Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft
File:                     EDfew086MutlAvFmKoKiD4teohw.mft (raw, json)
Hash identifier:          617CXunYoP4WI05Y733gO0klEK31fEcm+turazqb9as=
Subject key identifier:   43:76:43:BE:00:6C:F5:EF:68:B0:90:90:22:97:4A:78:25:A5:2A:42
Authority key identifier: 10:37:DE:C3:4F:3A:32:EB:65:02:F1:66:2A:82:A2:0F:8B:5E:A2:1C
Certificate issuer:       /CN=1037dec34f3a32eb6502f1662a82a20f8b5ea21c
Certificate serial:       019E3005573BD4C2905855E3FECF7E32248E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EDfew086MutlAvFmKoKiD4teohw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft
Manifest number:          190D
Signing time:             Sat 16 May 2026 09:01:56 +0000
Manifest this update:     Sat 16 May 2026 09:01:56 +0000
Manifest next update:     Sun 17 May 2026 09:01:56 +0000
Files and hashes:         1: EDfew086MutlAvFmKoKiD4teohw.crl (hash: JvzCBM0FxUtn2CdnDPAybm1Mn/1bUfQZ4CctZK0cQKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EDfew086MutlAvFmKoKiD4teohw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:05:57:3b:d4:c2:90:58:55:e3:fe:cf:7e:32:24:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1037dec34f3a32eb6502f1662a82a20f8b5ea21c
        Validity
            Not Before: May 16 09:01:56 2026 GMT
            Not After : May 17 09:01:56 2026 GMT
        Subject: CN=437643be006cf5ef68b0909022974a7825a52a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f4:b2:18:c2:d4:b7:18:1f:d8:8b:3d:8e:f8:
                    81:d6:eb:01:8e:f9:e5:4d:2b:74:d5:7f:f4:88:66:
                    0b:af:2b:26:76:de:83:d8:db:34:64:f4:de:cd:ef:
                    55:cc:5d:4e:53:dc:51:bb:56:33:4f:86:f2:a0:9f:
                    46:22:8e:bc:57:52:20:83:2a:d2:95:d1:0c:46:8e:
                    ac:37:c6:09:7b:83:f6:a3:46:02:02:02:26:20:fa:
                    2b:bf:f2:6e:7a:86:03:30:d0:1a:47:ba:90:2c:ba:
                    8f:c3:13:57:c7:30:19:47:ee:bd:ca:e9:7e:dc:10:
                    85:f6:f1:ae:49:de:0a:37:cf:90:d3:b5:e4:b2:a2:
                    4d:96:81:9a:6e:7c:8d:f7:f8:2e:ef:36:a7:e5:4d:
                    42:6c:8b:ca:bc:dd:dc:c9:ff:44:b5:af:23:22:4a:
                    fb:d7:d0:00:7d:54:82:f6:5d:a6:4c:5b:74:8b:9c:
                    a3:61:3a:7c:50:fa:8f:6e:15:f4:48:31:7f:6c:4b:
                    5e:dd:cd:81:03:93:9c:5e:bc:c6:99:d4:3c:0a:98:
                    c2:09:4d:cc:96:2c:13:a8:3e:e1:18:5c:53:c2:ed:
                    98:c1:13:48:c4:6d:cd:f3:e5:e2:fa:d7:23:f6:18:
                    de:2a:b1:02:1c:d3:e6:49:ef:fc:00:92:3d:f2:b8:
                    50:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:76:43:BE:00:6C:F5:EF:68:B0:90:90:22:97:4A:78:25:A5:2A:42
            X509v3 Authority Key Identifier:
