Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
File:                     9lO0wxURtUguuEJaORN51D_W1FU.mft (raw, json)
Hash identifier:          ADqN4JQ78rzPqG4zVwEZgySGFQRBDrYBqq0hBujVPMI=
Subject key identifier:   50:58:20:54:EF:28:5E:77:DF:A3:B1:2F:AB:E9:71:10:6D:21:EB:0E
Authority key identifier: F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55
Certificate issuer:       /CN=f653b4c31511b5482eb8425a391379d43fd6d455
Certificate serial:       019E3004D3F85A28BCEF3B5031E8A470D6FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
Manifest number:          190C
Signing time:             Sat 16 May 2026 09:01:23 +0000
Manifest this update:     Sat 16 May 2026 09:01:23 +0000
Manifest next update:     Sun 17 May 2026 09:01:23 +0000
Files and hashes:         1: 9lO0wxURtUguuEJaORN51D_W1FU.crl (hash: 1bm7i4KU1OanBg99NJeY6E7c4iui3L26WQRu/Q2+LWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:04:d3:f8:5a:28:bc:ef:3b:50:31:e8:a4:70:d6:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f653b4c31511b5482eb8425a391379d43fd6d455
        Validity
            Not Before: May 16 09:01:23 2026 GMT
            Not After : May 17 09:01:23 2026 GMT
        Subject: CN=50582054ef285e77dfa3b12fabe971106d21eb0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c4:aa:1a:fa:f3:1c:be:8a:8c:b1:d8:cd:c5:
                    1f:ec:05:9e:6a:a7:9c:e7:2b:51:c3:70:46:46:32:
                    36:49:3a:71:02:69:fc:02:54:f3:6e:45:11:29:e3:
                    b8:e3:38:65:82:18:e4:c2:80:79:02:9f:d5:aa:47:
                    e2:9a:c3:66:2e:95:19:09:9d:9b:b5:66:35:94:fb:
                    01:46:b6:5e:78:d4:0b:43:a6:2a:42:10:0a:d4:46:
                    70:64:55:32:b1:31:bd:ea:68:d0:81:f5:3c:cf:ff:
                    e1:fc:21:36:21:44:e6:dc:2b:7b:e7:dc:e8:46:3f:
                    c3:b7:26:12:e6:dc:1b:42:0d:d9:79:c8:c2:04:e8:
                    c0:39:7b:bf:ac:67:b1:81:14:33:c4:6c:8b:f4:f0:
                    bd:89:ba:aa:6a:3f:8f:73:83:7d:fc:07:aa:c9:92:
                    a4:78:54:b9:b9:d8:e1:00:52:38:4e:ba:e9:88:b6:
                    3b:8c:7f:32:4a:15:95:a9:fe:3e:50:80:bc:6f:e9:
                    9a:37:c0:b6:83:02:68:41:35:85:e7:b2:f2:71:46:
                    42:bf:75:b3:1a:98:16:bc:a0:1a:3b:1d:54:82:f2:
                    18:40:45:61:3b:ac:07:a9:47:03:9b:48:c7:52:1a:
                    60:a2:55:f9:3d:6e:4a:13:34:e0:14:76:3d:10:07:
                    a1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:58:20:54:EF:28:5E:77:DF:A3:B1:2F:AB:E9:71:10:6D:21:EB:0E
            X509v3 Authority Key Identifier:
