Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
File:                     S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft (raw, json)
Hash identifier:          dQQCQ+P6JpOTytbtlkG8rSnbk3EoaE/JmODiGshLFUs=
Subject key identifier:   6B:37:5B:9E:58:BD:A4:28:6D:5F:E5:4D:5F:82:33:E2:96:58:07:07
Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
Certificate issuer:       /CN=4b98127943e7175734964010c89ef821416a31b3
Certificate serial:       019DCE636E2106783C0AD578FD7411C964C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
Manifest number:          1905
Signing time:             Mon 27 Apr 2026 10:01:55 +0000
Manifest this update:     Mon 27 Apr 2026 10:01:55 +0000
Manifest next update:     Tue 28 Apr 2026 10:01:55 +0000
Files and hashes:         1: S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl (hash: x5o/5x4tCVyzDaoRQ5+nxRmcKg6mm0vTKnPl4mOElok=)
                          2: cN9-QkcDeRmmddqpx80fjE4LD7s.roa (hash: O0DZXiBII2s8che4/ZMrj0hj9juscGV08AllWCCgxdM=)
                          3: mN4_7znmhWi-7I9qZMAr9ui1cgU.roa (hash: wXKg1WZNGUjZDLkEp6R81wVKgQ5zsURw3VtNW0RMihk=)
                          4: p8O4ZN9Xeldr_QvYtZL9RkkK6rk.roa (hash: KcqVP0b3/1a1YhXbBJeqeSikqnykQvFC4LFHO5+2KLo=)
                          5: yCZntdcD-FiyyzALoPRod_Tynro.roa (hash: A7enThxiUzB12fnWIKjiXX2k7pCD4DTrx01Es4L2jQE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ce:63:6e:21:06:78:3c:0a:d5:78:fd:74:11:c9:64:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b98127943e7175734964010c89ef821416a31b3
        Validity
            Not Before: Apr 27 10:01:55 2026 GMT
            Not After : Apr 28 10:01:55 2026 GMT
        Subject: CN=6b375b9e58bda4286d5fe54d5f8233e296580707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:68:fb:61:81:08:76:94:d3:70:41:88:d8:99:
                    3c:05:58:4e:e6:29:4a:44:2e:21:14:58:65:74:71:
                    9f:2d:1d:82:48:34:0b:1f:fe:c1:c2:a0:ec:bd:cf:
                    83:91:0b:7f:72:c8:4c:7f:c4:4c:ae:07:31:0a:87:
                    b2:55:83:1f:27:5c:43:bb:12:f9:b8:46:15:0b:5c:
                    6b:36:ff:5f:fd:e6:6f:9c:b5:e9:41:a6:94:b9:54:
                    69:2d:2f:26:ef:e9:b4:17:90:9d:97:df:39:53:87:
                    fd:b3:18:0a:a8:1e:e3:08:52:fb:ed:6f:af:97:19:
                    c8:bb:11:75:01:c9:59:87:7f:ee:d7:50:47:30:91:
                    c0:93:c7:ff:80:2a:a9:d7:9f:ff:1e:42:6d:11:17:
                    c1:2f:07:33:54:14:25:98:55:c5:ad:3c:9a:d9:87:
                    1b:ad:cf:76:fd:be:7e:b0:1c:ea:ae:c7:c2:a4:8a:
                    ce:e1:39:8b:c7:ac:4e:98:3c:79:fd:f1:9c:7c:be:
                    fa:3d:68:f1:aa:f8:70:76:e9:28:10:7e:e1:2d:82:
                    c2:19:e3:26:6a:e5:50:88:c7:3f:a8:31:1e:00:da:
                    46:01:f8:f0:07:08:0b:b0:d5:97:22:53:b8:f5:4b:
                    34:93:ea:d7:bd:d7:a2:c8:0a:a2:df:b4:a8:2d:0b:
                    97:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:37:5B:9E:58:BD:A4:28:6D:5F:E5:4D:5F:82:33:E2:96:58:07:07
            X509v3 Authority Key Identifier:
                keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:99:37:9a:5d:6f:86:54:59:26:54:e2:6e:18:8b:1c:6f:12:
         9d:0c:c6:e2:a6:d3:62:27:6d:81:f9:58:1d:03:b9:bf:86:52:
         68:cd:09:6b:03:16:9d:d7:ce:8e:d7:15:44:16:77:c0:d4:de:
         7f:65:f1:e6:76:b8:05:d0:1a:4c:92:f9:e3:6c:f1:be:52:92:
         f0:c3:42:3e:d6:2b:2a:ec:24:00:48:69:6b:35:df:6b:d1:a0:
         04:ed:9a:88:14:16:91:4a:f2:46:ed:99:9d:9d:88:d7:b5:6a:
         45:b0:4c:9f:44:49:ca:71:ff:28:81:c6:e4:dd:52:4b:45:22:
         c2:93:ff:36:5a:e9:03:df:7a:f2:fb:5d:df:dd:cc:11:b9:71:
         9a:56:9d:73:80:49:a8:9c:aa:c2:22:41:dc:e7:db:9e:7b:0e:
         82:dd:7f:3a:25:e5:19:a2:b8:22:2e:7f:b2:8b:6a:de:f3:df:
         21:2c:7b:5f:20:57:5e:29:b3:29:5b:5b:4e:fa:49:d0:6a:7d:
         5e:3d:77:e8:92:4b:6d:cf:d0:61:b1:88:df:47:3c:ff:b7:59:
         09:d7:e7:85:21:3e:09:24:c9:72:ef:85:15:81:46:c5:8b:59:
         78:03:69:81:7f:f5:1d:29:0f:5c:59:4a:0c:18:a9:93:dc:e0:
         c8:39:42:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:12:45 2026 by rpki-client