Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
File:                     x9qC6HeTPZwslSyzdsk6qjN919I.mft (raw, json)
Hash identifier:          wjVox/R8hRDo1jSstD0aOJl68Gv7+jPf7lS2cVT9JYw=
Subject key identifier:   00:B2:54:07:0B:C5:EC:28:8A:42:5D:D8:4E:6E:BB:DC:23:DE:C5:D9
Authority key identifier: C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
Certificate issuer:       /CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Certificate serial:       019E307349989A3A38664CF99E643218C1F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
Manifest number:          1911
Signing time:             Sat 16 May 2026 11:02:02 +0000
Manifest this update:     Sat 16 May 2026 11:02:02 +0000
Manifest next update:     Sun 17 May 2026 11:02:02 +0000
Files and hashes:         1: iLa7f2S3_d-gftGTw6gty0-Uiak.roa (hash: rM0PahqNF2zfpsbMJjY2LhMIvSX7eg/hz/KEUHOLLAA=)
                          2: x9qC6HeTPZwslSyzdsk6qjN919I.crl (hash: ETKiUJXjrp+g3ByQizHqhX22tLTESgg5/czEu3Q6tIE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:73:49:98:9a:3a:38:66:4c:f9:9e:64:32:18:c1:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
        Validity
            Not Before: May 16 11:02:02 2026 GMT
            Not After : May 17 11:02:02 2026 GMT
        Subject: CN=00b254070bc5ec288a425dd84e6ebbdc23dec5d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c7:a4:aa:9c:cf:6d:65:aa:89:3f:9e:4a:4d:
                    0e:33:ef:53:95:72:ee:ba:5d:43:c3:eb:79:7e:d0:
                    f4:bb:17:74:fb:04:ef:56:de:bf:d1:38:ba:2c:75:
                    4f:9c:41:48:ab:46:dd:d0:da:1d:e4:14:ff:f3:4c:
                    1b:35:1f:67:6f:93:27:f1:c1:62:77:8f:43:03:e8:
                    10:97:14:bf:34:92:b0:2b:22:0e:df:ac:f8:68:9e:
                    ff:ee:85:a6:f7:5f:51:df:9c:5a:a9:13:85:e1:d0:
                    f8:5d:42:7d:09:96:ae:6c:4d:fb:64:f7:43:da:e7:
                    65:b3:b8:4d:f1:d1:d0:d4:a2:f6:ca:23:44:f9:d4:
                    75:3a:8b:e0:ce:cc:16:f9:09:43:d2:7d:65:14:e4:
                    be:fa:96:e7:92:0d:25:9f:24:b5:12:61:49:20:cd:
                    44:e2:52:16:32:c9:d8:16:4e:fc:52:9b:1c:78:67:
                    9e:f4:87:15:a4:72:c2:d3:12:94:0e:e6:e9:a5:b4:
                    2b:17:08:82:75:a9:91:ca:40:66:01:56:0a:6c:a2:
                    8f:d7:61:31:dd:ea:22:88:c9:e5:35:be:49:3b:c0:
                    e4:8a:e2:e1:3c:3b:c9:de:50:eb:a3:c3:ad:45:6a:
                    07:ec:cb:a9:55:17:32:e6:f1:01:f4:db:eb:4e:5a:
                    6e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B2:54:07:0B:C5:EC:28:8A:42:5D:D8:4E:6E:BB:DC:23:DE:C5:D9
            X509v3 Authority Key Identifier:
                keyid:C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:93:54:0d:c0:7d:ff:92:cb:f6:4f:1c:00:fe:8a:95:cc:d5:
         dc:c8:48:67:77:08:2e:ef:0f:f7:25:05:74:e1:46:3e:41:43:
         e4:ae:18:26:67:cb:29:6e:a7:12:2b:13:ba:28:6a:68:90:f2:
         71:cc:9e:d5:18:ff:03:fb:78:63:46:5d:fe:fb:63:2c:cb:f1:
         4c:b5:6c:4d:bb:94:77:04:4c:42:76:ad:9e:28:fe:f6:bb:45:
         73:d2:f0:0e:0f:42:7b:3b:a3:55:51:5c:e2:26:d9:bb:97:40:
         8a:eb:37:b5:79:16:7e:23:ee:61:b4:2b:14:de:ba:f7:da:6e:
         b8:9e:f3:b3:41:dd:df:3a:01:10:30:39:5d:f1:00:9a:97:22:
         f2:fb:05:07:7f:3e:e1:45:f4:f6:50:66:fc:93:1d:42:fa:9b:
         fe:a0:95:92:28:f6:be:f8:38:63:74:4d:30:ae:e5:b1:02:fa:
         b5:34:c4:3c:eb:69:69:4d:8b:9a:02:b2:6f:f6:51:c9:cd:6c:
         10:ed:87:60:a1:6e:c9:3e:99:57:50:cc:2c:0c:e5:4d:09:1e:
         32:32:67:88:dc:06:84:54:28:27:b3:e0:3a:c1:7f:4b:1b:35:
         fe:81:a6:c3:ae:38:1f:e2:ef:2b:bc:7a:a5:94:3b:cc:bc:7e:
         a8:04:f7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:00:54 2026 by rpki-client