Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
File:                     0WLUzQwan_4krVFT0Zzpwx3LTH0.mft (raw, json)
Hash identifier:          EMC3/SaviEt65vG6L7yh4+Xc87MSPFcvMMtkAxMs/F0=
Subject key identifier:   1A:65:DD:8C:5A:E0:56:12:1B:39:09:D1:3B:3E:18:A6:5F:E1:C5:9E
Authority key identifier: D1:62:D4:CD:0C:1A:9F:FE:24:AD:51:53:D1:9C:E9:C3:1D:CB:4C:7D
Certificate issuer:       /CN=d162d4cd0c1a9ffe24ad5153d19ce9c31dcb4c7d
Certificate serial:       019E30723761172760CD1DC815E91C0A51BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
Manifest number:          190A
Signing time:             Sat 16 May 2026 11:00:51 +0000
Manifest this update:     Sat 16 May 2026 11:00:51 +0000
Manifest next update:     Sun 17 May 2026 11:00:51 +0000
Files and hashes:         1: 0WLUzQwan_4krVFT0Zzpwx3LTH0.crl (hash: NFMQXO5KWhNA2Yk6T8u6fC8zUdMMkFOV40yTWLnNFLw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:37:61:17:27:60:cd:1d:c8:15:e9:1c:0a:51:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d162d4cd0c1a9ffe24ad5153d19ce9c31dcb4c7d
        Validity
            Not Before: May 16 11:00:51 2026 GMT
            Not After : May 17 11:00:51 2026 GMT
        Subject: CN=1a65dd8c5ae056121b3909d13b3e18a65fe1c59e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1b:53:0c:e0:be:51:30:e0:2e:77:8c:77:3c:
                    95:37:43:90:dc:2b:25:06:c4:75:43:6b:12:c2:31:
                    71:f7:42:3b:41:4e:27:f7:21:ec:94:8a:3b:3b:17:
                    d0:3f:43:a5:ab:62:76:04:fd:4b:a5:39:37:e6:81:
                    65:90:cb:17:62:98:92:40:86:7f:04:46:b6:f9:3a:
                    eb:51:f9:9b:f5:1c:b0:c4:5e:f1:1e:46:b7:72:59:
                    4f:82:e2:10:d1:93:e8:ff:c1:69:e1:02:84:57:bb:
                    54:ac:74:d8:54:3f:55:c3:d8:3e:44:57:7d:de:05:
                    14:2f:df:4c:7c:e4:b2:ef:b9:24:5a:db:40:11:05:
                    0c:0b:79:a1:13:a3:a9:b4:a5:f2:09:33:a9:e3:a0:
                    8c:49:b9:70:3c:20:ac:4e:ef:9d:1c:cc:8e:8e:c4:
                    2b:92:2e:d8:5e:65:2b:ae:25:7e:0a:0a:dc:b6:a5:
                    2c:26:f7:44:ce:9f:33:5e:cd:39:fc:ac:c6:f4:78:
                    a3:61:11:97:a9:87:06:61:aa:f2:e1:1b:fe:5e:c0:
                    f7:22:2b:ba:bf:da:12:23:17:cf:8f:a8:7f:05:f4:
                    3c:a4:78:ef:7d:3b:5e:7d:ef:44:fe:34:f9:5d:7a:
                    43:b4:9a:d8:84:07:61:80:ba:01:7b:8f:d3:a3:2e:
                    22:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:65:DD:8C:5A:E0:56:12:1B:39:09:D1:3B:3E:18:A6:5F:E1:C5:9E
            X509v3 Authority Key Identifier:
                keyid:D1:62:D4:CD:0C:1A:9F:FE:24:AD:51:53:D1:9C:E9:C3:1D:CB:4C:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:99:ee:09:71:32:14:4c:49:b3:a0:c3:b9:32:63:bd:21:e2:
         28:8c:b9:4f:d4:af:21:9e:9b:fc:c7:eb:5e:18:57:64:f6:2f:
         d1:81:03:90:6a:cb:6f:7f:a0:b2:87:bf:25:9b:45:ad:9e:05:
         67:48:8b:4e:97:96:08:53:5b:22:78:18:ba:51:4c:76:a8:c3:
         e8:6d:52:02:08:62:09:13:b2:d6:61:fe:2e:dd:41:5b:72:f7:
         a5:a2:bc:23:fc:29:d0:e6:4e:1c:46:2c:e8:6d:e5:cc:3a:90:
         40:db:d8:64:cd:af:2a:e3:d6:3a:68:54:5e:40:92:1d:10:90:
         d7:c6:df:68:60:67:27:75:04:07:41:b9:f1:da:73:10:c5:fa:
         3a:d8:be:f3:38:4c:04:f5:81:25:e1:b8:c3:4e:64:b2:46:10:
         75:c2:b8:7c:01:2f:9f:02:3a:7b:a2:9d:53:cb:27:2b:8a:87:
         f9:d8:12:d7:36:74:5c:9d:6f:f9:58:a7:95:34:b4:ab:f1:93:
         00:1a:1f:c3:a4:6f:14:9c:2b:ee:1b:a5:79:b7:97:82:a8:10:
         51:eb:50:31:c3:0d:3c:40:9d:1a:a9:8c:55:9c:0f:0d:03:29:
         bf:f5:90:b1:99:79:bb:c7:78:54:7c:55:6e:86:9f:95:76:d9:
         9b:81:32:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:23:57 2026 by rpki-client