Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
File:                     EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft (raw, json)
Hash identifier:          rqUp7laXybDB3h0W4sHSGqofbqzCf2dqLcANy9ZRcrk=
Subject key identifier:   25:86:75:F1:AD:7F:98:8A:CE:C6:1A:27:52:6B:1F:7E:5C:F0:32:1B
Authority key identifier: 10:76:8D:39:F9:32:79:10:07:A0:97:20:9B:09:83:FE:85:56:0C:B8
Certificate issuer:       /CN=10768d39f932791007a097209b0983fe85560cb8
Certificate serial:       019E314DC07D16A479F6044ECC3DFF2AE11D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
Manifest number:          190F
Signing time:             Sat 16 May 2026 15:00:39 +0000
Manifest this update:     Sat 16 May 2026 15:00:39 +0000
Manifest next update:     Sun 17 May 2026 15:00:39 +0000
Files and hashes:         1: EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl (hash: PDvLaZNbjeunCQD9F9n94WYKpOVJ4Pt7dClFheGlUkU=)
                          2: sqH83fgWI2QXk67gXVqCFnY0PdM.roa (hash: Fkz5KCAQSTZpnaesgT+1Nr19dyLfyU9fM4+AXXInAiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4d:c0:7d:16:a4:79:f6:04:4e:cc:3d:ff:2a:e1:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10768d39f932791007a097209b0983fe85560cb8
        Validity
            Not Before: May 16 15:00:39 2026 GMT
            Not After : May 17 15:00:39 2026 GMT
        Subject: CN=258675f1ad7f988acec61a27526b1f7e5cf0321b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f3:af:dd:97:c2:3f:a3:37:1e:3b:b3:76:5d:
                    05:06:ef:42:aa:8e:5f:65:e7:2c:95:6c:4e:38:f1:
                    25:e9:96:2a:14:6d:21:ad:08:28:18:87:d8:48:5f:
                    f7:e5:e0:f1:2a:bd:cc:e6:5d:a9:fa:49:c3:8a:56:
                    f6:e3:85:30:a7:fd:07:9a:87:3a:bd:8a:cd:7f:14:
                    8c:d5:11:a3:9a:3c:49:20:de:b1:a5:fd:95:b1:44:
                    10:0a:2e:35:53:61:c7:ad:ec:2d:fa:22:2f:2e:d0:
                    39:3c:6a:97:b0:d7:70:c7:4e:ef:f7:32:e4:da:1d:
                    79:2f:54:7d:6f:72:b9:24:d5:bd:5e:d1:2b:89:14:
                    b7:ce:69:5d:21:97:13:55:01:7b:ea:35:84:50:a0:
                    29:54:34:f0:fa:72:24:59:a1:7d:ef:5d:2e:db:fd:
                    46:3d:95:49:1f:71:b2:58:33:cc:05:40:9b:0e:33:
                    55:66:f0:3d:80:db:99:d6:8f:e3:02:a6:0e:08:98:
                    57:61:ce:6e:ee:dd:13:a9:60:90:ac:95:e8:f3:b1:
                    a4:74:68:0e:66:37:93:a4:fa:f5:5b:8e:5a:df:bd:
                    14:64:e8:0c:e9:18:c4:1e:b3:67:6c:96:29:4b:01:
                    32:82:ee:ae:77:78:60:eb:da:24:f9:44:38:4e:eb:
                    4c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:86:75:F1:AD:7F:98:8A:CE:C6:1A:27:52:6B:1F:7E:5C:F0:32:1B
            X509v3 Authority Key Identifier:
                keyid:10:76:8D:39:F9:32:79:10:07:A0:97:20:9B:09:83:FE:85:56:0C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:e3:ae:96:a6:9b:4b:92:2b:85:56:89:d9:b8:bd:e2:94:80:
         00:6f:73:88:7d:98:98:49:2c:df:de:45:e2:63:e1:04:cc:37:
         ed:a0:df:94:c6:e1:98:3f:14:fb:82:1a:24:fc:62:e4:e1:2e:
         e5:c8:99:6e:39:a6:24:90:e1:64:7e:fb:53:ac:15:bf:21:2f:
         fa:72:a6:56:e2:97:29:d7:19:3e:20:54:a9:ff:56:52:d5:58:
         47:47:f5:bb:ee:b5:dd:23:8d:17:7e:4a:80:67:89:f1:7b:b8:
         fa:44:1f:0b:4d:c3:12:5c:d2:a5:7d:1d:dd:0a:ac:e6:12:33:
         2f:5c:2c:03:48:fc:c9:fc:91:c8:46:0c:4d:f0:5b:66:0a:cb:
         a4:26:5b:92:ad:6e:3e:c9:61:cc:d9:2d:03:55:fe:76:00:1a:
         25:b7:56:fa:fb:e7:2b:8f:ac:06:e0:21:15:b3:b9:00:0d:45:
         c5:14:d4:87:42:56:22:df:f5:24:61:76:46:0f:41:3e:42:4e:
         bf:f2:86:92:04:6a:20:f3:63:4a:e1:da:03:53:f4:4c:1d:bc:
         bf:ec:4c:d1:32:f1:94:c7:6b:dc:bc:57:81:f8:05:04:5e:44:
         59:21:7a:b5:54:3a:47:2b:cf:8e:04:37:d4:33:ac:e4:9c:4f:
         64:a9:88:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:57 2026 by rpki-client