Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
File:                     Dp4K_r9UpNIYr7rtVDB3G793d6k.mft (raw, json)
Hash identifier:          oEoni64Jp+9noObdxwWkw9NQ/rbHyDdR2JyCXZ9v11s=
Subject key identifier:   D9:EE:CA:4A:89:DF:73:69:8A:82:12:58:14:51:01:1A:B8:F4:6E:E5
Authority key identifier: 0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
Certificate issuer:       /CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
Certificate serial:       019E3072F9433A5E2D64046E56243BA39040
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
Manifest number:          190F
Signing time:             Sat 16 May 2026 11:01:41 +0000
Manifest this update:     Sat 16 May 2026 11:01:41 +0000
Manifest next update:     Sun 17 May 2026 11:01:41 +0000
Files and hashes:         1: Dp4K_r9UpNIYr7rtVDB3G793d6k.crl (hash: /kltdIHty39pYduAa9UU0FtksxLfFOdfJGSPioxLvw4=)
                          2: SAugkdRYnSv4ry8bG61AtXCsozo.roa (hash: sEeAFM3bNI/ojfTwt1bUnazn3tLdAyJRyAzUqk6sRNU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:f9:43:3a:5e:2d:64:04:6e:56:24:3b:a3:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
        Validity
            Not Before: May 16 11:01:41 2026 GMT
            Not After : May 17 11:01:41 2026 GMT
        Subject: CN=d9eeca4a89df73698a8212581451011ab8f46ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:da:6e:80:16:9b:11:52:e2:43:cb:16:57:2f:
                    85:3c:9a:17:9d:d4:08:0d:ff:78:9d:9e:3f:03:60:
                    45:c9:0e:0a:26:1f:b8:4f:68:6b:09:b9:c1:b2:1a:
                    ca:6c:a7:91:49:03:fe:42:c7:80:aa:52:fb:f1:e9:
                    d9:f2:31:19:15:f1:c6:0d:b6:1a:25:45:23:45:6a:
                    95:9d:cb:47:c7:a3:b4:37:69:5d:f1:3d:ec:2e:10:
                    2a:0e:6a:ff:79:0b:83:b6:4f:a6:61:d1:45:a4:26:
                    ac:34:46:ee:bf:2a:21:c7:fe:36:75:59:e4:89:ba:
                    2d:96:7b:5b:45:22:ad:45:6b:57:47:4d:e0:b0:36:
                    f9:74:6a:27:ed:ff:bd:82:17:f4:9e:40:98:9e:45:
                    a5:19:15:d7:6d:97:49:04:6a:77:a6:d3:f2:b4:97:
                    8b:d7:b6:06:70:0b:51:43:cd:42:c3:11:63:cc:98:
                    90:18:72:b5:54:63:6f:9b:37:b5:b3:35:fa:a5:ba:
                    52:44:6f:24:89:e1:87:5c:e6:b5:ad:4a:f8:f8:8f:
                    d0:35:64:eb:22:cd:7f:20:53:25:fa:1a:6c:74:77:
                    69:05:ba:c9:59:be:a7:5e:72:33:d9:04:bc:28:2c:
                    49:a3:d9:72:98:e7:8d:a0:c9:8e:d8:ae:c3:45:38:
                    a3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:EE:CA:4A:89:DF:73:69:8A:82:12:58:14:51:01:1A:B8:F4:6E:E5
            X509v3 Authority Key Identifier:
                keyid:0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:21:9e:a2:ed:5e:13:31:fa:31:68:64:9a:2f:a7:dd:90:49:
         e6:ba:1f:b8:9d:79:13:f5:bf:2c:00:e5:a9:70:68:e0:11:5e:
         43:33:a3:f8:f4:87:cb:0c:80:cb:e3:88:68:10:32:38:5e:fe:
         07:9e:33:32:e5:8e:72:cf:10:75:ad:ea:ff:00:41:cb:c6:11:
         d5:fc:8a:5b:76:b9:3b:30:ff:74:8e:2d:f3:38:3e:10:5d:1b:
         5c:74:dc:db:f7:85:f1:80:64:12:28:18:95:48:41:84:3f:20:
         a3:9e:55:07:26:89:7d:e6:fc:49:fb:c1:3f:4c:19:86:db:e1:
         6e:81:73:13:20:23:f9:82:a7:13:b8:90:90:e9:04:a8:6e:5b:
         7d:e1:12:40:50:64:45:2a:8d:6d:73:ba:27:e5:17:f0:3c:fa:
         96:4c:c7:43:af:7c:7c:20:5b:27:3e:0f:af:bf:a0:7b:7c:e2:
         78:a5:6d:f7:45:d5:ef:26:46:08:39:ad:ee:f9:0a:15:24:65:
         07:45:38:02:c8:21:b4:f5:14:3d:1a:d1:e3:05:1f:01:07:a7:
         e0:5e:ce:80:02:12:00:1e:7d:cc:db:09:85:4b:6f:f6:6a:e9:
         f6:96:99:67:79:ac:68:9b:a2:8d:6e:c4:f3:44:ed:2d:98:ba:
         ec:47:5d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:26:49 2026 by rpki-client