Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
File:                     AU97fVHlCBgO5zzt292VXDl3SCI.mft (raw, json)
Hash identifier:          DxX7o8J8Wm/ZFwvVHXUDAPZ+wjxByI4rfUUzyCe49HE=
Subject key identifier:   05:E9:16:0E:DD:73:70:DB:CA:51:E4:37:F9:4D:97:F0:E7:56:69:06
Authority key identifier: 01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22
Certificate issuer:       /CN=014f7b7d51e508180ee73ceddbdd955c39774822
Certificate serial:       019E30049A50B36CFC36721EA7B8F24DD474
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
Manifest number:          190C
Signing time:             Sat 16 May 2026 09:01:08 +0000
Manifest this update:     Sat 16 May 2026 09:01:08 +0000
Manifest next update:     Sun 17 May 2026 09:01:08 +0000
Files and hashes:         1: AU97fVHlCBgO5zzt292VXDl3SCI.crl (hash: G/wdPX7rQp3pWlj/t8iuxXys158XaUWPax0w8VR5QSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:04:9a:50:b3:6c:fc:36:72:1e:a7:b8:f2:4d:d4:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=014f7b7d51e508180ee73ceddbdd955c39774822
        Validity
            Not Before: May 16 09:01:08 2026 GMT
            Not After : May 17 09:01:08 2026 GMT
        Subject: CN=05e9160edd7370dbca51e437f94d97f0e7566906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ea:cf:82:c7:e3:c6:68:d3:f7:78:74:0e:5d:
                    f8:51:5c:ed:ab:58:ce:0c:ba:df:31:18:4a:25:3e:
                    ca:97:16:2e:fa:bb:43:09:c9:2e:39:2b:34:d3:d3:
                    80:db:91:08:33:64:98:60:f8:6e:49:2a:1b:9b:73:
                    4b:62:19:f9:77:1b:36:c4:f0:99:94:ba:69:96:01:
                    64:32:de:cf:fe:4b:a4:a8:4d:f5:d1:e6:25:2a:90:
                    8d:ab:58:05:d2:37:44:08:b8:55:04:73:b8:e8:60:
                    21:fc:57:b3:b7:89:05:88:9d:38:7f:d8:8a:06:8a:
                    1c:55:e6:72:9a:fa:79:48:18:1b:b8:a2:48:a2:19:
                    81:43:a0:06:75:5d:f4:6b:36:bc:e1:0a:48:08:dd:
                    15:85:ab:52:f9:b1:71:04:2a:75:bb:a8:d2:80:72:
                    51:54:55:87:bb:ea:96:57:ad:3b:dd:1a:56:ee:ba:
                    86:fa:bb:f4:7c:e9:dd:fa:17:99:1e:ea:55:54:4a:
                    f0:02:8f:73:69:8d:9a:d2:df:a7:95:c4:bb:11:d7:
                    c1:5e:de:96:98:7b:70:ca:d6:4e:02:be:54:b7:dc:
                    6a:a7:5e:4a:ac:e7:06:ab:6a:74:75:34:ea:2f:ca:
                    37:03:4c:b4:7e:74:c1:27:47:da:bc:ce:26:79:c2:
                    d0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E9:16:0E:DD:73:70:DB:CA:51:E4:37:F9:4D:97:F0:E7:56:69:06
            X509v3 Authority Key Identifier:
                keyid:01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:fd:ff:09:91:1b:5b:b7:b5:b7:85:d5:78:9e:ce:c5:79:33:
         7a:cd:b3:0d:a0:41:2f:b0:fa:19:12:b0:02:e2:c2:b2:4a:c0:
         2e:a2:a0:9c:bd:d3:2d:7a:b3:2c:df:ba:c5:68:85:d6:d1:5e:
         5d:6f:fe:1d:94:f9:a4:c8:37:77:fa:66:12:0a:fb:5b:13:57:
         7c:fc:cb:34:ff:4f:f8:a4:02:58:b2:47:e5:2f:52:3b:06:c9:
         ed:78:41:f1:32:16:ae:44:3f:a7:4e:6c:9f:fe:6a:67:72:fb:
         f1:41:10:3b:c9:a5:88:81:8e:d7:f9:76:4b:dd:92:a4:82:4c:
         4e:a4:a6:61:be:eb:ee:3e:30:d3:c0:7d:5b:c9:e0:ea:6b:e0:
         eb:39:c2:a4:d3:a4:e0:2b:97:f2:0d:e3:8c:24:e5:86:9e:42:
         02:d3:ea:d5:ee:1a:e4:51:04:da:25:ff:88:51:62:9b:6e:5d:
         53:f5:1e:d5:e5:9e:95:0e:79:f9:b0:71:19:aa:3d:26:80:bf:
         81:e8:5f:58:c9:5c:dd:d8:6f:56:e3:a4:47:51:45:b8:4b:f9:
         3e:1b:b2:f9:71:23:7c:61:01:4d:49:8b:3c:4a:d0:ba:b2:1a:
         1a:09:89:33:ce:75:fe:7e:67:9f:bc:76:59:1e:79:18:e7:0a:
         ed:0b:43:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:24:32 2026 by rpki-client