Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
File:                     4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft (raw, json)
Hash identifier:          Hsx1oili00ONIeqed1KY8+6Svkvh6zx14HtgmlDA+Fk=
Subject key identifier:   B4:11:47:D2:11:04:37:2F:AF:AD:07:78:56:A0:A9:95:50:B8:69:77
Authority key identifier: E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
Certificate issuer:       /CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Certificate serial:       019E3004868511D7052826978B9A53BD08ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
Manifest number:          190F
Signing time:             Sat 16 May 2026 09:01:03 +0000
Manifest this update:     Sat 16 May 2026 09:01:03 +0000
Manifest next update:     Sun 17 May 2026 09:01:03 +0000
Files and hashes:         1: 4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl (hash: qZGWiZCsL61KVvZ+9TblvOS9l/QHY9VupqK2WnwJjfc=)
                          2: Ut_nk45-PrVxes0DMrlE6POGcXc.roa (hash: oo94Gr3/o7iKPPOqsqmwUWcuIt1lQW+gn6zRbGd06vg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:04:86:85:11:d7:05:28:26:97:8b:9a:53:bd:08:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
        Validity
            Not Before: May 16 09:01:03 2026 GMT
            Not After : May 17 09:01:03 2026 GMT
        Subject: CN=b41147d21104372fafad077856a0a99550b86977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:71:cb:b4:3a:de:22:70:33:63:87:6c:25:c0:
                    7a:db:d5:a5:7e:00:8c:a8:f0:f3:5e:b8:78:ec:c4:
                    a0:37:f1:86:e9:68:09:7a:c2:ca:ae:e6:55:3e:19:
                    a1:a6:d2:e2:1e:16:7c:27:79:f2:46:00:a0:45:e3:
                    b2:da:ca:2a:96:ed:2e:54:92:01:02:e5:55:bf:f2:
                    f5:0b:d7:91:96:23:7a:dc:b2:92:fd:b0:62:7b:9b:
                    40:9d:bd:e2:eb:89:41:83:5a:60:ed:3c:bd:57:9e:
                    bd:d1:5d:d0:9d:27:9e:91:7b:16:87:88:4f:be:a8:
                    31:c5:25:38:26:f7:32:d3:bf:48:bf:23:f1:86:b8:
                    eb:ce:c9:3b:0a:b1:ff:4a:cf:16:f1:42:1a:65:81:
                    2c:52:cf:21:db:2c:fd:de:e8:2a:76:db:c6:c4:f3:
                    f9:4c:cb:1c:db:77:f3:45:c5:70:95:2f:65:3d:20:
                    44:4f:49:fb:e0:ad:e9:53:ae:d5:71:9e:f8:d4:9c:
                    58:09:83:95:a4:3e:52:5f:8c:8e:cc:54:e0:b2:2d:
                    dd:24:46:b5:b7:f7:d0:74:12:ac:b2:10:cb:e7:32:
                    85:8c:23:16:3a:51:10:83:50:b1:c5:9a:ae:3e:5f:
                    97:7a:47:97:1c:4d:58:0e:fd:b3:8c:ad:14:92:19:
                    cc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:11:47:D2:11:04:37:2F:AF:AD:07:78:56:A0:A9:95:50:B8:69:77
            X509v3 Authority Key Identifier:
                keyid:E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:63:36:48:3b:a4:03:b0:32:27:50:ac:de:06:e0:8f:2c:43:
         61:ca:e0:d0:ef:e4:e5:63:5f:c1:72:fe:4c:f6:c7:3e:3d:32:
         c4:5c:56:32:ea:63:fb:0f:ff:3d:87:91:a6:0c:fa:ed:50:e6:
         0a:be:f8:e8:90:74:f4:d7:5e:7d:d1:ec:ca:37:6f:66:d0:e4:
         62:32:e9:b6:c4:6d:e0:29:6d:76:b9:f6:6b:31:8e:97:6f:c6:
         f7:74:4f:8b:e7:82:86:45:f8:86:af:87:6a:7e:5b:1b:44:34:
         04:98:6b:98:f0:c8:70:2c:6f:17:08:0a:01:62:20:59:a7:91:
         2d:d7:11:fd:62:96:42:b1:c2:fe:3a:02:43:eb:37:0c:4e:1c:
         5f:bf:c5:95:a5:5a:30:bd:23:d5:8a:56:e0:33:3d:ec:ec:56:
         41:ee:3b:c7:d2:d0:3f:09:97:dc:53:63:d6:e4:9b:d3:69:1f:
         3f:1d:af:3d:af:c9:e6:07:3f:c6:21:3d:55:57:0d:80:30:0d:
         d7:46:01:8b:2f:2b:81:c4:ea:e7:5b:18:43:6e:7e:12:71:67:
         91:d8:3b:c5:52:9c:59:b9:d7:28:ca:82:1e:2a:09:12:e0:09:
         90:9e:02:64:b4:a5:54:16:aa:7b:10:37:e6:96:cb:0f:bb:59:
         04:91:9e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:27 2026 by rpki-client