Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
File:                     2oNN8dr6f-bq02Cz7nWikxrx_-k.mft (raw, json)
Hash identifier:          TmQji8tkcq1hhb+vnqm9JoOjWOtPx0dCCGtcs4pe1pI=
Subject key identifier:   8C:0B:9C:3B:79:CA:DF:AD:7E:DE:F4:80:E9:E3:EF:C6:4B:2A:F2:96
Authority key identifier: DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
Certificate issuer:       /CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Certificate serial:       019E29CBE292665F824A379597E1B4746958
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
Manifest number:          1910
Signing time:             Fri 15 May 2026 04:01:28 +0000
Manifest this update:     Fri 15 May 2026 04:01:28 +0000
Manifest next update:     Sat 16 May 2026 04:01:28 +0000
Files and hashes:         1: 2oNN8dr6f-bq02Cz7nWikxrx_-k.crl (hash: beOHLhEvdhLzjhnMnoKWcDvyhwNg+VCzfZAsh0gdtJ0=)
                          2: JinlA7FKjDVbIRYDa6baiCb1Mj8.roa (hash: uM4odhzyAtfREjpDL6HMQcfCGmiVRzakbUk8aFudh0U=)
                          3: mLaW00UJoliFlQBanGYAZx9oqck.roa (hash: Vzpq2mt7gfo81m95C8eFGQmCsDsfCtgB1hMDxkMn2vc=)
                          4: q4elAfSV3pyfkYrBN_lZOQLkI4k.roa (hash: r+8++4MhJRSapDrpwTS15Xt4KYpfzjt0/BUoTi0KaP4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:cb:e2:92:66:5f:82:4a:37:95:97:e1:b4:74:69:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
        Validity
            Not Before: May 15 04:01:28 2026 GMT
            Not After : May 16 04:01:28 2026 GMT
        Subject: CN=8c0b9c3b79cadfad7edef480e9e3efc64b2af296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:00:a7:7d:23:50:c2:09:29:41:7a:25:13:42:
                    3b:cd:2b:e4:6d:d0:10:9e:ac:35:fb:ac:ab:da:d1:
                    0d:32:9d:f0:8a:1c:03:01:dd:3c:20:0e:b2:11:01:
                    b1:aa:e0:aa:e0:a1:da:e7:bb:90:05:46:7f:41:51:
                    2d:a8:71:de:8b:37:df:5c:2c:c3:0a:43:7c:20:bc:
                    b4:96:10:2d:ed:49:e1:7e:24:17:b8:29:18:d9:a0:
                    87:35:e5:10:17:54:c9:02:76:43:58:e2:59:3b:ee:
                    5a:57:1f:51:3b:43:cc:0d:73:81:25:b5:27:04:a4:
                    71:e9:1e:e0:fa:6b:91:23:6a:5c:7e:bc:39:b0:52:
                    ce:02:48:73:dc:ee:0d:f2:02:77:f9:fb:7d:49:57:
                    af:7b:8e:dd:2b:1d:02:66:67:21:20:95:88:d0:8c:
                    80:70:71:12:0a:58:44:b1:e3:51:9c:02:cd:11:ef:
                    b4:81:79:26:89:5f:c5:94:6d:21:8a:0e:63:8d:bf:
                    77:09:5c:2a:36:a5:2b:c5:9b:25:7b:3b:17:33:9c:
                    ee:bd:25:f3:89:09:d9:de:81:a8:df:63:53:80:0e:
                    a1:d0:f3:4f:db:2a:c0:06:77:31:47:e6:fd:54:9e:
                    eb:ff:bf:c5:d5:64:e0:2c:0b:26:e2:50:65:89:5a:
                    75:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:0B:9C:3B:79:CA:DF:AD:7E:DE:F4:80:E9:E3:EF:C6:4B:2A:F2:96
            X509v3 Authority Key Identifier:
                keyid:DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:6c:78:03:a2:6c:ae:7a:56:3b:7e:d9:84:3f:8d:0e:ed:7f:
         71:3c:2a:b4:ba:4d:13:94:00:5a:8e:c3:d6:9f:4d:05:43:25:
         c4:2f:af:1c:39:26:fb:14:98:fc:e8:3d:21:83:c6:d8:f2:94:
         36:9d:ec:65:68:cc:5b:8f:54:54:e5:5e:b8:13:42:e8:13:43:
         b7:be:77:f0:d5:fd:d0:f9:f5:13:83:cf:62:48:5c:01:f4:ec:
         1b:00:12:f2:9c:cc:5f:c3:79:8a:6d:dd:83:c9:f7:bb:6f:f7:
         55:87:8e:ce:37:de:29:71:8f:97:8a:8b:e2:d7:63:4a:9e:50:
         2e:c1:21:dd:4f:8d:2b:75:5a:0c:7d:67:0e:63:8e:f4:a4:af:
         2d:19:3b:8a:46:85:94:93:37:51:af:0a:e8:be:a4:80:53:41:
         d7:b6:20:55:78:8b:6b:a7:51:f7:db:b7:9d:2b:71:6d:5f:cb:
         da:a7:49:14:c7:6b:2d:d7:ee:be:39:5a:1b:08:d1:f4:83:1f:
         42:e3:23:a3:e9:22:e5:e0:6a:b5:3b:16:79:0b:19:4b:a3:a1:
         0b:c2:cc:63:85:3a:a2:fe:4c:0c:93:a5:09:8c:a7:94:ed:ee:
         27:b8:9e:0c:88:bf:10:06:1d:88:7a:da:14:05:78:b8:b8:6a:
         12:29:38:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 11:15:14 2026 by rpki-client