Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
File:                     4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft (raw, json)
Hash identifier:          7Lz3dYkTM6i12Y8r+OcEwQB21VRO/LCDqaHuH4rBOHY=
Subject key identifier:   D7:88:13:6C:B1:5D:1A:70:79:D2:B7:81:C9:37:6C:86:B4:60:44:71
Authority key identifier: E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89
Certificate issuer:       /CN=e039649faa8f9de3dae91be799a27e2ca6628789
Certificate serial:       019E30E107AC941E49F018ECF3297E45B7F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
Manifest number:          1916
Signing time:             Sat 16 May 2026 13:01:54 +0000
Manifest this update:     Sat 16 May 2026 13:01:54 +0000
Manifest next update:     Sun 17 May 2026 13:01:54 +0000
Files and hashes:         1: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl (hash: HtNM+BD6lpHb3bUZA6raQD4kF/J9XF2wbXLK1q5x6uk=)
                          2: oxOUpQ0FwseclzcVvtlkSLjr_aM.roa (hash: 39PmeADT0B2o6dhGdHc5CXRqYkD6fuj6z5G5c2KqgVA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e1:07:ac:94:1e:49:f0:18:ec:f3:29:7e:45:b7:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e039649faa8f9de3dae91be799a27e2ca6628789
        Validity
            Not Before: May 16 13:01:54 2026 GMT
            Not After : May 17 13:01:54 2026 GMT
        Subject: CN=d788136cb15d1a7079d2b781c9376c86b4604471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b8:a9:ab:b5:0c:f1:0b:55:fd:8c:42:1f:dd:
                    53:24:71:e4:a3:38:b3:9a:ee:4f:60:57:d3:78:67:
                    a4:cc:cf:4f:2b:29:ce:3a:cf:d8:ca:d6:3f:73:c8:
                    32:2c:56:25:fa:27:07:9b:05:95:c1:ba:09:78:02:
                    cc:f1:d2:25:6b:ae:86:81:0f:3c:59:b1:9e:62:d1:
                    d5:eb:b1:c3:1b:3a:e3:12:5f:62:fe:30:57:7b:a6:
                    c7:b8:fd:20:1e:6a:26:06:86:8c:b2:c6:9e:a3:a7:
                    bb:e2:78:13:19:04:cb:41:c3:89:be:55:36:7b:a8:
                    10:61:e0:24:f8:b8:04:d0:21:d6:9f:6b:1f:19:c4:
                    33:63:a6:51:a7:57:6d:01:6d:9c:8e:fa:98:e8:de:
                    98:09:40:33:ea:8c:e0:2b:03:c8:70:75:55:ac:28:
                    47:53:63:a4:95:93:3a:7d:98:20:2a:63:ca:04:89:
                    75:86:56:e4:77:de:8f:bb:f7:64:91:f0:97:89:d1:
                    fb:df:9b:ca:92:c7:f1:1e:9e:4d:de:7a:67:c3:00:
                    e6:33:11:c3:1a:47:11:e7:a6:3a:96:79:25:b5:b0:
                    a2:e9:a4:41:05:31:8e:4c:5f:01:e6:b7:20:45:c8:
                    0a:52:de:62:53:98:29:91:37:a2:8c:b5:63:df:44:
                    2d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:88:13:6C:B1:5D:1A:70:79:D2:B7:81:C9:37:6C:86:B4:60:44:71
            X509v3 Authority Key Identifier:
                keyid:E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:21:47:37:27:4c:0e:f2:ce:46:ae:ad:4c:dc:aa:0e:52:90:
         6c:e8:65:88:76:77:9a:9a:52:ce:48:ce:bf:3b:3a:40:b0:f2:
         26:51:eb:a3:80:a4:91:7a:0c:ed:c2:5a:53:d7:50:aa:de:52:
         ba:e2:78:0d:34:71:63:3d:69:c6:55:7f:0d:1e:47:82:64:dc:
         de:e3:06:96:98:5c:29:e8:8b:bf:c3:8a:45:b2:75:4e:c2:15:
         3c:e5:a1:24:e5:93:01:2f:bd:32:6d:11:a1:ff:90:15:09:69:
         74:78:6c:ff:c2:5c:38:5d:bd:8e:63:2e:92:0d:e5:d9:a2:80:
         03:f2:6b:96:4f:c3:d1:0e:3f:29:dc:18:f4:3c:65:94:db:20:
         6c:07:e3:0a:c8:16:ca:4d:aa:0e:3b:80:46:49:63:eb:cf:5e:
         6b:d3:51:b0:81:21:46:11:bf:d3:8e:44:93:61:82:61:95:6b:
         68:22:23:d1:7d:93:89:50:50:37:f2:c9:fc:43:5e:78:5d:66:
         0f:9b:f3:ff:4a:22:c5:ab:f3:a7:17:eb:4d:c8:33:ae:a9:d6:
         e8:f1:a1:98:69:77:76:ce:67:a1:62:4d:3b:50:aa:c8:94:85:
         c3:20:1f:21:29:2c:4a:46:82:36:76:38:6d:21:c1:09:a9:62:
         0b:b4:83:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:59 2026 by rpki-client