Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
File:                     0LkE317sIhazQwFsXLJLuQpD06Q.mft (raw, json)
Hash identifier:          CgB4LwTSbU/LdR/WAozIYwr3w7jNg96PkWk4TBqd1ck=
Subject key identifier:   32:6E:20:B7:94:D6:DF:7C:7A:42:8B:43:4A:38:22:D3:F8:38:BB:8C
Authority key identifier: D0:B9:04:DF:5E:EC:22:16:B3:43:01:6C:5C:B2:4B:B9:0A:43:D3:A4
Certificate issuer:       /CN=d0b904df5eec2216b343016c5cb24bb90a43d3a4
Certificate serial:       019E2FCD3CA8F1BC020D055B902E1FB87BEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
Manifest number:          190C
Signing time:             Sat 16 May 2026 08:00:39 +0000
Manifest this update:     Sat 16 May 2026 08:00:39 +0000
Manifest next update:     Sun 17 May 2026 08:00:39 +0000
Files and hashes:         1: 0LkE317sIhazQwFsXLJLuQpD06Q.crl (hash: cz6Pn+VKyWVFlC3m+OzqMaeo1lH/ZIka9nKpHsZG/Ts=)
                          2: nqFedlELDT6btqVr2PyQaNO_Pfw.roa (hash: 8tqaPkj8LtydCchM9fMrH7we2nm/JziMXiNEi0lLF+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:cd:3c:a8:f1:bc:02:0d:05:5b:90:2e:1f:b8:7b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0b904df5eec2216b343016c5cb24bb90a43d3a4
        Validity
            Not Before: May 16 08:00:39 2026 GMT
            Not After : May 17 08:00:39 2026 GMT
        Subject: CN=326e20b794d6df7c7a428b434a3822d3f838bb8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6e:53:32:ec:40:82:2e:b1:ba:66:01:5e:22:
                    9e:16:99:2d:32:ae:1a:1e:2e:f2:04:0c:b0:0d:bb:
                    fb:ea:83:2e:de:15:bc:07:21:cd:aa:ee:99:41:52:
                    0e:d9:f4:22:3f:77:2c:f0:8b:d8:9b:f1:bf:8a:2c:
                    78:59:0f:4d:09:eb:64:6b:8d:85:ec:42:a7:d6:5c:
                    00:c3:e6:ce:22:fe:3b:7f:d9:a9:31:82:cf:e2:83:
                    5d:2a:a4:00:fa:9a:8a:55:ed:aa:30:aa:80:2e:3a:
                    71:3c:98:a3:c8:25:59:84:97:12:26:eb:a2:a5:ce:
                    35:51:84:f9:da:ff:99:c1:28:84:42:52:77:bd:27:
                    58:8a:90:62:88:fa:69:24:ba:ee:e3:1a:80:9d:58:
                    e7:53:ef:1f:63:5c:0b:3e:f8:ad:b6:a1:79:7a:25:
                    06:cf:3f:3a:c9:14:c7:47:36:8b:85:18:de:66:12:
                    d6:20:27:ce:7d:c4:40:19:39:aa:3a:a0:f2:52:43:
                    2a:84:78:86:85:9c:cb:6a:b8:bc:8c:d7:a2:82:5e:
                    fa:ae:88:e5:01:77:60:13:51:7f:ed:8d:03:1c:29:
                    ac:a4:9d:12:bd:a9:f3:37:2d:3d:7a:e9:46:e1:cf:
                    bb:29:06:24:68:26:5e:00:44:fb:ca:1c:4a:56:c7:
                    37:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6E:20:B7:94:D6:DF:7C:7A:42:8B:43:4A:38:22:D3:F8:38:BB:8C
            X509v3 Authority Key Identifier:
                keyid:D0:B9:04:DF:5E:EC:22:16:B3:43:01:6C:5C:B2:4B:B9:0A:43:D3:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:f5:cd:89:fc:3c:ab:4d:cc:96:55:22:71:8c:e3:25:37:5c:
         84:f9:7e:06:5e:6c:e8:12:fb:4c:4e:f1:25:e8:75:eb:10:25:
         7a:57:7b:74:6b:93:68:f8:df:aa:ed:33:5f:ad:be:9e:b9:83:
         2b:d8:2f:c6:84:94:4e:3c:4b:04:0c:f9:ce:3d:e5:d2:e7:44:
         db:eb:89:eb:3a:f8:c0:89:72:72:f0:81:f7:fb:7e:e8:2c:b0:
         e4:0e:5b:10:6e:80:6d:ef:f0:eb:d8:0c:39:fb:86:0e:21:47:
         fe:4d:93:ee:dd:b2:8d:2d:6a:1d:17:48:d4:f8:b1:8b:09:9a:
         49:da:82:04:27:6a:0b:2e:8a:b9:25:3a:f9:f5:d7:01:42:4c:
         2d:53:09:a4:a0:e3:e2:fe:6f:57:24:e7:a4:86:25:c9:dc:0d:
         e2:89:ef:90:06:37:e7:eb:7b:79:ae:98:f1:53:2e:df:c4:0b:
         d3:ae:7d:f6:77:a9:44:60:a4:53:15:37:45:b5:4f:34:d6:e1:
         1f:f1:3e:64:85:29:84:15:fb:73:20:fa:b0:5c:10:40:47:e2:
         4d:b5:f0:e7:fb:34:c1:f3:a5:ec:fe:07:fc:fc:9c:eb:0c:f6:
         59:ac:5b:7d:e7:8a:98:a5:6c:4c:26:d0:31:4e:3c:e2:4c:20:
         c6:a2:e0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:14:03 2026 by rpki-client