Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
File:                     4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft (raw, json)
Hash identifier:          w54e+F75uZYLUQRX1ufIHAw0nsXck8qUdgIpLj8I/r0=
Subject key identifier:   03:57:D6:D2:33:4B:D8:B1:37:3B:02:48:A8:43:B5:D8:83:F8:AA:F7
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Certificate issuer:       /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial:       019DD653BFB7FB63A7209355F09101E056D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
Manifest number:          190B
Signing time:             Tue 28 Apr 2026 23:01:45 +0000
Manifest this update:     Tue 28 Apr 2026 23:01:45 +0000
Manifest next update:     Wed 29 Apr 2026 23:01:45 +0000
Files and hashes:         1: 4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl (hash: mKXnppY9QwihVCw8Gy9A4g0Mxqkb4HuieMWvIezpRuo=)
                          2: 6tTmYQwXOKfIx8EFjvxOkACOgVE.asa (hash: B+RAPGXA/BvL3QEc86FbnID2OOj7wYJWGGhX0NgqKgw=)
                          3: H6apiE0r9rOHvwzUANUDplSJSTM.roa (hash: cqjpgcUWiCJ8i4KpFtLhuI6KYkP0u+mdUggey1II1u8=)
                          4: HO--5wVYjTks1d4pGuEUndfhIc8.roa (hash: PSZ01mmnd3IXqRjRDT7Afa21Y0Y9+VVQ6A0uP0yE5t4=)
                          5: MW9IWiMaMbGWFIKAeGiIeFNoSuk.roa (hash: WXFlau1tw1wJE2NKxIsomrLjPJJN929dyuhMW8ngWzA=)
                          6: MdU1TDg6gPzzC5Jls0YI4g9dlJY.roa (hash: j2NCQtDtoHkREqMeNzVs0PKFMT/ogTJaPYMRxR3JZtM=)
                          7: T-DUSJ-O8JuK2PTgLk1errJO3_0.roa (hash: gJp14x3RVojW4Suzi+mnaQxUdouo4FmMOXfOj5Yct9k=)
                          8: ZHbHMoVLkFBwhZlfsyeyMo-r1YI.roa (hash: uDFD5MRDq12e9FrZ9TcR4muF3bF0UyIZh3ZvvCBU2ko=)
                          9: ZxZQikqsaz0OBgAuk40P1B9mOf4.roa (hash: +lV4F2CcosnXBXnETAHYkbM6uZLP9AqAiX7Djks3Lcg=)
                          10: bWK3uhABpwf6mvXl4q8o7yPRJno.roa (hash: /EqiCs51Nu4hopwtTcoOO6slNJ4AdVdaWqEpADYeITY=)
                          11: iEeEp42GZdk24J_XhsWfZczs8bI.roa (hash: Es9r36V7+YULS9141hzfnZoXbLZeW7YOudDWcJDuqPo=)
                          12: iFaMxfToISMhuIOtnklJbKH8sU0.roa (hash: kU5eLBTCsLrlHtahyO4pMWGlPVbZxhPgtGU2m2KhHJU=)
                          13: kivoHyrrTapcSTu_dcsRevtd1qU.roa (hash: vlUy1Pp06OgEmxAK5wPWEB8oYerqdlsGZx57sDlsb/I=)
                          14: knMCjsMKq8boFlcM4TD-NB1mee0.roa (hash: 5pXrohpLzHpy5wR5NL0Pk7xascagMMWfyt+Jyy021+I=)
                          15: nBm950xJAm9pONVZhHt0wVFEq7Y.roa (hash: ZyCH9JBRPWP0WR4LL51Jbb1msIvVHDWA7bezxMkIVWY=)
                          16: orZjZ-bLi4QKzxMYS8aOyD5DwHw.roa (hash: j0NxewdNRbQ+iT6xBmN+n5xKVYa/xRMyvSC57UkHgro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Apr 2026 23:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d6:53:bf:b7:fb:63:a7:20:93:55:f0:91:01:e0:56:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