                keyid:10:37:DE:C3:4F:3A:32:EB:65:02:F1:66:2A:82:A2:0F:8B:5E:A2:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDfew086MutlAvFmKoKiD4teohw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:7f:8d:7b:22:b7:d8:3a:df:c4:69:b0:71:cf:91:02:d6:52:
         c0:7d:67:a6:7d:df:6c:79:9f:c1:01:b8:cb:5c:c0:fc:94:c4:
         69:4f:61:4b:57:ec:67:39:c0:9b:59:fa:d1:4c:7d:62:4a:c7:
         15:e3:59:db:68:38:59:70:ba:99:0a:14:f4:9c:a3:3d:e5:9c:
         8a:76:8d:13:43:e8:4a:09:d3:8e:4e:16:87:e7:9b:76:26:ae:
         3d:22:fc:f3:0e:b3:eb:a9:da:a0:93:87:9e:1a:02:f9:99:93:
         48:c4:68:96:7d:3a:6d:38:9a:74:9a:9d:cf:34:c6:2d:f4:65:
         c7:46:f6:4f:6b:4c:6d:9c:50:44:1c:17:f1:19:4a:ab:cf:32:
         47:79:73:73:99:c4:55:db:6a:67:1f:29:21:73:94:34:3c:e2:
         5e:8d:0e:16:85:64:84:14:88:7a:57:f3:d5:2f:e4:a0:52:25:
         48:f0:59:0c:21:68:99:2e:85:a5:63:73:4e:21:fd:63:35:f3:
         c7:c2:12:56:6d:56:bb:c9:2f:ee:73:85:27:f1:90:84:eb:58:
         fb:fb:2f:d2:4e:eb:6f:05:78:bc:9d:63:ff:38:e4:2b:bf:18:
         62:a1:d4:4a:1a:1b:cd:3a:ae:cb:3d:71:5f:3e:2a:8e:2c:f4:
         b9:3c:07:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wBVc71MKQWFXj/s9+MiSOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMzdkZWMzNGYzYTMyZWI2NTAyZjE2NjJhODJhMjBmOGI1
ZWEyMWMwHhcNMjYwNTE2MDkwMTU2WhcNMjYwNTE3MDkwMTU2WjAzMTEwLwYDVQQD
Eyg0Mzc2NDNiZTAwNmNmNWVmNjhiMDkwOTAyMjk3NGE3ODI1YTUyYTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvSyGMLUtxgf2Is9jviB1usBjvnl
TSt01X/0iGYLrysmdt6D2Ns0ZPTeze9VzF1OU9xRu1YzT4byoJ9GIo68V1IggyrS
ldEMRo6sN8YJe4P2o0YCAgImIPorv/JueoYDMNAaR7qQLLqPwxNXxzAZR+69yul+
3BCF9vGuSd4KN8+Q07XksqJNloGabnyN9/gu7zan5U1CbIvKvN3cyf9Eta8jIkr7
19AAfVSC9l2mTFt0i5yjYTp8UPqPbhX0SDF/bEte3c2BA5OcXrzGmdQ8CpjCCU3M
liwTqD7hGFxTwu2YwRNIxG3N8+Xi+tcj9hjeKrECHNPmSe/8AJI98rhQCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEN2Q74AbPXvaLCQkCKXSnglpSpCMB8GA1UdIwQY
MBaAFBA33sNPOjLrZQLxZiqCog+LXqIcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRURmZXcwODZNdXRsQXZGbUtvS2lENHRlb2h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9iNjgwYWYtZDVhYi00YjJmLWE4Mzct
MGQ0MWE2NGU5MGVjLzEvRURmZXcwODZNdXRsQXZGbUtvS2lENHRlb2h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9iNjgwYWYtZDVhYi00YjJmLWE4MzctMGQ0MWE2NGU5MGVj
LzEvRURmZXcwODZNdXRsQXZGbUtvS2lENHRlb2h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqn+NeyK3
2DrfxGmwcc+RAtZSwH1npn3fbHmfwQG4y1zA/JTEaU9hS1fsZznAm1n60Ux9YkrH
FeNZ22g4WXC6mQoU9JyjPeWcinaNE0PoSgnTjk4Wh+ebdiauPSL88w6z66naoJOH
nhoC+ZmTSMRoln06bTiadJqdzzTGLfRlx0b2T2tMbZxQRBwX8RlKq88yR3lzc5nE
VdtqZx8pIXOUNDziXo0OFoVkhBSIelfz1S/koFIlSPBZDCFomS6FpWNzTiH9YzXz
x8ISVm1Wu8kv7nOFJ/GQhOtY+/sv0k7rbwV4vJ1j/zjkK78YYqHUShobzTquyz1x
Xz4qjiz0uTwHUg==
-----END CERTIFICATE-----
Generated at Sat May 16 15:36:28 2026 by rpki-client