Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
File:                     8DpbV31dnm0cX9O-1ADpacC-fDQ.mft (raw, json)
Hash identifier:          4R9RfOdhtgV0fhb+IPOI5OzQHDuDRti31rMJLXOn2ZI=
Subject key identifier:   0A:1F:D0:C3:0D:B5:BF:B5:3A:04:DE:E7:BA:99:71:27:90:C7:3D:AE
Authority key identifier: F0:3A:5B:57:7D:5D:9E:6D:1C:5F:D3:BE:D4:00:E9:69:C0:BE:7C:34
Certificate issuer:       /CN=f03a5b577d5d9e6d1c5fd3bed400e969c0be7c34
Certificate serial:       019E3072D33D9F18E309DA35E1CDCB0C227B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
Manifest number:          190A
Signing time:             Sat 16 May 2026 11:01:31 +0000
Manifest this update:     Sat 16 May 2026 11:01:31 +0000
Manifest next update:     Sun 17 May 2026 11:01:31 +0000
Files and hashes:         1: 8DpbV31dnm0cX9O-1ADpacC-fDQ.crl (hash: XTHa5seL+can0tBtM2JbzOVXz+InqjNRjpsYulhoupY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:d3:3d:9f:18:e3:09:da:35:e1:cd:cb:0c:22:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f03a5b577d5d9e6d1c5fd3bed400e969c0be7c34
        Validity
            Not Before: May 16 11:01:31 2026 GMT
            Not After : May 17 11:01:31 2026 GMT
        Subject: CN=0a1fd0c30db5bfb53a04dee7ba99712790c73dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:75:ee:70:82:d5:c8:9e:b9:88:14:06:58:7c:
                    40:4c:de:89:1e:27:45:7f:bc:9f:c1:84:16:68:83:
                    72:0f:00:72:95:0f:29:63:de:67:44:f6:45:3c:7b:
                    65:72:4b:44:d2:5a:53:02:b5:7f:80:aa:0c:e4:bd:
                    d4:72:3b:6c:03:38:68:b2:80:43:b5:4a:d2:ca:aa:
                    16:0e:f5:19:bc:a5:29:15:ac:02:a2:42:1d:88:2d:
                    0d:68:46:fa:a1:12:78:9e:98:66:f1:15:ec:f2:db:
                    35:4b:f6:e8:e5:53:97:86:21:ab:e1:48:1a:e7:7f:
                    53:97:52:a2:f0:d2:45:be:da:50:13:a0:4e:77:7e:
                    37:75:c2:04:6f:cd:74:ce:1f:59:06:97:3d:c5:42:
                    59:56:bf:23:d3:71:95:f7:d9:69:87:69:80:8c:eb:
                    17:8d:65:0f:74:0e:5d:58:ba:30:eb:72:36:c5:62:
                    b3:7e:73:7b:5a:65:5a:2b:cf:c5:e5:2d:90:e7:01:
                    29:ca:33:03:be:47:df:71:e2:3f:4a:2b:c8:cc:01:
                    9c:8b:8e:e5:f6:95:09:51:10:55:3f:79:9a:2c:2d:
                    05:a6:64:c3:2a:fa:79:ac:e8:a8:97:cb:b1:c9:6c:
                    c3:f8:af:16:ec:34:57:68:e3:0c:37:66:83:1f:76:
                    6c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:1F:D0:C3:0D:B5:BF:B5:3A:04:DE:E7:BA:99:71:27:90:C7:3D:AE
            X509v3 Authority Key Identifier:
                keyid:F0:3A:5B:57:7D:5D:9E:6D:1C:5F:D3:BE:D4:00:E9:69:C0:BE:7C:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ec:c3:ed:c3:a3:4f:1d:d4:2e:11:e8:9c:2c:48:25:67:06:
         bd:87:f0:66:25:19:f1:d7:70:34:d4:43:ed:3f:36:a5:bd:49:
         9c:e4:29:b8:69:76:bc:84:51:f8:d2:00:36:93:88:ea:06:ab:
         4e:4e:0f:76:bd:d9:d7:59:42:eb:ef:2a:9a:86:bd:47:da:b3:
         73:46:9c:fd:ca:48:17:bc:12:8e:8a:ac:ba:c2:9e:60:16:07:
         00:30:31:da:8c:95:f8:14:78:25:ec:dd:a4:99:68:b7:b1:4f:
         61:51:2f:3f:75:da:ac:d5:dd:86:e0:21:cc:c5:73:49:45:2e:
         ca:df:ac:7d:98:94:a7:c8:fe:3f:38:d5:70:9d:04:18:de:bb:
         3f:da:c9:1f:d7:92:a8:8d:dd:fe:5c:4b:62:f4:4b:94:02:99:
         06:6c:f2:53:e1:a0:38:85:09:70:81:9d:e1:8b:f8:db:56:28:
         a3:50:ee:23:d6:3c:aa:85:85:29:e8:fa:5f:5e:7b:d7:72:48:
         41:02:fd:4f:fd:55:1b:85:06:74:8c:b8:ea:d1:25:89:e6:03:
         35:96:b8:96:24:32:8d:a2:cb:aa:e0:23:38:d1:90:80:7f:58:
         63:42:7e:b4:eb:7c:2d:ca:2e:6d:1f:ff:15:ad:15:e5:65:30:
         ac:3e:51:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:56:55 2026 by rpki-client