Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
File:                     564LxrVkpXPje515fLdeuxt24AE.mft (raw, json)
Hash identifier:          tySNayf3Vk4LIRQ5N++K8hkY8AU6Run0ahdJ09iY7xI=
Subject key identifier:   74:1F:B8:86:0C:60:BA:10:56:12:67:17:C2:D0:48:B6:A2:8A:0E:83
Authority key identifier: E7:AE:0B:C6:B5:64:A5:73:E3:7B:9D:79:7C:B7:5E:BB:1B:76:E0:01
Certificate issuer:       /CN=e7ae0bc6b564a573e37b9d797cb75ebb1b76e001
Certificate serial:       019E2F5F558FD29A978CBDE7E99B9776AD36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
Manifest number:          190C
Signing time:             Sat 16 May 2026 06:00:37 +0000
Manifest this update:     Sat 16 May 2026 06:00:37 +0000
Manifest next update:     Sun 17 May 2026 06:00:37 +0000
Files and hashes:         1: 564LxrVkpXPje515fLdeuxt24AE.crl (hash: 6S+R4ZZLzQGR61PgZP41oWZGIz7R3tuylJ66RrFGYg4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 06:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:5f:55:8f:d2:9a:97:8c:bd:e7:e9:9b:97:76:ad:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ae0bc6b564a573e37b9d797cb75ebb1b76e001
        Validity
            Not Before: May 16 06:00:37 2026 GMT
            Not After : May 17 06:00:37 2026 GMT
        Subject: CN=741fb8860c60ba1056126717c2d048b6a28a0e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:55:d5:f6:72:ba:40:3c:ef:7f:a9:47:d4:2b:
                    08:de:d9:27:50:0d:dd:e2:7c:6b:b5:dc:cc:cd:5d:
                    1c:a3:93:3c:02:eb:97:e3:4a:d4:cb:9a:cb:28:f9:
                    8e:c4:5f:c4:e1:42:3b:8a:d2:37:9c:dc:56:7c:63:
                    42:44:dd:43:bb:be:e2:7c:0f:20:35:53:06:08:b1:
                    d0:a9:81:3c:36:af:b1:fb:d4:e7:79:ec:d5:f1:63:
                    c0:44:19:71:30:da:e1:5f:10:45:8f:8a:94:d2:0a:
                    b3:4d:70:3a:cc:e0:f8:a6:30:e4:f5:66:26:fb:68:
                    26:c6:01:49:2d:d4:ee:91:ab:2d:68:55:b5:90:7c:
                    7c:4f:ac:ea:2e:8a:10:80:b6:3e:c9:5a:2a:91:c2:
                    a3:3b:00:d5:17:71:b4:3f:69:80:94:98:5f:68:f3:
                    c1:dd:65:63:e7:80:a8:fe:14:29:8d:26:17:21:52:
                    e8:f8:6b:a1:6d:4e:38:3b:cd:39:9f:10:4b:1d:03:
                    9a:ae:ce:50:d0:53:71:30:b8:c6:b6:47:2c:c5:91:
                    27:41:58:4e:fe:34:88:c1:91:af:c9:12:b1:7d:ab:
                    b4:aa:60:fb:7a:c8:c7:6a:a2:77:f1:d5:b9:f0:d5:
                    e5:f0:e1:c2:54:3c:e8:a5:e5:a8:1d:03:ea:b0:9a:
                    cd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1F:B8:86:0C:60:BA:10:56:12:67:17:C2:D0:48:B6:A2:8A:0E:83
            X509v3 Authority Key Identifier:
                keyid:E7:AE:0B:C6:B5:64:A5:73:E3:7B:9D:79:7C:B7:5E:BB:1B:76:E0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:7c:5a:51:d0:96:c4:3f:95:15:24:74:34:f9:74:53:9c:0f:
         53:66:58:b4:35:e8:2b:40:76:02:68:22:9e:59:b2:1e:63:c8:
         48:9b:30:cd:b6:e0:e5:8d:2c:67:36:10:10:c6:70:64:eb:b2:
         85:15:b5:b8:ca:c9:50:bc:62:38:8d:6b:86:8d:55:89:f1:15:
         1c:28:2e:70:b2:2e:12:d6:58:30:d2:83:21:a1:b6:49:51:d1:
         3a:a3:e0:7c:43:c6:2b:b1:cc:91:fd:aa:4b:08:0a:4d:e3:4f:
         09:93:21:4d:be:13:e6:f2:97:d2:3c:e2:58:cf:70:31:23:dd:
         d7:b9:da:a5:13:6e:fd:a3:41:9d:e3:91:aa:be:f0:b7:66:b4:
         03:ed:b0:8c:b8:84:9a:05:a2:7d:e0:46:20:80:9a:6c:b8:74:
         d1:e5:78:46:6b:87:cf:7f:97:55:dd:48:21:4c:f6:57:21:27:
         99:7b:d3:9e:25:4c:c7:bf:71:f4:87:b6:28:ea:5d:28:9c:05:
         a7:05:99:9f:c0:06:fc:fc:5d:b8:94:68:3c:73:86:6e:8d:6e:
         94:8c:77:74:b9:4f:dc:48:49:33:09:88:9a:23:2b:9a:aa:3f:
         79:07:81:16:8b:04:67:8b:0b:68:34:17:83:e0:cd:21:82:d7:
         84:0b:8a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:40 2026 by rpki-client