Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
File:                     CarRexBndeSE9h67XsEEwnwYfkg.mft (raw, json)
Hash identifier:          sywAfK+Wv42o9xAVe/yH9UFjtU7GRvqcrcls4gH1fU8=
Subject key identifier:   CC:7E:AC:84:8A:6F:9D:C7:40:4F:6C:AD:B7:A6:A8:7F:93:9C:B9:F1
Authority key identifier: 09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
Certificate issuer:       /CN=09aad17b106775e484f61ebb5ec104c27c187e48
Certificate serial:       019E288233F8E49D6C0FDE38C5D478A6BBF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
Manifest number:          121D
Signing time:             Thu 14 May 2026 22:01:21 +0000
Manifest this update:     Thu 14 May 2026 22:01:21 +0000
Manifest next update:     Fri 15 May 2026 22:01:21 +0000
Files and hashes:         1: CarRexBndeSE9h67XsEEwnwYfkg.crl (hash: K+gmoUeQy/8tVp+9ywOLXNvLf5U9ICKv2DMoJKSlnSI=)
                          2: Rzs2HXQzTLrDqDj9LP1oWAbKMGw.roa (hash: OG2fkvNtGY/HMomh9VL9hQ1Vbd5noSl5aNza/Xw2mXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 22:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:82:33:f8:e4:9d:6c:0f:de:38:c5:d4:78:a6:bb:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09aad17b106775e484f61ebb5ec104c27c187e48
        Validity
            Not Before: May 14 22:01:21 2026 GMT
            Not After : May 15 22:01:21 2026 GMT
        Subject: CN=cc7eac848a6f9dc7404f6cadb7a6a87f939cb9f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e6:84:1d:02:85:7b:03:48:53:14:65:cc:cb:
                    25:bc:6d:d1:29:64:03:b3:cf:74:ee:ea:94:bb:79:
                    46:0f:ea:f9:a0:10:79:51:ff:79:15:ad:57:a2:f6:
                    1b:f2:12:fb:ac:13:44:e4:c1:f5:35:d5:58:1f:9d:
                    0f:fa:22:e3:f8:78:ca:41:ad:a9:27:aa:b0:76:84:
                    fa:12:bd:bf:a5:45:02:56:04:37:e6:e1:ba:bd:8a:
                    78:09:ed:d1:a6:2b:d8:fe:9d:56:8e:0c:00:c7:0d:
                    eb:0a:88:6b:bc:f7:dd:9f:f2:55:ec:97:59:dd:d6:
                    bb:e8:e4:e1:25:60:11:06:ff:5c:6f:c3:91:85:c1:
                    69:bc:0c:16:ce:1a:6c:f4:fc:6b:4b:11:aa:37:a9:
                    b7:69:7b:40:46:72:7b:16:8e:b8:57:90:f9:82:7a:
                    81:26:34:02:ef:a1:b9:85:e8:19:5f:83:63:b8:cb:
                    98:fc:86:ff:67:0c:5d:7f:18:64:20:a6:44:e4:5f:
                    7b:1e:3f:55:f9:c4:69:1d:07:7d:2f:69:f1:6d:df:
                    1c:ea:09:79:61:dc:ec:2e:b6:e5:80:22:1a:34:17:
                    44:e3:22:e2:df:65:68:dc:59:91:0b:bd:ed:84:ad:
                    ab:cb:b0:51:56:a2:d5:f5:97:e0:92:e6:15:09:c7:
                    8a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7E:AC:84:8A:6F:9D:C7:40:4F:6C:AD:B7:A6:A8:7F:93:9C:B9:F1
            X509v3 Authority Key Identifier:
                keyid:09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:8c:43:06:87:be:4b:e4:db:30:a9:ca:da:3a:10:8e:ca:60:
         5c:47:2b:c2:c2:fe:78:35:b7:e7:07:00:2a:ae:36:02:22:8a:
         07:8b:b9:e2:32:fc:46:6c:f9:af:16:89:cb:cf:33:83:78:03:
         f2:ec:49:6b:f1:9b:2e:45:11:39:e8:88:f7:ed:ec:92:8f:99:
         c6:69:1a:67:73:66:c0:f8:17:fb:bf:09:28:0a:53:0a:85:4b:
         32:18:f4:70:ef:f3:f5:0c:3b:13:9b:11:df:f7:84:70:21:96:
         f2:38:9d:ee:a6:02:d5:6f:4b:da:54:0d:75:5d:38:3b:d3:6f:
         81:df:4f:e9:8d:d8:77:f7:ca:d1:41:2a:12:c9:31:e0:bf:90:
         c6:26:fb:b7:01:7d:d2:bb:d5:f0:82:10:11:84:fd:17:ce:a2:
         ac:ae:88:30:61:ab:10:ec:ed:e8:6d:79:a5:4c:60:20:80:57:
         a7:4d:2d:56:48:38:18:24:2f:6e:af:0c:18:56:4f:c1:fe:22:
         8d:67:ba:9b:43:d1:b0:ff:6d:06:04:f1:05:94:bf:3b:3b:43:
         4f:5d:52:70:c8:df:08:50:84:4a:79:57:27:1e:e7:da:2b:36:
         12:2f:96:57:8d:64:bf:0d:4f:ad:6d:15:e8:ff:4d:29:1c:14:
         3b:25:30:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 09:08:15 2026 by rpki-client