Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
File:                     4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft (raw, json)
Hash identifier:          z3zATMo4YxfoI19Fm6vGKOLXSrl7jHlis0CZUA2je7g=
Subject key identifier:   E1:8D:B5:46:CD:87:EC:2F:59:94:9C:54:93:C1:E2:26:97:43:39:1C
Authority key identifier: E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
Certificate issuer:       /CN=e22277fdf65828ef40b58ce101946595507f1330
Certificate serial:       019E2FCDE2961E28183686958EE1ACB0B0A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
Manifest number:          1919
Signing time:             Sat 16 May 2026 08:01:22 +0000
Manifest this update:     Sat 16 May 2026 08:01:22 +0000
Manifest next update:     Sun 17 May 2026 08:01:22 +0000
Files and hashes:         1: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl (hash: RZFAhgbJ+crWInLDq1g5RuN9rmPtbREMv19UTktVu9w=)
                          2: CpV5ifZcjPyGOZZo5Kthc-0aYIE.roa (hash: lgb25S95umOL8YFj63EWLcLTY42lwBMqoGZsvrLzBnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 08:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:cd:e2:96:1e:28:18:36:86:95:8e:e1:ac:b0:b0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e22277fdf65828ef40b58ce101946595507f1330
        Validity
            Not Before: May 16 08:01:22 2026 GMT
            Not After : May 17 08:01:22 2026 GMT
        Subject: CN=e18db546cd87ec2f59949c5493c1e2269743391c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:98:c3:ab:6c:91:48:9a:60:c9:83:84:56:a9:
                    17:ea:21:27:b5:82:a5:31:2d:27:e9:58:b5:4b:25:
                    d5:9a:7c:54:2a:fb:13:96:be:a7:f2:b5:de:cf:28:
                    b4:11:4c:7d:fc:ec:40:6e:d7:32:f6:ec:08:8e:d8:
                    ce:75:a7:37:ce:83:b3:b7:6e:a1:d5:45:84:4f:ab:
                    85:4b:57:1d:88:67:c4:3a:36:55:d5:e1:69:0f:f9:
                    4f:fb:f6:ef:63:d2:6e:60:b9:cd:85:97:d9:7d:32:
                    cd:42:73:1b:a2:f3:d5:03:4c:4e:1e:64:b7:08:2e:
                    80:f4:5b:33:34:f9:cd:3c:52:1b:52:1a:3d:6b:28:
                    6e:8e:52:db:42:87:5a:98:f0:0c:5a:64:dd:79:95:
                    14:1a:7f:df:79:7e:70:b5:7b:f1:45:74:8f:33:7b:
                    36:97:b7:66:58:22:cc:95:3a:6c:49:7f:cb:65:c8:
                    6e:73:70:c7:47:b5:9a:6c:45:9a:57:4a:98:9a:cd:
                    9c:77:1e:c7:dc:72:ee:83:b0:bd:99:30:66:19:e2:
                    dc:fc:f9:44:92:3c:51:f8:2a:21:12:f1:5f:14:70:
                    5b:2f:72:30:ab:b6:03:7a:80:c0:d0:ec:3d:6d:3c:
                    50:6e:a1:2a:4c:46:10:7f:33:5c:21:56:26:c7:1d:
                    ae:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8D:B5:46:CD:87:EC:2F:59:94:9C:54:93:C1:E2:26:97:43:39:1C
            X509v3 Authority Key Identifier:
                keyid:E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:13:ff:ac:54:d5:f2:ff:c3:17:c0:be:a8:54:39:b5:b3:f3:
         83:72:14:1e:3a:8f:ca:b7:21:5c:bf:34:d0:b1:8a:4f:10:8d:
         38:bd:94:c2:5c:4c:ed:cd:e0:c1:d0:cf:f0:9c:2b:5f:44:83:
         e1:3e:f0:1b:51:c7:b4:91:55:05:8f:8e:47:7c:cf:7d:0c:af:
         e5:bd:a1:a3:b5:da:98:e6:fb:ce:1b:55:c3:46:d1:65:49:aa:
         cb:89:a2:6e:66:08:28:8d:e7:25:0d:b4:e0:b9:a5:7a:09:61:
         8a:6b:4b:8d:9a:90:e0:8b:2c:63:f3:32:e0:bc:97:62:1e:b2:
         49:1b:9f:cd:9c:d8:7a:42:09:c0:f5:87:74:08:92:4d:56:bd:
         1a:cb:ec:fa:1e:e7:c2:64:e6:e8:ef:c3:9f:11:29:55:8d:4e:
         72:fd:4d:c8:23:64:59:27:b2:90:f6:88:a0:88:a3:06:88:f3:
         7b:5b:7e:17:0d:28:e5:25:82:09:77:8e:10:b7:54:74:62:0b:
         94:ec:69:02:6e:02:d5:56:27:58:d4:70:e9:23:4c:a2:5d:51:
         42:2a:c7:f9:d6:e0:5a:ab:0e:dd:6f:c4:bd:2f:05:c2:53:d1:
         62:8c:e4:ef:41:27:b3:0d:d3:ea:8f:dd:62:d1:1c:8d:cf:fc:
         57:74:c3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:19 2026 by rpki-client