Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
File:                     46xjX9RfVHHGwsP-Re8btDOLwnk.mft (raw, json)
Hash identifier:          C7ef3Si21rTK0KasI3w623vjTR1kZV5OksqGxYzfrQE=
Subject key identifier:   20:35:3B:1B:38:A3:5F:DB:38:D0:D2:5B:6D:CF:52:93:1F:53:2A:84
Authority key identifier: E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79
Certificate issuer:       /CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279
Certificate serial:       019E009957A28B9C67DB186DDF6DA70C8AEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
Manifest number:          188A
Signing time:             Thu 07 May 2026 04:01:49 +0000
Manifest this update:     Thu 07 May 2026 04:01:49 +0000
Manifest next update:     Fri 08 May 2026 04:01:49 +0000
Files and hashes:         1: 46xjX9RfVHHGwsP-Re8btDOLwnk.crl (hash: zbOs/THXUV3xgLUssR5hA0KLy/sS+izgIffUYyMXLiA=)
                          2: _X4eAftjp_R6giU6rV2GZ0FQz9k.roa (hash: VsMljmTZjJFOFhFmrTsEwtE5iJWXUJLVzyxqYH1Mkto=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 May 2026 21:44:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:00:99:57:a2:8b:9c:67:db:18:6d:df:6d:a7:0c:8a:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279
        Validity
            Not Before: May  7 04:01:49 2026 GMT
            Not After : May  8 04:01:49 2026 GMT
        Subject: CN=20353b1b38a35fdb38d0d25b6dcf52931f532a84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:01:84:39:af:87:8b:53:ea:f2:4d:74:eb:8a:
                    72:8d:ce:1d:9c:07:9b:7b:73:db:16:45:21:d4:2f:
                    60:30:6c:28:12:f7:01:bc:6e:c5:43:64:30:56:29:
                    61:b5:32:c2:9f:d3:fc:00:8c:6b:81:1a:8b:3b:f7:
                    f1:5b:43:d5:50:52:65:7e:d9:57:6a:bb:40:8a:cb:
                    36:26:80:d2:9d:ce:df:a6:fc:00:ba:f5:e0:cd:65:
                    0f:95:0b:5f:de:56:56:e5:ce:63:6f:28:17:bd:18:
                    95:b8:8c:a1:a9:a7:2d:d9:22:08:1c:a7:5b:86:da:
                    c2:eb:c8:97:8a:a2:ab:43:d9:41:b1:31:db:6b:26:
                    b0:8d:c7:6d:83:a6:d4:df:ed:51:a8:9b:8e:ad:6c:
                    0f:ad:8f:fc:ea:2c:b7:93:8f:e4:40:e3:5f:52:86:
                    ee:37:dc:03:da:d9:25:89:64:b9:f9:a5:01:df:bc:
                    7c:f4:73:72:78:f5:87:36:98:da:eb:81:98:d0:21:
                    02:9c:5f:53:81:27:25:37:a5:51:b9:39:3e:81:77:
                    2c:7c:50:39:1a:6c:cf:89:92:df:f7:ac:48:84:39:
                    f5:34:d4:3d:84:89:d8:e7:fc:e2:27:4f:ce:c6:b8:
                    5c:30:c7:b0:c7:04:b5:ae:82:e6:ce:7d:7b:3c:15:
                    27:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:35:3B:1B:38:A3:5F:DB:38:D0:D2:5B:6D:CF:52:93:1F:53:2A:84
            X509v3 Authority Key Identifier:
                keyid:E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:51:da:be:92:7d:e1:60:17:ec:29:88:f3:25:4c:3f:79:54:
         52:71:4a:43:db:4e:db:3e:0a:33:a5:34:da:7d:de:e4:a6:8f:
         1f:8a:77:67:ea:eb:a7:0e:40:01:49:5d:e9:be:d7:da:01:e0:
         8c:65:39:1f:d9:b2:f2:5a:71:45:23:fa:87:0a:c8:bb:db:66:
         f8:b4:40:05:65:96:09:e3:3f:e0:81:8a:19:82:a1:e5:7b:2a:
         65:56:74:8f:e3:fc:a1:e6:65:d8:ce:66:11:1b:10:c7:fa:1a:
         f6:bb:1e:62:68:58:80:ad:83:e5:61:cc:f5:ac:34:d4:50:12:
         a4:aa:73:e2:aa:09:a3:99:99:9f:a0:31:dc:c9:41:b4:c0:a0:
         90:d9:21:f3:8c:4c:f5:39:d3:03:d0:ab:9a:86:31:27:c5:13:
         bd:52:4f:bf:75:8f:a2:5d:26:6d:a7:b1:a0:8b:ad:2b:f6:e2:
         0a:76:20:ae:ad:84:4b:09:08:8a:5b:02:e3:1c:1a:ca:42:e3:
         34:2c:8a:41:8b:79:ec:ab:e8:72:a9:af:57:17:fb:15:12:e9:
         1c:f5:bc:a3:b9:f5:b8:e9:63:d3:22:a0:8e:5b:a5:9e:ce:38:
         7d:d1:35:fa:6c:6d:c3:50:d4:29:03:52:bb:f8:fc:82:a2:5b:
         2a:8b:5d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 06:30:30 2026 by rpki-client