Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
File:                     cSyZzDOPaS2o-Btxa6150cnXyCA.mft (raw, json)
Hash identifier:          oBqFLT7WtXMFxoVaWNmw6gY5XbxKgSrg7wBodXO8ASw=
Subject key identifier:   E8:D9:8C:1A:04:36:5E:5F:1F:F3:1F:BF:45:F1:8B:FA:B2:AC:86:D5
Authority key identifier: 71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20
Certificate issuer:       /CN=712c99cc338f692da8f81b716bad79d1c9d7c820
Certificate serial:       019E31177EB1EDCC289BF88C3F1EB89384DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
Manifest number:          1910
Signing time:             Sat 16 May 2026 14:01:23 +0000
Manifest this update:     Sat 16 May 2026 14:01:23 +0000
Manifest next update:     Sun 17 May 2026 14:01:23 +0000
Files and hashes:         1: BsMYZQ2x4gwaPMUJIJk2WkqpFpw.roa (hash: uRJt0kWvcM/4ik+kay2QDd7hzw9JG0GpAQJN7rBesLo=)
                          2: cSyZzDOPaS2o-Btxa6150cnXyCA.crl (hash: HtFCSt++YWCXf8kmn3hiUNDNDnFuTUobp+JWRTUH49k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:7e:b1:ed:cc:28:9b:f8:8c:3f:1e:b8:93:84:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=712c99cc338f692da8f81b716bad79d1c9d7c820
        Validity
            Not Before: May 16 14:01:23 2026 GMT
            Not After : May 17 14:01:23 2026 GMT
        Subject: CN=e8d98c1a04365e5f1ff31fbf45f18bfab2ac86d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bb:82:54:e4:0a:28:25:a2:97:e0:ad:b4:73:
                    3c:58:f1:b3:b0:da:52:bb:be:70:95:a1:69:41:3d:
                    a2:a0:69:7c:31:44:0d:3a:bb:77:9c:51:f6:1b:cd:
                    fc:20:71:a9:4e:80:cf:3d:20:53:38:7d:c3:4e:2c:
                    6d:c0:e8:9c:3b:2a:81:b3:1e:f5:83:af:9b:64:95:
                    53:52:e8:2d:b3:64:ad:ba:44:76:d1:87:5c:88:be:
                    46:d8:96:2f:9f:6a:99:28:81:a1:58:c2:30:e9:3a:
                    a6:34:2e:80:62:f6:b5:3a:9f:b9:02:8c:9a:c7:a5:
                    d2:33:dd:4c:aa:71:c0:a2:b6:aa:40:25:89:d8:a0:
                    6b:43:a4:f5:c8:3d:ba:86:b5:f5:6f:52:f5:d9:e9:
                    51:e7:0c:62:8c:fa:6c:22:98:6f:17:df:af:52:f2:
                    9b:d2:0f:d1:d1:82:b5:15:83:63:1b:0c:01:13:3c:
                    10:24:de:89:d7:5f:74:48:d9:2f:58:04:ce:1f:d9:
                    f1:e9:40:24:93:9a:59:63:7b:a7:98:d6:26:ab:3c:
                    eb:f6:9c:63:c3:4a:47:1c:75:ff:52:dc:e9:9f:14:
                    15:db:6d:f5:6f:df:06:bc:3e:f9:67:f1:92:4c:a7:
                    3e:4b:f8:1f:eb:dd:57:5e:fa:23:38:b9:1c:a7:2e:
                    36:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D9:8C:1A:04:36:5E:5F:1F:F3:1F:BF:45:F1:8B:FA:B2:AC:86:D5
            X509v3 Authority Key Identifier:
                keyid:71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:2a:a0:3a:b6:bf:74:70:e2:93:92:95:0f:d6:2c:77:7a:a5:
         44:b0:cd:99:56:a0:8f:64:4f:61:cf:a0:40:e7:07:49:dd:e1:
         06:d9:59:2a:27:20:50:4c:87:f9:64:df:da:71:b2:d7:77:1d:
         ff:ca:aa:97:7a:49:54:47:75:0d:f6:bf:73:45:54:4a:68:ac:
         50:e5:c7:c2:fc:c3:6e:4a:df:83:92:b5:35:25:16:73:b1:8e:
         22:5d:0a:5f:ab:73:5e:3b:d7:de:4b:b3:82:1e:52:81:1f:bc:
         64:ec:f7:db:b5:40:3c:f1:54:9f:96:dd:07:d7:85:1a:b8:5e:
         c6:c7:46:94:0b:92:ad:c3:49:b4:38:0f:0c:06:ca:af:fe:4b:
         82:03:64:b1:b1:2e:13:b6:fc:1d:6f:41:86:4b:b1:3f:ba:aa:
         3c:ef:0c:47:49:39:1b:0f:52:00:07:86:3a:50:aa:91:82:6c:
         8d:c5:82:cd:28:e5:b0:2c:56:cb:e6:cf:9b:e4:43:4c:2a:a9:
         79:f5:55:e1:ed:be:d3:60:80:d9:d8:ae:b3:cf:bf:27:e2:80:
         f1:58:e6:7f:98:0a:64:2d:29:18:8b:f2:c9:7c:c5:d8:9d:84:
         1c:02:c3:d4:f4:ba:db:8d:5a:a3:95:bc:b9:a8:34:fc:f9:38:
         0a:03:9f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:28:38 2026 by rpki-client