                keyid:F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:08:7c:73:52:b0:05:5c:dd:6d:19:94:ba:f1:b1:45:83:28:
         65:12:c2:6f:6e:c2:25:36:2a:29:5a:44:41:f6:75:d9:55:3a:
         63:9f:c6:7c:d0:58:f0:fe:e6:43:0b:30:27:60:4b:a4:b7:64:
         0f:18:63:5d:08:e0:48:54:4e:9d:4d:63:04:da:f0:8e:44:0b:
         73:45:8e:28:41:d5:14:2b:c0:51:ff:72:31:b9:9f:6c:bd:83:
         5f:1f:1f:f3:6c:46:24:0f:db:bb:33:a0:19:f2:3e:f3:b0:38:
         36:7a:d0:10:68:90:e4:07:20:b9:1e:45:c4:83:87:fb:a7:a6:
         79:b3:92:05:6d:f1:85:20:d4:00:a1:03:9e:f2:25:f9:50:0d:
         4c:7e:5c:4d:1d:ef:4d:d1:54:af:77:e6:a8:c9:4e:94:ed:a3:
         82:6e:a7:5c:b4:a9:94:b2:ea:05:30:8d:07:a9:a0:9e:24:f6:
         42:56:a2:1b:fb:d1:fd:38:ad:a8:a6:5f:1f:1c:6f:98:05:8a:
         e0:c7:c3:f7:c3:b9:cb:dd:67:2e:ea:48:35:a8:9d:ab:58:87:
         38:4b:f0:c8:6d:43:2b:07:e8:87:a9:4d:8a:35:ac:a8:ba:8f:
         d9:3b:81:eb:8f:64:43:8b:4d:a9:e4:8e:eb:f5:6d:fe:6f:53:
         3d:32:d4:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wBNP4Wii87ztQMeikcNb9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NTNiNGMzMTUxMWI1NDgyZWI4NDI1YTM5MTM3OWQ0M2Zk
NmQ0NTUwHhcNMjYwNTE2MDkwMTIzWhcNMjYwNTE3MDkwMTIzWjAzMTEwLwYDVQQD
Eyg1MDU4MjA1NGVmMjg1ZTc3ZGZhM2IxMmZhYmU5NzExMDZkMjFlYjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sSqGvrzHL6KjLHYzcUf7AWeaqec
5ytRw3BGRjI2STpxAmn8AlTzbkURKeO44zhlghjkwoB5Ap/VqkfimsNmLpUZCZ2b
tWY1lPsBRrZeeNQLQ6YqQhAK1EZwZFUysTG96mjQgfU8z//h/CE2IUTm3Ct759zo
Rj/DtyYS5twbQg3ZecjCBOjAOXu/rGexgRQzxGyL9PC9ibqqaj+Pc4N9/AeqyZKk
eFS5udjhAFI4TrrpiLY7jH8yShWVqf4+UIC8b+maN8C2gwJoQTWF57LycUZCv3Wz
GpgWvKAaOx1UgvIYQEVhO6wHqUcDm0jHUhpgolX5PW5KEzTgFHY9EAehWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFBYIFTvKF5336OxL6vpcRBtIesOMB8GA1UdIwQY
MBaAFPZTtMMVEbVILrhCWjkTedQ/1tRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWxPMHd4VVJ0VWd1dUVKYU9STjUxRF9XMUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82ZjYyODUtMTI5ZC00MWY2LWI4MzAt
MzE5MzY4ZDkxZmMzLzEvOWxPMHd4VVJ0VWd1dUVKYU9STjUxRF9XMUZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy82ZjYyODUtMTI5ZC00MWY2LWI4MzAtMzE5MzY4ZDkxZmMz
LzEvOWxPMHd4VVJ0VWd1dUVKYU9STjUxRF9XMUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcAh8c1Kw
BVzdbRmUuvGxRYMoZRLCb27CJTYqKVpEQfZ12VU6Y5/GfNBY8P7mQwswJ2BLpLdk
DxhjXQjgSFROnU1jBNrwjkQLc0WOKEHVFCvAUf9yMbmfbL2DXx8f82xGJA/buzOg
GfI+87A4NnrQEGiQ5AcguR5FxIOH+6emebOSBW3xhSDUAKEDnvIl+VANTH5cTR3v
TdFUr3fmqMlOlO2jgm6nXLSplLLqBTCNB6mgniT2QlaiG/vR/TitqKZfHxxvmAWK
4MfD98O5y91nLupINaidq1iHOEvwyG1DKwfoh6lNijWsqLqP2TuB649kQ4tNqeSO
6/Vt/m9TPTLUcQ==
-----END CERTIFICATE-----
Generated at Sat May 16 17:57:03 2026 by rpki-client