Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
File:                     itN6mTOwUsLxLvG48U108F_dthE.mft (raw, json)
Hash identifier:          O9ELInZvb97jVWJ9A7O97REbqrMVMc7O54Q3PbPYi40=
Subject key identifier:   24:CD:AE:CA:E4:1B:CA:0E:EC:22:BD:0D:6F:89:A4:84:61:D8:F1:5E
Authority key identifier: 8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
Certificate issuer:       /CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Certificate serial:       019E246DFE2286C49F1243FEA3A4C3B78BEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
Manifest number:          190E
Signing time:             Thu 14 May 2026 03:00:48 +0000
Manifest this update:     Thu 14 May 2026 03:00:48 +0000
Manifest next update:     Fri 15 May 2026 03:00:48 +0000
Files and hashes:         1: itN6mTOwUsLxLvG48U108F_dthE.crl (hash: cyTCq8GZ/H7g6Kn4NF9Z0cUDsmuy0rM8EjZxGPUEyJE=)
                          2: j5SNiWDExW4Fzdr91OyzIh3q2cA.roa (hash: f3l9/B3pjG4wxZ77vCWHe+oV14ybxAso+7Z2L/8x8tk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 03:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:24:6d:fe:22:86:c4:9f:12:43:fe:a3:a4:c3:b7:8b:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
        Validity
            Not Before: May 14 03:00:48 2026 GMT
            Not After : May 15 03:00:48 2026 GMT
        Subject: CN=24cdaecae41bca0eec22bd0d6f89a48461d8f15e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6f:bd:1e:60:57:d5:12:46:61:e2:56:b7:80:
                    9f:9f:66:0b:2d:35:02:ec:1c:50:19:5e:85:24:ef:
                    8c:82:73:7e:06:7e:82:7d:9e:16:41:2c:64:4b:45:
                    94:41:7c:9a:11:bf:2f:e1:af:33:bd:ad:fa:62:6f:
                    fa:aa:09:8a:30:47:ef:7e:3a:80:e4:33:d8:73:89:
                    2b:19:99:06:d5:aa:a3:35:3b:03:0c:ec:df:d0:b3:
                    27:b6:81:a8:f1:d6:c8:62:51:d8:68:9e:40:89:25:
                    68:0f:ec:75:66:30:4f:0d:8c:39:f8:68:5f:73:90:
                    f2:f5:82:ed:1f:1e:e3:04:4a:5b:fb:f7:57:de:71:
                    d3:0b:5d:c7:a2:ab:af:1a:f9:45:06:6e:ec:9c:9b:
                    38:50:53:d3:4c:fc:18:6d:ab:f2:af:a9:66:9b:db:
                    8f:07:7f:3b:21:a5:1f:9d:ed:a9:60:26:1a:6c:ab:
                    d6:5a:26:88:a8:b5:8a:fb:08:0e:85:c1:ca:92:3f:
                    0d:2e:7a:af:93:09:33:33:1e:c8:ef:f3:78:49:15:
                    44:72:4b:bf:8a:3c:ed:aa:2e:ef:3f:7d:99:79:e4:
                    47:ac:4b:12:eb:6d:26:41:b1:59:0b:dc:92:b5:ff:
                    78:1c:4c:aa:1d:a6:d1:c5:e9:da:fb:33:d8:37:94:
                    51:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CD:AE:CA:E4:1B:CA:0E:EC:22:BD:0D:6F:89:A4:84:61:D8:F1:5E
            X509v3 Authority Key Identifier:
                keyid:8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:cb:b7:11:73:59:a4:e1:13:74:4f:9d:12:86:20:a5:ed:46:
         16:64:3f:1d:d7:b0:7d:45:f6:a1:35:3c:07:95:c8:93:02:3e:
         01:28:3b:15:10:c0:7e:1c:f2:cb:65:db:a7:63:af:2a:07:6f:
         0a:2b:81:9e:99:6d:14:44:5c:50:2b:84:82:9d:24:94:56:73:
         c9:20:45:0b:2b:ea:44:51:7d:f2:f4:50:4e:72:aa:c8:29:2e:
         d8:bb:60:89:de:c0:82:21:50:4e:72:06:94:b3:c5:7e:f3:12:
         44:9c:0b:9c:f5:f0:91:c6:73:d4:1c:90:6e:19:3f:c7:24:f6:
         b7:65:37:c0:a6:a8:41:00:c1:49:43:99:72:f5:3e:93:09:93:
         8d:3d:70:d4:99:89:85:36:1f:11:99:09:bb:8d:62:86:2d:54:
         28:a5:ee:23:b7:7a:b7:dd:89:bd:0b:77:84:3d:4f:80:82:dc:
         63:57:17:f9:1a:95:26:5c:44:1c:83:07:48:4a:03:11:a0:66:
         b3:7c:17:98:94:44:0f:9a:41:a6:23:37:83:28:c8:c9:6c:b9:
         eb:90:20:91:f5:7a:33:f2:2b:af:c6:33:56:ca:0d:10:a4:b1:
         5e:f6:04:62:77:11:1b:e1:c2:74:87:66:6f:e0:51:87:bc:1d:
         6c:fd:17:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 13:03:54 2026 by rpki-client