:38:09:87:fd:a1:8f:7d:da:6c:96:f5:1b:0d:df:
         64:25:75:20:af:05:69:b0:2c:0c:21:77:4f:8b:04:cd:de:07:
         8d:35:00:60:81:53:4d:07:f7:cf:bf:4c:6d:66:e0:58:ac:0c:
         9c:75:15:2f:d1:ef:79:11:6c:29:42:3c:d0:11:4c:7b:bb:47:
         cd:de:af:50:0e:90:df:95:e0:ab:be:6e:59:38:6a:10:ad:f2:
         99:ca:e4:ec:ba:e3:6e:3f:bd:0c:76:a5:08:c2:70:d4:a6:36:
         21:1e:ad:fd:b8:e6:0f:0e:ae:ad:0e:3d:d0:af:68:15:6a:35:
         76:d0:f5:1c:62:db:92:a6:a5:cb:37:12:30:c8:a8:ba:84:e7:
         fc:82:be:d3:c7:cc:ea:a4:7c:b5:a1:c5:e3:b6:9a:f1:7a:e2:
         cc:a9:8e:a7:c5:97:75:92:7d:87:80:ee:72:7b:86:73:fa:25:
         bc:17:10:b8:f6:36:8f:8c:ac:2a:26:a8:f4:aa:ef:71:ed:5a:
         8f:14:ca:2e:c0:f4:1f:7f:b6:6b:f3:00:56:68:cd:d6:ca:01:
         19:c0:13:2a:e0:61:86:ba:8c:80:86:5a:9d:c4:84:f9:15:43:
         e1:97:a5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:53:54 2026 by rpki-client