Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
File:                     u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft (raw, json)
Hash identifier:          AcJbQQavW9WbFsy3/5lK8n51hJsqn+SZ7+tGZ8c2Ix4=
Subject key identifier:   CB:14:C7:F5:61:2C:3C:45:E3:E2:0C:33:6C:F0:3B:4E:EA:F7:CF:0E
Authority key identifier: BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4
Certificate issuer:       /CN=bbd351b274fc23a42728303638a0d62b606401b4
Certificate serial:       019E32980451963996DBEF66435E7BC34EFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
Manifest number:          1912
Signing time:             Sat 16 May 2026 21:01:23 +0000
Manifest this update:     Sat 16 May 2026 21:01:23 +0000
Manifest next update:     Sun 17 May 2026 21:01:23 +0000
Files and hashes:         1: 3dXQNTeYEXwgMvCj--w5pPENAJU.roa (hash: 3G9QvRM4k9jqWeSWNLfEsowBkk0Z8XBxLLqfEHkaBDM=)
                          2: b9cInp7Or1qBr9PuhesAeLquPqQ.roa (hash: 4GENDH+hUgF++1KALJEHVMXlXhH/iPfvsuAOj33raco=)
                          3: hS7RgT3aGNpjDg2o5zlqkEAGb90.roa (hash: ruxCN88xcOgn5K5hz1rXwR19nQEArZ1nYrpc6XCrIWE=)
                          4: pUeHHF4pC4-zIRXO_grSASp1OfM.roa (hash: kn9V/PD8fwcG7V/Q9LK/O7MAEpNrkEsY4bQFNUkSntc=)
                          5: tm-0BywjpYQ_JdG102XSdl2PwkI.roa (hash: DKW7dfG1+ENLwCJlJJ+O62vn9P7SrAjIIPIC1AGnTVc=)
                          6: u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl (hash: tNDdx3z8+ZhGNuMCWonbl73OC5ECzYllJ1s0CU0ELLs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:98:04:51:96:39:96:db:ef:66:43:5e:7b:c3:4e:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbd351b274fc23a42728303638a0d62b606401b4
        Validity
            Not Before: May 16 21:01:23 2026 GMT
            Not After : May 17 21:01:23 2026 GMT
        Subject: CN=cb14c7f5612c3c45e3e20c336cf03b4eeaf7cf0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f8:6c:2e:0a:ed:7a:2b:5c:d9:40:a8:c1:9e:
                    03:3e:7c:e7:e3:3a:40:92:45:60:47:85:6c:58:f1:
                    58:a8:3f:8b:21:58:d1:c0:b0:ea:d7:f5:b4:5b:b2:
                    e2:4d:21:a9:bf:56:6c:6f:56:75:74:96:19:ce:cb:
                    73:10:bc:53:01:05:8e:fc:d2:47:67:38:60:71:15:
                    dc:93:ac:3e:65:31:7b:e9:03:a6:18:8b:e0:89:55:
                    37:29:42:1e:72:66:bf:4d:a7:a3:76:af:08:76:ff:
                    d5:cb:55:e6:9c:1a:cb:cf:f5:eb:3f:5e:ff:07:10:
                    3a:4f:1b:14:a9:6b:61:05:c6:fc:da:6f:66:7d:ee:
                    0c:2e:f4:3e:03:f9:02:17:c6:0b:91:30:0c:22:2c:
                    3e:c7:25:ca:39:61:08:2f:cd:89:4b:f3:05:eb:81:
                    13:ca:f1:ac:04:62:1e:df:6a:99:b1:5c:8e:0d:a3:
                    92:e9:0f:f2:8e:e4:73:75:f8:50:a4:59:3c:33:87:
                    8d:d7:f3:4b:f3:f4:9d:9e:6e:36:e2:95:2c:98:57:
                    5e:5c:54:c9:b2:6f:93:39:ab:54:b5:b9:7b:65:e1:
                    95:34:08:7e:ba:a4:d7:2a:d4:9e:8b:1d:93:42:eb:
                    fa:10:55:14:0c:ab:f1:a9:fa:be:02:67:80:7a:f9:
                    c0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:14:C7:F5:61:2C:3C:45:E3:E2:0C:33:6C:F0:3B:4E:EA:F7:CF:0E
            X509v3 Authority Key Identifier:
                keyid:BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:ea:cc:a9:25:be:9b:1d:02:d7:82:94:b0:c6:65:c6:14:ca:
         05:9c:e5:e6:1e:09:2a:e5:01:ee:e1:c9:6f:0e:10:43:ae:b0:
         6b:4e:b6:a0:5e:1b:e3:fc:b8:48:04:23:16:3f:fc:78:b9:5e:
         c9:c2:3a:7a:ff:a5:32:b1:12:02:cf:0f:0a:b4:da:16:5b:47:
         56:6e:c9:bd:f1:74:2e:b7:f0:54:70:74:17:d6:c4:c4:07:40:
         d7:b3:e7:0e:50:32:62:e0:6b:34:0e:08:ec:99:ca:d5:7a:da:
         8f:4a:3d:64:37:a9:b5:2f:a4:2a:18:bd:26:b1:76:54:14:4e:
         fc:ce:72:bc:cc:99:8a:d2:20:29:b2:2a:b9:e6:1a:e7:15:15:
         83:05:e6:c8:60:f9:dd:f4:3f:ca:82:58:c6:b8:ac:40:7c:89:
         28:55:c2:6d:52:ea:ce:03:ab:bc:c1:26:10:e6:90:8d:c0:48:
         14:04:46:8f:06:91:15:d0:77:dd:9f:61:f9:ad:3f:b7:ff:b5:
         23:67:48:1e:1d:c8:7a:2b:e3:74:6b:57:80:f4:34:02:19:29:
         7e:56:51:a3:e5:07:f8:a9:72:59:84:83:3e:50:ed:fe:c8:c6:
         33:b8:cb:78:3c:f7:c6:3b:ed:04:8c:1f:2d:2e:1f:3c:0a:f2:
         25:b6:75:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 01:14:29 2026 by rpki-client