Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
File:                     46GMDHrbmEtfd5d-CAComlHvu2M.mft (raw, json)
Hash identifier:          ESXUrYKTSBsv4it8ZGcKZc2EQdrMZHleorjcQnFk6zA=
Subject key identifier:   B2:33:DE:7C:25:38:40:D7:49:C6:D9:EF:1F:6F:EF:75:0A:53:4A:A9
Authority key identifier: E3:A1:8C:0C:7A:DB:98:4B:5F:77:97:7E:08:00:A8:9A:51:EF:BB:63
Certificate issuer:       /CN=e3a18c0c7adb984b5f77977e0800a89a51efbb63
Certificate serial:       019E303B3E4C41A1C287D462B1388F8C7943
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
Manifest number:          09FB
Signing time:             Sat 16 May 2026 10:00:49 +0000
Manifest this update:     Sat 16 May 2026 10:00:49 +0000
Manifest next update:     Sun 17 May 2026 10:00:49 +0000
Files and hashes:         1: 46GMDHrbmEtfd5d-CAComlHvu2M.crl (hash: MVw7c31VnNlEvXiHH30+YEDA5l+BsFeS/s3MGWsKijQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:3e:4c:41:a1:c2:87:d4:62:b1:38:8f:8c:79:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3a18c0c7adb984b5f77977e0800a89a51efbb63
        Validity
            Not Before: May 16 10:00:49 2026 GMT
            Not After : May 17 10:00:49 2026 GMT
        Subject: CN=b233de7c253840d749c6d9ef1f6fef750a534aa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:10:88:cf:15:08:19:16:3c:0c:5f:a1:9e:0b:
                    4b:48:0b:c1:0b:05:82:40:bf:66:02:4a:39:58:a0:
                    48:d0:07:ad:bf:9a:26:3d:3f:7b:0a:c7:94:b1:83:
                    bd:a2:a7:02:6d:ef:c8:2c:c4:de:f7:ef:92:59:f9:
                    f0:90:95:f6:ca:19:24:c0:47:63:14:4e:6f:33:13:
                    0a:01:c8:d0:c0:83:72:d0:c9:8c:b7:b8:47:8a:5f:
                    86:c2:d3:cf:e4:8f:d3:6d:f2:52:86:98:a3:31:25:
                    c8:9b:9e:f8:93:62:f0:da:6d:16:f7:90:03:da:09:
                    23:4c:f6:a0:c6:97:a2:67:8d:84:24:a5:7c:94:8c:
                    11:d4:a0:f0:ea:f8:bb:56:9a:f1:49:18:a5:5e:20:
                    34:43:3d:f9:e1:ab:52:53:39:a7:ec:19:16:1c:9b:
                    a9:89:73:8f:9e:52:e3:74:30:bc:d1:cb:68:f3:bb:
                    fb:f6:43:7d:22:49:56:80:cb:bd:c8:55:95:5f:90:
                    e4:00:d0:7b:4b:45:36:58:9a:8f:fd:33:5b:08:20:
                    65:fe:c1:89:79:76:5b:26:28:2e:d8:cd:76:ce:14:
                    39:ca:5b:62:55:23:3c:b7:bb:b8:ff:f0:b0:9a:61:
                    8d:78:be:c9:61:58:1a:84:f7:63:64:da:21:78:55:
                    b5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:33:DE:7C:25:38:40:D7:49:C6:D9:EF:1F:6F:EF:75:0A:53:4A:A9
            X509v3 Authority Key Identifier:
                keyid:E3:A1:8C:0C:7A:DB:98:4B:5F:77:97:7E:08:00:A8:9A:51:EF:BB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:7a:f7:59:98:82:61:87:fd:83:82:20:1a:17:f8:a7:4a:19:
         6f:d9:36:06:a9:dc:7c:11:3e:7b:60:25:f8:2b:94:89:35:71:
         d9:72:2a:11:d4:f7:b3:ac:39:a3:66:a8:e7:cc:8e:f1:c5:89:
         eb:7c:91:d3:84:e4:c9:cc:78:3f:58:ae:1a:cf:75:75:45:63:
         8e:ab:e1:b3:8b:78:0c:3d:eb:09:be:c4:dd:3e:a1:8a:a0:9e:
         6c:0e:67:80:76:69:67:90:a5:a8:17:79:63:bb:2e:58:0d:f1:
         2a:3b:bc:af:96:b5:39:f0:59:ec:7a:f0:a9:50:49:96:7d:03:
         4b:5a:c3:aa:ac:3f:bb:58:5c:76:83:cd:fb:d5:29:8f:58:7b:
         cd:0e:38:59:6d:d3:dc:6a:e6:07:1c:ab:9c:14:86:ed:fa:20:
         d0:af:17:fe:78:36:ac:25:52:0c:f1:12:97:ca:2f:ab:e8:64:
         db:7d:ac:ca:3b:66:57:d6:32:23:89:c9:21:ce:d0:5a:cb:40:
         1c:fe:cd:5e:1b:b2:04:91:c6:e5:28:2b:bb:02:89:36:38:ad:
         3a:bc:ce:4c:18:41:3a:35:b8:34:6c:55:50:9b:2f:2c:88:13:
         90:a6:13:85:64:33:a8:0d:b3:ae:3f:66:b6:ad:bf:7d:bd:64:
         16:a2:32:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:12:12 2026 by rpki-client