Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
File:                     fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft (raw, json)
Hash identifier:          KRlUgLkpnSELIEp9iWj/Lo0oXNz28g3CJov2Y3K++kE=
Subject key identifier:   F3:26:9A:4B:DE:63:C3:9B:C1:ED:CF:09:C7:A7:ED:61:E8:A0:30:C7
Authority key identifier: 7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6
Certificate issuer:       /CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
Certificate serial:       019E314E5ADA02AE332CC56FECAEA820035A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
Manifest number:          1922
Signing time:             Sat 16 May 2026 15:01:18 +0000
Manifest this update:     Sat 16 May 2026 15:01:18 +0000
Manifest next update:     Sun 17 May 2026 15:01:18 +0000
Files and hashes:         1: G0kBNcjhGFcxChx46aWWaNpRXhY.roa (hash: VJoqFME0N6dK/qBA61hfvkkTq2MVQMZWW93hxUvsK8Q=)
                          2: IhUUSRuZPQ93qmBEuCsX-VJJ8_Y.roa (hash: wQMNMlSi7ML40phwxmQnjfrhkgmt/fkZEJZEruvJetM=)
                          3: J7oFZC1CJk2GtQuj_-ICPxLHOsQ.roa (hash: oGKjzDdrrCM7vTukMw0Fba8efuuuaYKCVfCXlBR+Jpc=)
                          4: O_CD_5ALmuh68TK-xyESGxnHW24.roa (hash: A4M+FCTh23fTzIJAI9lDd9sc/Yc7QQultOVy81PYaSo=)
                          5: Y05YWTld1eID__luRs7pp8ewZwY.roa (hash: 02lMUa1OHr9cMSAHSJuLTXNV5rSyX1jxkq8ORZ0rugw=)
                          6: fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl (hash: KtZLFy1otX1N6cQwvpZlLhmy84gePgqXG8YWjGS8alY=)
                          7: oFmVPpAqArTolT86zoYzDNps-ck.roa (hash: vxR9GCqj5WIpQWRTxrTVSqLQRxXTFqzFObqIUCYCQMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4e:5a:da:02:ae:33:2c:c5:6f:ec:ae:a8:20:03:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
        Validity
            Not Before: May 16 15:01:18 2026 GMT
            Not After : May 17 15:01:18 2026 GMT
        Subject: CN=f3269a4bde63c39bc1edcf09c7a7ed61e8a030c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d6:91:21:2a:3a:89:b8:5c:4f:22:4e:f9:f3:
                    9f:1f:58:96:75:d4:9d:d3:84:75:c3:07:4e:65:43:
                    cb:06:8d:e2:fc:47:8e:c1:12:6d:9a:16:71:25:8b:
                    06:70:12:ed:0f:5e:68:98:fb:f4:83:e1:d7:74:0d:
                    51:14:0d:e5:18:db:6a:4e:0a:ea:f0:29:4f:90:49:
                    7a:17:ac:29:b0:c4:73:8c:08:5a:d8:9a:29:56:34:
                    d4:02:28:21:7f:9f:34:23:a0:8f:aa:de:49:b3:b1:
                    0a:d5:40:c3:34:13:65:6d:b6:25:e7:d2:bb:58:e2:
                    c5:a9:7b:ed:1d:e7:2b:50:e8:09:ea:fa:e5:3a:1f:
                    6c:d2:8c:70:aa:15:11:6f:45:42:64:80:47:46:e7:
                    10:d9:d8:24:2c:46:f5:35:af:72:4a:19:92:66:71:
                    db:7a:9a:b6:7f:2c:52:4d:77:29:00:8d:b8:da:b5:
                    84:c2:5e:0a:59:95:0f:bd:46:de:3f:6d:16:bf:0d:
                    5c:38:bc:34:a6:17:04:bc:5b:36:44:6e:5e:12:d8:
                    db:98:36:75:bc:1f:af:00:fd:bc:86:2e:50:18:30:
                    db:ab:6b:01:cc:9b:55:cd:44:1f:59:c8:9f:12:8b:
                    0a:ef:91:08:34:0e:51:c6:e5:f6:ea:43:dc:d7:80:
                    65:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:26:9A:4B:DE:63:C3:9B:C1:ED:CF:09:C7:A7:ED:61:E8:A0:30:C7
            X509v3 Authority Key Identifier:
                keyid:7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:93:cd:b0:16:b2:06:5f:a9:2c:ba:b8:b7:29:a0:b2:c7:4b:
         c9:b3:79:e3:92:a6:58:63:97:89:b4:01:54:71:34:57:f1:ac:
         2f:2d:92:6d:47:2f:ea:79:3b:1e:ed:1e:d7:10:cf:47:3e:a3:
         27:9a:0b:64:d8:3b:c5:f0:1e:7f:86:51:eb:16:28:9e:0e:69:
         ac:51:ba:13:1d:c7:df:96:41:55:64:b5:21:16:11:5d:e4:e7:
         f4:54:9f:36:01:89:80:f6:37:e0:d4:72:31:cf:3a:7c:56:b8:
         4b:56:fa:eb:46:35:ca:f8:c7:fc:8f:a8:4f:8e:fe:18:e6:d0:
         12:88:dc:f0:83:80:06:22:2b:9d:8f:a8:38:9e:70:0c:28:51:
         8c:bf:9c:b3:e1:22:41:6f:d2:51:27:cc:e0:03:38:79:85:3c:
         83:c2:c1:eb:2d:af:0e:e9:87:82:ee:3a:cf:18:9f:56:93:32:
         cd:c7:65:e3:f5:b9:b4:f2:ef:bf:24:66:81:c7:1a:c7:73:2d:
         1b:97:19:f2:81:9c:c2:c2:bb:b4:50:6c:c3:3d:09:bd:f7:5d:
         b0:75:77:1b:94:da:71:b1:1b:00:35:39:59:ff:2c:52:09:23:
         3e:d9:67:54:a3:de:c7:17:21:e9:c1:a2:47:5c:68:25:8d:cd:
         d9:ea:8b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:19:14 2026 by rpki-client