Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/ApHU3hMNpqrOIu2ZZQvhgkl-C88.mft
File:                     ApHU3hMNpqrOIu2ZZQvhgkl-C88.mft (raw, json)
Hash identifier:          oV/QjV2rxp807jsGXjelY7zRM07vbI06T8dvCs1+o7I=
Subject key identifier:   D9:4C:DA:B8:B7:D7:5C:DD:2F:67:D4:9F:7B:50:55:96:91:A9:39:58
Authority key identifier: 02:91:D4:DE:13:0D:A6:AA:CE:22:ED:99:65:0B:E1:82:49:7E:0B:CF
Certificate issuer:       /CN=0291d4de130da6aace22ed99650be182497e0bcf
Certificate serial:       019E30E00E3BEC1BBCFA07FB8E10B0115E89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ApHU3hMNpqrOIu2ZZQvhgkl-C88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/ApHU3hMNpqrOIu2ZZQvhgkl-C88.mft
Manifest number:          190F
Signing time:             Sat 16 May 2026 13:00:50 +0000
Manifest this update:     Sat 16 May 2026 13:00:50 +0000
Manifest next update:     Sun 17 May 2026 13:00:50 +0000
Files and hashes:         1: ApHU3hMNpqrOIu2ZZQvhgkl-C88.crl (hash: la9j+vjBRRy8qH+LB7dASTe5PT2ph3akYG6fq9RMhh4=)
                          2: JjDhj2srmVAP3AT2q_uafFZ9Ihw.roa (hash: u5PsqVAMH7Yc5b8Mh+/CsUxDWS3RTBQzxJkkDCsiaVs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/ApHU3hMNpqrOIu2ZZQvhgkl-C88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/ApHU3hMNpqrOIu2ZZQvhgkl-C88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ApHU3hMNpqrOIu2ZZQvhgkl-C88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:0e:3b:ec:1b:bc:fa:07:fb:8e:10:b0:11:5e:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0291d4de130da6aace22ed99650be182497e0bcf
        Validity
            Not Before: May 16 13:00:50 2026 GMT
            Not After : May 17 13:00:50 2026 GMT
        Subject: CN=d94cdab8b7d75cdd2f67d49f7b50559691a93958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:04:84:0f:9a:35:1b:e8:a8:86:62:a8:d5:57:
                    50:07:32:ff:2e:7d:55:ca:ad:6a:c3:75:04:22:3f:
                    8b:96:ba:12:77:c2:9a:af:7a:1f:28:dc:b4:76:88:
                    c2:ea:82:68:03:1d:77:e7:e2:de:bb:cb:6e:09:47:
                    6f:5b:fc:0e:e3:44:fc:21:5a:2f:c0:38:e0:f8:d0:
                    7f:87:5d:4b:73:59:c2:e4:57:4d:a9:26:39:c3:2a:
                    41:ca:04:70:59:d2:bb:89:82:bd:cd:41:d6:4e:6a:
                    b6:8d:b5:a3:28:5f:a3:0f:c0:88:9d:6b:ba:e1:3b:
                    26:59:c5:a0:65:77:7e:c0:91:96:0a:6b:8d:26:58:
                    ea:8f:12:d4:6d:76:c0:bd:39:7b:c0:ba:4f:13:14:
                    2b:df:37:ad:f3:90:9d:35:3e:1c:07:bc:1f:80:11:
                    33:aa:d9:aa:be:32:80:07:0f:c7:61:75:b7:1c:f8:
                    ec:55:ab:f9:fe:82:02:bc:08:81:15:5e:0d:cf:25:
                    93:a4:94:78:d6:54:79:3a:36:6c:3d:ab:43:c3:9e:
                    02:2a:a7:6a:f5:6d:1a:2e:92:3b:80:b2:82:ea:a3:
                    82:4e:e5:61:87:67:4a:78:3a:d7:e7:6a:25:61:7a:
                    37:e1:43:a5:a7:00:0e:cd:b5:f5:7a:21:dd:41:df:
                    c0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4C:DA:B8:B7:D7:5C:DD:2F:67:D4:9F:7B:50:55:96:91:A9:39:58
            X509v3 Authority Key Identifier:
                keyid:02:91:D4:DE:13:0D:A6:AA:CE:22:ED:99:65:0B:E1:82:49:7E:0B:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ApHU3hMNpqrOIu2ZZQvhgkl-C88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/ApHU3hMNpqrOIu2ZZQvhgkl-C88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/ApHU3hMNpqrOIu2ZZQvhgkl-C88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:f1:30:4f:18:4c:ac:da:a0:e4:47:3a:28:f6:c9:c8:cf:8e:
         1c:c9:f1:fa:7e:19:f8:47:0b:06:83:e9:62:39:61:de:c1:24:
         65:85:d0:30:20:a8:86:36:7e:7b:4e:99:65:ea:42:5b:cb:68:
         e0:c0:c3:c5:0f:16:fe:fe:f9:50:74:62:fc:03:e7:48:31:66:
         35:8a:b9:51:d9:3a:40:d8:12:91:34:ef:56:ac:56:ed:a4:cc:
         77:e1:3c:d5:ef:8c:62:81:a0:84:04:fd:1a:de:19:42:47:42:
         c9:7d:cb:b0:75:69:60:a1:d9:a8:07:33:6b:76:a3:f5:87:93:
         bc:3f:8f:23:aa:31:45:5a:5a:50:9e:b1:26:1f:d7:b6:b1:b9:
         8a:a1:9f:04:68:35:b4:fb:28:7b:b6:6a:b2:31:f0:47:0e:52:
         76:2a:9b:b6:5a:5c:6a:83:7d:fb:66:93:1a:97:09:ae:c6:06:
         47:c8:64:c1:ec:b8:1b:1d:0c:fa:3f:14:ce:75:a0:2e:d3:00:
         eb:44:05:ad:aa:8e:0f:54:83:3a:c0:18:49:18:00:13:61:22:
         bd:2d:c8:ff:fc:21:fc:c2:2e:0b:c6:27:59:de:b7:a5:0f:2d:
         db:a1:e4:6d:cd:1e:fd:3e:5a:2f:ac:e7:71:df:1e:03:9e:ee:
         90:ca:e0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:21:01 2026 by rpki-client