Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
File:                     bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft (raw, json)
Hash identifier:          mMQRPiZwWX2bOOYAoav/Qs4oCQnYWF9TsFZrNGIEhOI=
Subject key identifier:   93:9C:93:F4:4D:60:BA:79:86:4C:1C:5C:2B:FC:48:97:10:F3:CD:95
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Certificate issuer:       /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial:       019E29945857227B67B9E5E5C4E307E66A32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
Manifest number:          1953
Signing time:             Fri 15 May 2026 03:00:48 +0000
Manifest this update:     Fri 15 May 2026 03:00:48 +0000
Manifest next update:     Sat 16 May 2026 03:00:48 +0000
Files and hashes:         1: FDadFeqXdB-4hSls4tkk3SxPK0c.roa (hash: vYzxw+U9C6N8QQp+gQ4+C6IjpNypmXaiCUE3aon4FxA=)
                          2: MfgRriYJp7m_VcqdOdfAbTb2DNo.roa (hash: KLVx3gQAbv0plQDb9I4VjnfX1uzxg36H8GHKeOJlzFY=)
                          3: Qcb6MBj1jVMY5YJV__nFQrA67wU.roa (hash: eNJ8rbIWqEmXeV+vpidHVif1VOtq0n7KG9qEAuZBikM=)
                          4: QqOOXG2U8KmftWPIGkmnz-He-1I.roa (hash: 9H7M4l3KUWpTvpSo8NQDnFUn85s8Qh4futzKFfEpRME=)
                          5: TYbMVOnA1vB-wjFD6xsvHrGkVuw.roa (hash: gch7cDWOheOnpIwvXzaiQbw92kRVsDtErv7998avG0Y=)
                          6: XU-lnejjTfdYfkel9cu2qcj3jOg.asa (hash: 162FwGPbBSAqHbgij5iWFOSWYdvU5C2K98+sNPEBfXc=)
                          7: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl (hash: pFofOqaAmTlvtHhUN+bNbKU9gvaD8ZfFGAx0ybWLq8s=)
                          8: eQvbuB-WIfPaU-Lzc20AVEFS6m8.roa (hash: kWCTa5bd0F2DthD4hV3kmVTOiwhDV1nanw9wkMyWs8c=)
                          9: kT2l4aAekYpUQWufDkupbupuegk.roa (hash: rw2rc2iNkA7LVF7/4CAp2ausXlmtVnPSsdvSUBErb28=)
                          10: lOg--qFlBmx76-ubYUaKmA6pugY.roa (hash: aef1dmSLDMXhGIpZWewz/Jm1+VbIUIAUbF9tc8qTQqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:94:58:57:22:7b:67:b9:e5:e5:c4:e3:07:e6:6a:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
        Validity
            Not Before: May 15 03:00:48 2026 GMT
            Not After : May 16 03:00:48 2026 GMT
        Subject: CN=939c93f44d60ba79864c1c5c2bfc489710f3cd95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:29:24:80:c6:48:80:82:a9:75:c6:45:a5:73:
                    5c:c4:38:b1:75:4e:a5:b0:e2:f6:d5:5b:58:e3:8f:
                    94:35:66:c5:17:24:65:b2:6b:18:53:e2:82:a0:2a:
                    3c:5a:b8:65:59:6b:10:ad:b3:53:3a:0b:78:36:50:
                    14:c2:ea:36:f3:95:ec:3a:4d:e5:41:fd:ae:06:88:
                    66:3d:cb:f1:3d:42:b8:84:77:a7:82:08:a0:0b:01:
                    b6:bc:77:61:e0:73:a3:c5:67:0b:34:e4:4a:1a:e7:
                    54:80:7e:ef:6c:8b:ad:2c:14:bf:2c:48:73:4b:49:
                    b7:3a:e7:de:f5:5e:ca:bb:c3:5a:83:6e:0a:60:37:
                    e4:1e:4e:ac:1d:85:33:bb:ca:59:23:ac:41:7c:16:
                    aa:23:4a:bb:4a:b3:6e:e6:41:ed:51:ed:7f:a5:93:
                    9c:2f:0d:3f:8f:ff:00:22:d3:68:c3:d4:35:df:24:
                    aa:3e:ad:99:b2:ab:64:a1:0a:55:32:6a:40:e7:ac:
                    b9:7c:c4:48:a0:67:86:d0:d1:1e:a0:8d:2e:31:ed:
                    ef:25:85:98:9e:27:f8:72:ca:e8:70:cc:8e:a7:f9:
                    de:55:8c:ab:fb:ef:a4:f9:9c:a3:b0:99:a1:a3:e4:
                    eb:3b:86:07:e3:40:41:27:ee:f5:3c:e9:ef:07:0b:
                    06:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:9C:93:F4:4D:60:BA:79:86:4C:1C:5C:2B:FC:48:97:10:F3:CD:95
            X509v3 Authority Key Identifier:
                keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:14:56:e2:e6:f4:c0:5d:3c:98:d0:dc:3d:24:0a:4b:d3:7e:
         2d:35:d3:3d:c0:8b:ab:46:61:68:a6:44:23:68:95:f5:55:ef:
         9c:c0:f2:43:ae:e6:7f:b3:0a:0f:39:de:ca:44:3c:b7:94:c3:
         90:ab:f9:48:81:46:43:91:23:93:17:9c:3c:f5:fa:fa:09:07:
         56:09:d1:69:c9:ad:20:dd:04:0b:6a:66:53:fc:38:10:01:4e:
         dc:73:b0:5f:97:f6:d7:0d:06:bc:55:60:5c:17:17:87:e0:e8:
         54:f5:b3:f2:aa:39:f6:58:20:92:bd:6b:d1:72:03:26:95:a6:
         69:f9:66:5a:54:03:0e:68:40:c9:00:16:2c:32:c2:fa:35:34:
         30:68:36:da:6f:60:df:7f:d1:64:27:32:b0:6d:39:a0:e5:7f:
         49:bc:00:16:97:59:ad:92:15:c6:1e:04:ff:15:8a:83:58:ac:
         20:41:47:57:a9:c5:ce:52:df:59:5f:41:e6:4f:ad:f0:94:01:
         ff:09:0b:b8:36:4f:56:c5:5b:41:16:5b:e3:9d:47:a1:18:b3:
         d9:a1:05:d9:17:88:37:b3:22:99:aa:9b:c0:57:a5:2d:ca:49:
         72:ca:75:fd:49:c5:96:c3:5c:e6:44:2a:40:a1:08:26:dd:02:
         75:97:de:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 09:51:40 2026 by rpki-client