Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft
File:                     IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft (raw, json)
Hash identifier:          notTc0I729eePzkGQfye3X81OotvctKTXhXd4fBiXsw=
Subject key identifier:   0D:63:24:E4:7B:63:D3:8D:53:BA:86:B8:91:FF:95:01:D1:2B:61:C1
Authority key identifier: 21:4A:0F:42:19:09:44:AC:6B:45:E0:0A:24:AE:41:A3:45:FD:CB:35
Certificate issuer:       /CN=214a0f42190944ac6b45e00a24ae41a345fdcb35
Certificate serial:       019E3072859E40047612229012501640C670
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IUoPQhkJRKxrReAKJK5Bo0X9yzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft
Manifest number:          1910
Signing time:             Sat 16 May 2026 11:01:12 +0000
Manifest this update:     Sat 16 May 2026 11:01:12 +0000
Manifest next update:     Sun 17 May 2026 11:01:12 +0000
Files and hashes:         1: IUoPQhkJRKxrReAKJK5Bo0X9yzU.crl (hash: 3K+toOgFdzcdLCQHw9vAc/jPtS2cACvzU64cjeZK09o=)
                          2: ToOm_DRG8L881LK0bTvQrJEi9zE.roa (hash: DCNqoXRqfdwODxjtc8J2/AVxGOKRF24UDLD2fHtc4vM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IUoPQhkJRKxrReAKJK5Bo0X9yzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:85:9e:40:04:76:12:22:90:12:50:16:40:c6:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=214a0f42190944ac6b45e00a24ae41a345fdcb35
        Validity
            Not Before: May 16 11:01:12 2026 GMT
            Not After : May 17 11:01:12 2026 GMT
        Subject: CN=0d6324e47b63d38d53ba86b891ff9501d12b61c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:fa:07:f6:84:8b:d5:a2:ed:22:86:68:5a:5a:
                    93:7d:2a:30:44:fd:b4:6c:a8:fb:3f:8f:65:2e:1f:
                    89:bb:18:85:6b:a5:d5:a4:4a:40:a0:0d:8e:9c:52:
                    75:c7:4e:76:42:f3:f1:e2:0a:27:d2:2e:b4:85:d0:
                    02:0f:a2:9f:c1:02:05:33:c6:ae:fe:7d:90:26:23:
                    1f:04:85:cf:79:f5:fe:cf:9e:1a:49:95:77:04:7b:
                    14:40:53:57:21:e2:5f:59:93:f5:06:f6:d2:25:b1:
                    9a:ef:91:f4:1d:a0:1b:22:69:62:07:e6:d3:96:d9:
                    d1:58:f3:bd:68:4f:53:d0:f8:63:ed:6a:8b:23:ea:
                    8b:f2:f0:ba:0e:45:80:68:98:e2:f4:f1:ee:92:48:
                    2e:c0:a4:a2:fe:8c:1f:e7:99:6e:24:51:16:48:68:
                    90:22:26:5c:e9:bf:f9:b4:2b:c7:b9:97:fb:a6:91:
                    8a:2a:9a:75:bc:ff:11:0f:ec:47:1f:2c:50:4a:43:
                    62:d4:b7:70:7b:8a:50:47:4e:42:93:f9:4e:26:18:
                    28:f6:0f:fa:86:3d:94:b1:1e:19:08:3e:5c:ce:0e:
                    21:04:d7:c0:bd:4e:a2:0c:50:97:85:72:ef:57:74:
                    44:67:2a:e6:28:e5:1d:f0:f3:ee:c3:57:b7:53:8b:
                    e5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:63:24:E4:7B:63:D3:8D:53:BA:86:B8:91:FF:95:01:D1:2B:61:C1
            X509v3 Authority Key Identifier:
                keyid:21:4A:0F:42:19:09:44:AC:6B:45:E0:0A:24:AE:41:A3:45:FD:CB:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUoPQhkJRKxrReAKJK5Bo0X9yzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:00:f2:57:2e:02:16:24:3c:fb:8f:b7:74:04:8d:e6:fd:69:
         c2:48:93:67:71:d5:b5:7e:a6:b4:8b:4b:21:c0:ae:72:15:bb:
         27:bb:08:ad:4e:5d:0f:35:67:d5:33:25:fc:95:38:d4:d7:23:
         7b:b4:24:c7:10:cb:3d:d0:c8:f6:12:08:bb:65:57:78:0d:d5:
         ef:d5:2c:d0:fa:bd:fc:48:0f:e5:55:6c:9c:cf:32:dd:44:5d:
         17:41:c3:77:76:ed:6a:e4:2f:03:11:eb:db:d4:dc:8f:38:40:
         b8:88:bc:7a:16:97:71:6b:1f:49:3a:b1:89:ff:0c:ef:81:6d:
         0f:bd:71:ae:76:0c:6c:58:20:31:f7:a8:3b:4b:ee:0d:31:6c:
         af:26:3e:e4:be:2c:56:9e:96:ec:dd:4c:88:ce:b5:38:47:e0:
         19:82:83:f6:0d:e9:60:74:1a:36:aa:ce:8f:0f:c7:74:40:41:
         19:0a:29:54:89:89:70:63:02:b1:f2:5f:6b:5f:ac:11:4b:59:
         6f:df:76:74:92:7d:9f:aa:ab:6d:c4:6a:64:e2:79:d2:a3:dc:
         b9:3c:15:9d:1a:c2:e0:21:9e:4d:89:89:e2:a3:45:59:f7:f3:
         d3:a4:a0:aa:af:3f:1f:31:0d:59:51:c5:c5:db:ab:d6:a1:c6:
         06:df:4a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:02:25 2026 by rpki-client