Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft
File:                     0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft (raw, json)
Hash identifier:          uvIzWlcCWt783fjxeQqu8MVCim34KIy8mYTOhzvFDTs=
Subject key identifier:   69:37:18:50:67:B2:D2:5D:DA:26:69:6B:A9:C4:FC:7C:A2:3E:55:34
Authority key identifier: D0:0B:D4:D5:68:2C:E6:08:E2:7C:BE:22:1A:26:77:EC:B5:07:49:7D
Certificate issuer:       /CN=d00bd4d5682ce608e27cbe221a2677ecb507497d
Certificate serial:       019E303B8125B11373A640F865624777E955
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0AvU1Wgs5gjifL4iGiZ37LUHSX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft
Manifest number:          184B
Signing time:             Sat 16 May 2026 10:01:06 +0000
Manifest this update:     Sat 16 May 2026 10:01:06 +0000
Manifest next update:     Sun 17 May 2026 10:01:06 +0000
Files and hashes:         1: 0AvU1Wgs5gjifL4iGiZ37LUHSX0.crl (hash: TYQIoXjppwUIY2dTCTwZORSv0+J1ClkdycUGSpsSktU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0AvU1Wgs5gjifL4iGiZ37LUHSX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:81:25:b1:13:73:a6:40:f8:65:62:47:77:e9:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d00bd4d5682ce608e27cbe221a2677ecb507497d
        Validity
            Not Before: May 16 10:01:06 2026 GMT
            Not After : May 17 10:01:06 2026 GMT
        Subject: CN=6937185067b2d25dda26696ba9c4fc7ca23e5534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1d:71:71:42:a0:58:c2:c4:25:2b:4f:25:03:
                    e9:80:50:43:1f:20:87:12:a2:e6:65:fd:94:2e:97:
                    07:da:6e:f3:7d:2a:99:fe:9c:17:3d:57:dd:27:5a:
                    ba:6a:af:33:1c:84:43:97:f3:c9:47:3d:e5:d7:02:
                    72:7c:92:54:6d:9e:ab:bf:87:74:ee:f4:92:56:42:
                    fb:5d:03:96:8a:05:e0:74:a3:97:d4:ab:d1:85:ea:
                    c4:65:b2:70:7c:8a:4c:70:39:fd:50:2b:a7:5e:80:
                    52:45:8c:34:5f:2d:34:9b:08:19:e5:72:ca:83:5d:
                    6e:39:fd:a6:ad:c2:3a:e2:71:d0:53:dd:1d:6c:fc:
                    2d:6f:54:70:7b:9d:0e:72:97:9a:4d:66:19:07:77:
                    05:c7:79:12:b7:91:26:a8:e0:0a:d8:47:52:a9:b0:
                    31:28:e3:b1:98:9d:14:15:64:c5:2f:a0:6f:8c:0e:
                    cc:5d:f5:f1:b4:ea:4c:ee:8b:63:70:b6:2e:c3:05:
                    66:a4:91:a0:62:e7:c5:84:2e:91:ca:e1:9c:9f:0e:
                    90:e9:4f:0f:2c:68:3e:9d:09:d5:15:01:63:1d:7c:
                    43:7f:dc:ec:1f:ca:fc:b6:12:ac:b5:99:0c:96:32:
                    71:0e:cf:52:1c:3f:06:c3:c7:54:a5:ae:ca:f3:e6:
                    1b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:37:18:50:67:B2:D2:5D:DA:26:69:6B:A9:C4:FC:7C:A2:3E:55:34
            X509v3 Authority Key Identifier:
                keyid:D0:0B:D4:D5:68:2C:E6:08:E2:7C:BE:22:1A:26:77:EC:B5:07:49:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AvU1Wgs5gjifL4iGiZ37LUHSX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:b0:64:4c:b1:9c:19:0b:a4:38:6a:b2:25:a6:aa:f1:99:c4:
         24:35:83:15:bc:17:6f:79:6c:07:76:6d:ef:c9:2c:7a:9b:75:
         01:4a:14:82:2a:23:7a:89:c3:75:28:80:47:d4:45:d1:30:41:
         a6:9e:b8:20:8f:47:b8:73:04:9d:ce:7b:83:1f:48:ba:57:df:
         c6:1f:9d:8b:a9:07:bd:84:0b:dc:34:7b:d4:8c:62:f7:11:c0:
         45:df:21:83:38:17:f8:ea:c3:7e:7f:f5:94:f9:24:fb:90:c5:
         51:7d:97:de:96:9e:14:14:47:06:ac:6f:f0:1c:8a:65:d0:6c:
         cc:d9:5c:47:70:34:87:45:3d:3a:2c:e6:2c:71:89:b1:a5:8a:
         0c:85:62:c7:8f:9f:f9:ba:64:50:04:bc:eb:ce:22:0a:e6:af:
         de:ba:0c:a5:f1:b4:3c:4d:c3:98:3b:ca:81:b8:a4:a4:89:0d:
         9f:c9:fa:0f:ab:32:bc:91:c8:3c:12:5e:12:2d:80:35:c2:37:
         a2:68:02:01:27:2d:c2:86:ff:39:56:55:35:d5:36:49:f2:40:
         f5:51:44:ea:00:b6:56:6c:9e:9f:3a:31:59:d3:be:56:10:bb:
         c3:24:1a:2e:bd:c0:1d:a0:43:51:15:3d:63:13:ae:93:72:8b:
         03:35:98:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wO4ElsRNzpkD4ZWJHd+lVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMGJkNGQ1NjgyY2U2MDhlMjdjYmUyMjFhMjY3N2VjYjUw
NzQ5N2QwHhcNMjYwNTE2MTAwMTA2WhcNMjYwNTE3MTAwMTA2WjAzMTEwLwYDVQQD
Eyg2OTM3MTg1MDY3YjJkMjVkZGEyNjY5NmJhOWM0ZmM3Y2EyM2U1NTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3B1xcUKgWMLEJStPJQPpgFBDHyCH
EqLmZf2ULpcH2m7zfSqZ/pwXPVfdJ1q6aq8zHIRDl/PJRz3l1wJyfJJUbZ6rv4d0
7vSSVkL7XQOWigXgdKOX1KvRherEZbJwfIpMcDn9UCunXoBSRYw0Xy00mwgZ5XLK
g11uOf2mrcI64nHQU90dbPwtb1Rwe50OcpeaTWYZB3cFx3kSt5EmqOAK2EdSqbAx
KOOxmJ0UFWTFL6BvjA7MXfXxtOpM7otjcLYuwwVmpJGgYufFhC6RyuGcnw6Q6U8P
LGg+nQnVFQFjHXxDf9zsH8r8thKstZkMljJxDs9SHD8Gw8dUpa7K8+YbRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGk3GFBnstJd2iZpa6nE/HyiPlU0MB8GA1UdIwQY
MBaAFNAL1NVoLOYI4ny+Ihomd+y1B0l9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEF2VTFXZ3M1Z2ppZkw0aUdpWjM3TFVIU1gwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8yOTk1MjItOTMyYy00ODdhLWFmM2Qt
ZWI5MzAwNjcyYWU0LzEvMEF2VTFXZ3M1Z2ppZkw0aUdpWjM3TFVIU1gwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8yOTk1MjItOTMyYy00ODdhLWFmM2QtZWI5MzAwNjcyYWU0
LzEvMEF2VTFXZ3M1Z2ppZkw0aUdpWjM3TFVIU1gwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAErBkTLGc
GQukOGqyJaaq8ZnEJDWDFbwXb3lsB3Zt78ksept1AUoUgiojeonDdSiAR9RF0TBB
pp64II9HuHMEnc57gx9Iulffxh+di6kHvYQL3DR71Ixi9xHARd8hgzgX+OrDfn/1
lPkk+5DFUX2X3paeFBRHBqxv8ByKZdBszNlcR3A0h0U9OizmLHGJsaWKDIVix4+f
+bpkUAS8684iCuav3roMpfG0PE3DmDvKgbikpIkNn8n6D6syvJHIPBJeEi2ANcI3
omgCASctwob/OVZVNdU2SfJA9VFE6gC2VmyenzoxWdO+VhC7wyQaLr3AHaBDURU9
YxOuk3KLAzWY7g==
-----END CERTIFICATE-----
Generated at Sat May 16 15:38:48 2026 by rpki-client