        Validity
            Not Before: Apr 28 23:01:45 2026 GMT
            Not After : Apr 29 23:01:45 2026 GMT
        Subject: CN=0357d6d2334bd8b1373b0248a843b5d883f8aaf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:25:1f:13:b3:6c:fd:98:b2:79:0f:b3:69:39:
                    39:54:77:bb:f5:28:38:c7:b2:80:cc:95:2b:43:c2:
                    a2:96:3b:f4:76:c8:c1:0c:66:2b:6b:50:80:63:e6:
                    e4:9c:63:11:87:dd:47:aa:0a:60:58:23:95:4c:56:
                    88:43:8a:d5:63:0c:e6:8a:ac:9c:14:3d:e8:d9:41:
                    51:93:9f:02:ca:71:07:fe:cb:d6:54:e7:50:9f:10:
                    4c:c8:90:c1:0f:42:e3:fa:66:1b:50:3b:2e:42:33:
                    8b:72:af:a3:4e:05:b6:ce:02:20:75:15:13:f1:60:
                    62:6e:c8:1a:33:b5:c8:7a:c8:f1:74:d9:1b:77:9e:
                    25:1b:3d:9f:73:dc:81:c7:39:95:ce:fa:6a:71:ae:
                    5b:15:e0:55:83:5b:2f:a0:f9:a1:2e:52:80:09:ef:
                    f6:75:9a:48:71:f6:2b:6c:da:9a:aa:99:f6:42:ff:
                    a9:f0:02:ad:c8:83:be:d2:92:39:f5:05:15:d6:f7:
                    06:41:82:ea:cc:a5:d2:0c:35:19:b5:ff:f4:f9:97:
                    4e:0a:ff:d5:31:06:e1:a4:92:44:b9:f6:ba:3a:83:
                    c0:70:a9:e3:51:e0:c7:aa:6c:3a:55:c1:c9:22:09:
                    2c:40:f8:6e:cb:a7:5a:91:51:82:bd:67:80:9d:ab:
                    c9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:57:D6:D2:33:4B:D8:B1:37:3B:02:48:A8:43:B5:D8:83:F8:AA:F7
            X509v3 Authority Key Identifier:
                keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:04:99:df:48:af:74:f1:c3:c5:e6:7b:66:c9:69:16:38:b6:
         90:c6:50:ed:35:c3:9f:a1:2d:a7:b2:97:12:50:30:79:5c:aa:
         3a:d2:16:64:7e:c2:7b:7c:12:be:77:45:e4:e8:28:0d:34:1d:
         ed:53:f1:72:67:29:44:3e:b4:a5:31:3f:4e:59:83:e0:6e:aa:
         1e:55:27:80:e7:24:b2:28:65:bb:5b:ed:a6:43:76:63:87:63:
         29:a1:78:3f:00:7b:dc:7c:7d:b4:f9:59:63:83:29:be:51:94:
         3b:d3:4a:2a:7d:1b:5e:74:56:0a:95:3e:2b:70:1f:20:ec:95:
         57:01:d3:45:e5:d6:b5:a5:87:f1:9c:da:0c:e1:ba:42:33:e6:
         48:9b:ad:c2:43:75:35:ae:e6:bc:fa:7d:eb:e9:20:13:70:0d:
         ed:d4:40:e2:8d:ce:91:31:47:33:30:7d:c6:9f:e5:a4:62:84:
         82:59:70:cb:fa:a1:0a:96:f7:7d:2e:27:82:2b:83:ec:a3:7a:
         0c:82:53:88:ee:e7:f1:70:71:1a:49:6b:98:88:8f:29:db:e6:
         28:b6:87:72:5b:84:cf:a9:4b:e3:f6:58:6c:07:05:09:5d:43:
         c4:4d:cc:69:5f:57:46:6a:df:5d:05:05:40:b1:f0:6c:94:ff:
         35:15:8e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 04:08:43 2026 by rpki-client