Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
File:                     46xjX9RfVHHGwsP-Re8btDOLwnk.mft (raw, json)
Hash identifier:          EJllSrLF7EDh3hB4eS/23xKMAV78VfsEsvOwPOFtcZQ=
Subject key identifier:   4F:92:19:10:8B:E3:01:ED:63:B8:68:87:03:46:7D:3E:62:E5:BE:8E
Authority key identifier: E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79
Certificate issuer:       /CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279
Certificate serial:       019EF7CA1C7017A05397153A6C132A87E75C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
Manifest number:          190A
Signing time:             Wed 24 Jun 2026 04:01:18 +0000
Manifest this update:     Wed 24 Jun 2026 04:01:18 +0000
Manifest next update:     Thu 25 Jun 2026 04:01:18 +0000
Files and hashes:         1: 46xjX9RfVHHGwsP-Re8btDOLwnk.crl (hash: qz7Mwm3u5qVxrz6txmeAuvCKN9obiOUeFq3ZgIay9s8=)
                          2: _X4eAftjp_R6giU6rV2GZ0FQz9k.roa (hash: VsMljmTZjJFOFhFmrTsEwtE5iJWXUJLVzyxqYH1Mkto=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 04:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:f7:ca:1c:70:17:a0:53:97:15:3a:6c:13:2a:87:e7:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279
        Validity
            Not Before: Jun 24 04:01:18 2026 GMT
            Not After : Jun 25 04:01:18 2026 GMT
        Subject: CN=4f9219108be301ed63b8688703467d3e62e5be8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0c:a0:64:cc:96:aa:54:2f:a4:3a:bb:51:aa:
                    c3:7b:d6:e1:58:b5:76:b8:c2:54:b4:8d:f3:11:3c:
                    be:74:0d:d8:91:15:fe:43:2a:81:76:45:24:6e:13:
                    66:43:7f:e9:cd:41:b3:34:d5:3a:2f:91:c0:62:26:
                    71:9b:7b:7b:c5:ed:68:a6:67:15:b4:4f:c5:86:b8:
                    a4:f2:8e:34:9b:38:70:f5:67:11:ba:9b:bf:57:42:
                    fb:0a:a0:d6:93:a9:eb:44:80:dd:29:9c:e5:d2:1d:
                    cc:da:98:11:24:4e:86:29:ca:a7:29:24:c8:59:fd:
                    6b:f7:bd:9a:99:1f:aa:47:7b:65:5d:f1:88:ff:52:
                    f0:b9:c9:8d:04:2b:c2:e9:a8:63:ba:da:9f:09:c0:
                    32:1c:7a:a0:07:75:50:21:15:5f:ec:90:f1:f9:65:
                    64:a6:4f:1f:78:41:bc:34:c9:7d:b5:ff:f9:d2:02:
                    e9:eb:8b:5f:c8:7b:7c:ae:29:05:34:d7:36:ce:2d:
                    b2:54:85:71:b3:18:34:98:22:0b:82:e8:45:d6:2e:
                    b8:80:cf:2f:0d:ed:50:fc:f8:00:8d:36:d0:33:23:
                    ff:4b:05:06:68:64:b0:91:d4:44:28:0b:f3:12:70:
                    e2:50:45:62:0a:45:cd:a7:d4:7d:e1:e8:b9:9e:51:
                    cb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:92:19:10:8B:E3:01:ED:63:B8:68:87:03:46:7D:3E:62:E5:BE:8E
            X509v3 Authority Key Identifier:
                keyid:E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:1a:02:46:8c:bb:6b:18:14:d4:2e:e4:7d:28:4c:3e:d8:4a:
         23:86:4d:05:d8:11:27:e9:33:f5:5c:c1:0f:4d:a3:c8:df:13:
         f5:2d:ac:70:40:cf:e4:e2:ed:9e:90:80:35:cd:1b:11:aa:e8:
         76:56:e2:c8:ad:d7:15:51:73:33:97:a6:40:92:06:ad:e1:b3:
         69:f8:b4:24:c5:43:76:bf:6e:12:27:48:be:4a:89:38:d8:20:
         c6:41:30:63:a6:80:87:58:6c:79:45:8b:6d:d7:d5:01:4c:c7:
         bd:48:44:d0:ca:e6:48:1c:24:57:d6:f7:b0:98:79:46:5f:e5:
         ea:9b:6c:75:c8:bc:12:d4:5d:25:de:da:cb:34:6a:d0:2f:ae:
         06:93:26:b1:82:a3:eb:b4:6e:2e:18:a3:e2:da:3c:e5:53:f6:
         ab:b7:a0:a7:ec:cb:fb:51:6a:1e:4a:75:4d:c5:d2:31:5c:30:
         74:2f:c6:a6:69:35:b2:a1:3e:c8:d2:43:6f:1f:1f:ae:f6:a5:
         b7:44:26:a0:3e:4b:0c:da:f4:85:21:90:f3:6c:ad:f8:33:7c:
         c1:47:a6:df:20:e5:08:74:8c:cb:9a:97:f9:75:4b:8a:16:e4:
         f1:a0:30:f7:38:0d:ed:2b:f7:c8:19:6c:a6:47:ed:4d:fc:6a:
         58:93:bc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 12:03:39 2026 by rpki-client