Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
File:                     1NF5zknld2uSyGwmwgsLQ_0KbLY.mft (raw, json)
Hash identifier:          hT8dOr6pADajmLPkZIa/sFFJo2QMhX2KzaYqlRYn2CQ=
Subject key identifier:   0D:26:93:62:D8:E0:7B:E0:C0:8F:DA:52:3E:7B:55:AB:E4:D8:52:6E
Authority key identifier: D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
Certificate issuer:       /CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Certificate serial:       019E2FCDFEC02007BFDD4D8E634EF8115284
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
Manifest number:          1910
Signing time:             Sat 16 May 2026 08:01:29 +0000
Manifest this update:     Sat 16 May 2026 08:01:29 +0000
Manifest next update:     Sun 17 May 2026 08:01:29 +0000
Files and hashes:         1: 1NF5zknld2uSyGwmwgsLQ_0KbLY.crl (hash: Ovsy80DYJ+sV3DMKj6JYcuEv4lkqZQVLGcBHtTgGucc=)
                          2: qI3as0zKAc7W39Wxbww7lx8HfYM.roa (hash: ++oMXlJQHbbp5tvC0c4vNfS7KWMpom3TwhUaePwlH1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 08:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:cd:fe:c0:20:07:bf:dd:4d:8e:63:4e:f8:11:52:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
        Validity
            Not Before: May 16 08:01:29 2026 GMT
            Not After : May 17 08:01:29 2026 GMT
        Subject: CN=0d269362d8e07be0c08fda523e7b55abe4d8526e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0b:23:6b:c4:1f:6c:4c:f9:be:a2:5b:cd:f4:
                    ba:8d:6d:7b:95:d4:bc:56:5a:8a:e2:ba:a4:d5:89:
                    cb:fc:83:0b:c0:f0:b1:c6:cf:c0:f3:ab:bb:db:11:
                    19:bf:c3:70:96:d1:84:cf:0f:b6:38:de:12:d7:3a:
                    00:c1:6a:f2:aa:14:c7:19:a0:f2:59:0f:0e:18:c0:
                    5c:ab:e5:45:5a:d7:6f:4a:fd:29:1b:00:25:2d:c8:
                    52:4c:ad:9e:7a:dc:9a:69:84:6d:c2:e5:cc:03:6e:
                    81:e9:94:c2:f3:33:90:c1:1e:2b:16:6b:dc:e2:33:
                    99:64:c0:4b:6d:a4:72:77:0c:bf:9c:24:ab:1f:4b:
                    87:60:7e:68:5a:13:6e:01:ce:0c:d3:c7:3d:b9:45:
                    99:b1:bf:d8:74:19:88:6c:9b:94:08:52:d9:20:2c:
                    fa:00:4c:2d:58:43:0e:3b:23:23:96:3a:8a:bb:75:
                    fb:ad:34:b1:68:20:a7:7d:ee:14:3d:87:54:73:d3:
                    72:ce:fb:5c:3c:9a:dc:54:0c:f1:75:e2:3d:b4:35:
                    8f:f4:b8:26:03:9b:af:fb:5c:39:02:42:7d:c0:4d:
                    cd:45:78:23:ff:ed:db:48:ef:b1:43:17:ae:4d:4a:
                    0b:47:e4:2c:1a:d6:cc:a4:bc:ed:f8:55:42:b8:86:
                    34:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:26:93:62:D8:E0:7B:E0:C0:8F:DA:52:3E:7B:55:AB:E4:D8:52:6E
            X509v3 Authority Key Identifier:
                keyid:D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:64:c3:dc:13:d8:3c:bf:ff:a7:57:63:b3:0c:8c:f7:c5:10:
         6a:c7:54:3b:1f:09:f8:16:62:9c:9e:1c:88:f7:2b:4b:63:98:
         89:d1:dd:a0:63:c5:b3:08:35:d7:41:5f:b8:27:85:04:0e:76:
         88:6c:2a:9e:3e:7e:c5:c2:44:7d:fc:be:7f:c4:3d:6f:52:fc:
         6c:37:19:70:cc:f9:7f:35:0b:82:0f:2e:4b:07:74:bf:39:a0:
         93:3e:01:8c:56:03:94:1e:bc:6e:50:84:2e:ea:ba:51:f2:9a:
         03:0a:81:35:8d:b6:fd:01:1b:9d:b4:bd:62:24:51:03:81:26:
         a4:10:8c:6c:e3:48:7f:b9:a9:01:e1:4d:3d:22:02:78:ac:4b:
         2d:8a:a1:1a:47:d7:59:fe:12:00:be:cb:6a:de:08:26:82:23:
         30:ed:e9:16:72:86:2c:97:8b:58:a4:06:1a:85:1b:b2:e9:c4:
         d2:91:69:0e:ac:5c:7b:cb:04:7d:fd:bd:bf:2e:8d:fa:4f:07:
         7f:35:69:2e:a3:17:df:0f:89:a9:f2:b2:b6:12:2a:a2:8e:6b:
         e2:73:85:2f:81:dd:2e:fd:c0:82:7a:8a:b2:95:cb:b4:33:1a:
         b3:1e:ea:5f:0c:4d:22:59:be:fc:d9:e3:49:79:17:d9:36:a1:
         d6:a4:b0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:31 2026 by rpki-client