Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
File:                     1dWXuXOtoQUvZbPqHeHkguI_PSo.mft (raw, json)
Hash identifier:          LkN6clBr9Hb89I2ahifbsUJLYTdfKY2L5yJU98jW4p4=
Subject key identifier:   62:3B:5D:0C:29:F5:18:ED:F7:89:6A:37:63:92:C1:01:AE:28:55:AE
Authority key identifier: D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A
Certificate issuer:       /CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
Certificate serial:       019E30E0F34475940BE8224651B0B5E723F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
Manifest number:          190E
Signing time:             Sat 16 May 2026 13:01:49 +0000
Manifest this update:     Sat 16 May 2026 13:01:49 +0000
Manifest next update:     Sun 17 May 2026 13:01:49 +0000
Files and hashes:         1: 1dWXuXOtoQUvZbPqHeHkguI_PSo.crl (hash: 5QYVl/WpvBDSTWgV7KeAAAbuCcxTM1RD4eCCbpEmJKU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:f3:44:75:94:0b:e8:22:46:51:b0:b5:e7:23:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
        Validity
            Not Before: May 16 13:01:49 2026 GMT
            Not After : May 17 13:01:49 2026 GMT
        Subject: CN=623b5d0c29f518edf7896a376392c101ae2855ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:03:1d:6d:75:45:8a:62:80:70:ec:4e:a6:92:
                    49:89:83:13:63:0a:bc:58:0d:e0:a4:d3:81:24:e2:
                    2f:ee:66:0b:e0:bb:5e:23:a4:56:28:b6:ff:89:32:
                    3a:1b:1f:43:75:e3:16:42:67:61:a6:1a:19:42:6f:
                    ac:60:6e:ee:d6:ca:2c:a1:5d:ad:03:fa:85:c4:95:
                    33:d6:b6:9e:b4:68:30:77:0a:82:8b:e1:26:67:90:
                    aa:e4:40:a7:2b:85:64:ab:8d:8e:e3:73:12:69:92:
                    ce:98:46:08:28:bc:d4:b9:c9:2a:be:04:57:9d:2b:
                    ba:c6:ba:1d:99:72:cc:db:ea:61:c5:d6:63:69:5d:
                    57:e9:77:13:36:01:bf:2e:75:25:e2:a6:8d:cd:24:
                    4e:a9:e7:3e:e4:14:14:d3:20:aa:0f:04:ec:05:00:
                    4d:17:f4:7f:84:c1:c7:42:2c:50:b1:ca:1b:34:01:
                    83:50:1e:98:27:a3:0e:e5:7d:06:f8:c2:12:b5:8d:
                    17:f8:b5:65:1b:b9:09:6e:a3:93:88:c2:f2:24:66:
                    dc:1b:dd:c2:07:f4:9d:98:47:54:6b:25:88:1d:47:
                    8f:e4:11:29:e8:4a:82:b2:e7:53:f9:30:50:d8:a0:
                    c6:cd:2a:cf:5d:e6:8c:a6:f2:65:3d:25:85:6f:ff:
                    5b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:3B:5D:0C:29:F5:18:ED:F7:89:6A:37:63:92:C1:01:AE:28:55:AE
            X509v3 Authority Key Identifier:
                keyid:D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:36:87:78:26:bb:99:55:e9:a5:7e:ab:c0:cc:5f:ff:88:fe:
         25:d5:53:97:21:07:ac:06:93:f7:b0:1b:6d:9a:b9:b2:17:95:
         b9:54:2f:ff:9e:4e:f4:14:a7:47:56:a7:29:35:86:46:1e:83:
         cd:19:1d:95:09:f5:be:fc:77:ff:57:dd:ea:7f:9e:8d:c0:ba:
         6c:c1:00:61:d9:d2:cc:88:4a:12:15:b6:19:ba:7e:25:b0:75:
         2c:ac:9a:31:0f:01:5a:e4:5c:a4:68:9d:40:97:d9:f4:b1:97:
         42:c2:db:83:c3:51:69:f5:c9:9b:9a:a3:10:05:35:9d:c6:fd:
         67:7e:00:12:82:32:42:15:1a:10:ce:58:5c:70:05:55:a5:94:
         25:47:dc:df:ae:02:26:ff:5f:c9:4e:a0:7e:8f:13:91:34:c1:
         df:6e:8c:96:d3:e7:fe:d5:e2:36:61:67:60:19:65:93:74:3d:
         fa:84:0e:74:00:b0:b3:34:62:30:fc:96:d9:f3:70:79:75:99:
         74:af:6a:94:9e:32:01:90:77:a1:90:42:17:ba:8f:0b:64:97:
         b7:29:42:d5:7c:c7:e9:25:b2:2d:76:4e:28:8b:2a:c7:ea:ea:
         87:64:0d:f6:19:e0:a4:09:b6:a4:c9:70:e5:1c:3c:d0:43:a7:
         ba:62:be:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:41:06 2026 by rpki-client