Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
File:                     1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft (raw, json)
Hash identifier:          YM2q5ngGeG2I6dTC0qfFWG8a24bUQA1eWTf4s//MZ90=
Subject key identifier:   B8:4D:B5:67:65:E5:CE:41:F0:88:F4:AE:E1:FB:47:7F:6E:B7:09:DE
Authority key identifier: D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
Certificate issuer:       /CN=d588db17666fa9515af31dba095d0f250f84bdf7
Certificate serial:       019E2F5FC93C10F3ED57E7B0B59E36B4422F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
Manifest number:          1912
Signing time:             Sat 16 May 2026 06:01:07 +0000
Manifest this update:     Sat 16 May 2026 06:01:07 +0000
Manifest next update:     Sun 17 May 2026 06:01:07 +0000
Files and hashes:         1: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl (hash: bfwScXBk5tWQ/75vFhNpFT6RQVKKGdLyvotzZNtDt2c=)
                          2: 8NwGeto6KwDcPV-xbJgaTF5hoxI.roa (hash: z42NiQAsunKciHLg6LEfRWeU/t7uDzBK+QA0eF+tv9U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 06:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:5f:c9:3c:10:f3:ed:57:e7:b0:b5:9e:36:b4:42:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d588db17666fa9515af31dba095d0f250f84bdf7
        Validity
            Not Before: May 16 06:01:07 2026 GMT
            Not After : May 17 06:01:07 2026 GMT
        Subject: CN=b84db56765e5ce41f088f4aee1fb477f6eb709de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b4:41:7e:c7:ec:03:cf:d7:2e:98:ed:31:ea:
                    a5:a6:0c:2a:86:39:87:30:1e:47:9a:e4:2a:a9:63:
                    04:89:e7:cc:71:6a:be:26:b0:9b:29:e5:14:e5:d3:
                    70:4b:ee:96:17:fc:92:4d:ef:b1:67:8e:f5:c0:43:
                    24:cc:ee:4c:9b:2b:5e:fa:03:7c:08:30:e8:a1:45:
                    ed:dd:d8:53:24:c1:ee:34:cc:ef:e6:bc:06:83:8b:
                    d1:a3:09:2c:38:f9:e1:5b:40:6f:6f:66:b3:49:5f:
                    e1:22:fc:21:ba:3b:d2:4c:0b:f6:fc:b5:3b:ca:43:
                    02:b7:b9:42:83:a5:24:c8:d2:d0:fd:eb:b3:47:10:
                    81:fd:fb:bc:4a:fb:ae:ea:e9:90:09:2e:4b:2d:25:
                    b4:df:a0:ee:70:3e:75:85:8b:ad:30:50:20:e1:65:
                    b2:2a:50:74:33:da:81:31:f0:2c:5b:1c:9c:db:92:
                    42:55:91:01:36:cd:a9:29:25:6a:de:7b:42:f5:1c:
                    a2:27:c5:af:e6:0b:11:2b:45:e9:6b:2b:5c:26:64:
                    39:a9:69:af:0e:45:56:98:10:9b:57:fc:ef:4f:f3:
                    03:b3:94:8f:fa:19:7c:31:08:59:4c:70:12:43:36:
                    22:9d:1e:af:90:91:a2:ea:b7:87:75:9f:4b:4b:8b:
                    db:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:4D:B5:67:65:E5:CE:41:F0:88:F4:AE:E1:FB:47:7F:6E:B7:09:DE
            X509v3 Authority Key Identifier:
                keyid:D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:7a:d8:6f:23:a3:9b:7e:f7:1c:8b:d5:52:01:99:f5:c2:01:
         1c:ab:ee:0c:57:cb:50:77:df:4e:bf:bb:55:0a:bc:cd:df:9d:
         a2:c4:7d:b7:e9:8b:3c:9a:e4:46:1a:91:43:2a:1a:c9:9e:37:
         b9:fe:9d:ce:00:43:f3:fb:bb:27:1e:65:7f:c4:ef:ab:99:24:
         0e:7b:d9:3a:7d:49:d9:70:b7:85:16:0e:86:3e:5d:40:f1:1c:
         f9:7b:97:d8:1d:1c:97:f9:3a:02:c1:0c:54:23:00:eb:d6:87:
         66:d0:eb:f4:c6:1f:17:cb:4b:dd:4e:9d:e3:36:e4:a2:2c:b0:
         98:2a:37:c6:db:13:cc:b7:b6:7d:c2:20:c0:76:6e:ca:c1:87:
         a8:8f:6b:dc:d3:30:a2:bb:0f:39:f0:e0:b1:7c:cd:6e:4b:c7:
         f0:65:15:c3:7f:06:7f:68:3a:85:05:5f:d9:53:4a:11:80:22:
         c0:0a:aa:db:e0:2c:35:69:fe:1a:38:e2:10:56:d4:37:d9:b1:
         c3:33:bd:5f:6a:91:9c:c1:f2:88:17:1d:08:d5:1f:a2:45:17:
         22:73:ba:3c:82:d0:31:e2:2c:4c:fb:4c:55:da:bb:09:6c:17:
         c9:54:43:cc:3c:39:cf:f7:6b:df:0d:49:7b:a7:af:20:72:a4:
         74:83:51:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:44 2026 by rpki-client