Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
File:                     AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft (raw, json)
Hash identifier:          Ixnq+YBKQsaG6IVin65wwF1F1PI10GjxVXYQtp0yOkQ=
Subject key identifier:   C0:B1:AA:DB:F5:D5:44:2F:CC:BD:84:64:58:59:CB:C8:6D:0D:9A:D4
Authority key identifier: 03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
Certificate issuer:       /CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Certificate serial:       019E30A9A922A08A673F71347817002D31AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
Manifest number:          1913
Signing time:             Sat 16 May 2026 12:01:25 +0000
Manifest this update:     Sat 16 May 2026 12:01:25 +0000
Manifest next update:     Sun 17 May 2026 12:01:25 +0000
Files and hashes:         1: AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl (hash: Ij6wSz+r01GEsERJVteNLUfzZWbHb7Hsi//KFMfzS30=)
                          2: nu_nfWvngwD8Y74CXi065T5OVuQ.roa (hash: d92WDDshr8YLz0+Twkg4dzAWaxn6uiHcpqEqs+83HsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:a9:22:a0:8a:67:3f:71:34:78:17:00:2d:31:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
        Validity
            Not Before: May 16 12:01:25 2026 GMT
            Not After : May 17 12:01:25 2026 GMT
        Subject: CN=c0b1aadbf5d5442fccbd84645859cbc86d0d9ad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:80:c3:b6:f7:87:70:6e:b8:31:db:40:2e:c3:
                    5e:65:ad:2c:ef:fe:48:9d:cd:c4:1c:ec:31:66:b9:
                    11:67:31:66:5b:a4:a0:90:35:86:98:dd:b0:84:9c:
                    36:57:b6:c4:bf:d9:e5:a0:06:9d:bc:94:30:40:5b:
                    dd:ba:c6:56:f8:2f:44:c1:aa:dc:9c:ea:08:58:30:
                    e1:bd:2b:ba:63:c2:26:a6:48:18:35:56:12:9f:4d:
                    48:5d:06:16:27:c5:7f:1a:5a:58:af:85:60:95:a6:
                    80:6d:9e:84:51:80:59:55:54:34:27:13:c4:45:5d:
                    c9:a8:69:62:23:7d:64:91:18:7e:c6:01:5d:02:02:
                    68:0f:5b:b2:d6:5c:d3:de:73:4d:27:b2:d6:d0:70:
                    83:21:2e:92:65:8f:bb:9d:e9:73:c4:6a:27:59:1c:
                    08:50:41:17:f7:e3:d3:1c:b4:89:b0:a3:de:cc:3f:
                    66:1e:0c:4f:8e:4b:cb:0a:39:46:40:38:90:82:02:
                    6a:5c:1a:b3:77:14:a3:0f:4f:22:9a:38:88:19:7f:
                    0f:d1:3a:9f:48:d4:11:96:7a:0c:f4:6a:46:e3:22:
                    33:5c:a9:e3:c9:56:8e:3e:21:26:e8:8f:cd:2c:08:
                    00:cf:6e:76:6b:30:50:da:af:e0:21:8f:e9:a4:2a:
                    aa:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B1:AA:DB:F5:D5:44:2F:CC:BD:84:64:58:59:CB:C8:6D:0D:9A:D4
            X509v3 Authority Key Identifier:
                keyid:03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:61:17:ab:95:f7:fb:4f:db:2a:79:00:5c:62:07:b5:5b:f5:
         84:a9:c6:8d:13:83:cd:3a:a6:e2:64:73:ae:02:28:24:dd:1b:
         c2:ac:3c:da:0a:d7:1f:6c:44:36:68:01:13:9f:88:36:79:d9:
         ef:9a:4a:b5:dc:49:8c:e9:be:8a:5f:ab:3e:79:54:93:0c:f9:
         e7:64:ef:97:d3:62:1e:ea:4e:0a:84:25:4f:f4:62:24:d2:d9:
         70:0b:a2:b5:c2:17:b5:32:a9:a7:e5:60:0a:6f:7c:d9:62:63:
         15:6a:02:5e:8a:61:6d:6c:01:78:f3:80:18:fe:ef:9a:78:21:
         7c:d9:2f:79:11:a2:6c:aa:5c:20:de:c5:29:3c:de:a9:ce:4a:
         75:8b:d8:5c:3f:69:78:90:d4:73:1f:4c:f5:5b:d9:da:b4:10:
         96:89:e3:d5:31:99:bd:f1:b0:fd:fe:38:71:1d:ff:a6:a3:e9:
         f1:79:ce:69:81:f6:5b:b6:e2:41:74:e2:e6:f9:6d:86:1d:d3:
         e1:71:e1:7b:6c:2c:54:4b:7f:37:4d:80:9e:e1:c4:05:73:72:
         99:c4:98:e2:45:e0:b7:5f:71:cb:42:67:b3:58:d8:45:92:3c:
         70:6f:aa:51:d0:d8:02:42:5d:43:98:8a:a4:42:e0:c2:e3:78:
         d0:5c:3c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:26:47 2026 by rpki-client