Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
File:                     41wFcLO3dz0eEYgufdLGJVN-sJw.mft (raw, json)
Hash identifier:          eHr1zSa8IFQgaQk2+Rms0Eb2EoYHAHT0NUSj9LInQj8=
Subject key identifier:   23:93:26:49:DF:4D:2D:54:FC:0E:79:1B:1F:8D:77:4D:79:3C:C5:D6
Authority key identifier: E3:5C:05:70:B3:B7:77:3D:1E:11:88:2E:7D:D2:C6:25:53:7E:B0:9C
Certificate issuer:       /CN=e35c0570b3b7773d1e11882e7dd2c625537eb09c
Certificate serial:       019E31850C569753689904B4D6CD0BBB627E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/41wFcLO3dz0eEYgufdLGJVN-sJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
Manifest number:          1648
Signing time:             Sat 16 May 2026 16:01:03 +0000
Manifest this update:     Sat 16 May 2026 16:01:03 +0000
Manifest next update:     Sun 17 May 2026 16:01:03 +0000
Files and hashes:         1: 41wFcLO3dz0eEYgufdLGJVN-sJw.crl (hash: IBqIty1pixMSybYCh4KjMD54o7+Gc0A5mtdf/Ex1bCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/41wFcLO3dz0eEYgufdLGJVN-sJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:85:0c:56:97:53:68:99:04:b4:d6:cd:0b:bb:62:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e35c0570b3b7773d1e11882e7dd2c625537eb09c
        Validity
            Not Before: May 16 16:01:03 2026 GMT
            Not After : May 17 16:01:03 2026 GMT
        Subject: CN=23932649df4d2d54fc0e791b1f8d774d793cc5d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a7:0e:7e:d0:d4:38:f3:94:6f:1a:d2:ed:9c:
                    28:87:84:ec:4c:ff:f6:b7:e9:89:43:2b:e3:72:83:
                    c3:d8:70:b7:56:18:ee:aa:a2:6c:97:e1:ed:a1:f7:
                    57:cb:0f:0c:4a:15:2f:f1:41:b0:e2:e4:2b:ac:20:
                    37:2a:b7:9d:fa:58:eb:65:90:d1:bb:ca:e2:68:c1:
                    e9:47:82:76:6a:53:ba:01:5b:b8:74:ef:8e:82:bc:
                    e7:0c:b7:61:a4:2c:f3:bc:1f:cd:44:3e:c9:33:51:
                    43:ce:2a:75:45:5e:14:57:98:49:bb:f3:e0:63:41:
                    bb:c7:35:0f:af:99:8e:81:c3:24:c7:3c:e4:9f:88:
                    3c:f6:61:66:67:94:25:53:06:67:98:7b:e1:93:8c:
                    a0:0c:0e:72:a4:97:d2:d6:81:28:c5:01:32:cd:31:
                    a1:7e:e3:53:d6:c7:f9:65:f8:dd:19:fe:95:88:61:
                    dd:cd:3a:92:a7:e3:a4:18:7b:54:63:33:9b:04:6f:
                    bf:47:69:7f:d6:5c:2f:54:d0:95:f6:18:6a:81:28:
                    eb:2a:35:8e:39:62:c0:11:cf:a4:e8:f4:1e:71:2e:
                    6a:33:3f:bb:df:bd:41:5c:07:7e:39:37:b3:89:35:
                    54:be:7c:44:7a:60:14:9a:7c:ee:4c:85:19:d4:d7:
                    3b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:93:26:49:DF:4D:2D:54:FC:0E:79:1B:1F:8D:77:4D:79:3C:C5:D6
            X509v3 Authority Key Identifier:
                keyid:E3:5C:05:70:B3:B7:77:3D:1E:11:88:2E:7D:D2:C6:25:53:7E:B0:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41wFcLO3dz0eEYgufdLGJVN-sJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:1d:66:9b:71:c4:09:83:77:14:2e:89:5f:5e:ed:58:12:f0:
         1b:5d:22:4f:5d:5d:e8:88:80:95:e6:1b:71:e1:cf:38:6f:aa:
         b6:48:26:67:50:ea:5e:ef:b8:5d:ba:81:22:72:0d:01:81:76:
         a1:4f:7e:65:f2:8c:35:17:79:f1:ef:9c:50:a8:d3:7d:5c:66:
         0b:06:82:d2:f6:d8:33:05:ff:bd:c9:5f:08:61:00:40:9f:60:
         74:47:fa:41:64:8b:47:01:9d:04:d3:d6:07:54:b0:87:a9:2d:
         b2:21:95:07:a4:fe:2b:b0:eb:45:23:07:94:34:bb:a0:6b:06:
         b0:42:54:2b:58:bc:65:c6:be:e1:0c:07:77:7d:13:58:25:b6:
         28:24:8b:fe:ca:62:2f:82:44:91:86:e0:56:4b:f3:8e:53:da:
         ac:ff:f1:87:b0:13:7e:ac:ef:92:9f:16:85:95:cd:c9:80:fe:
         75:ea:a0:36:7a:4e:f4:05:e8:5e:a3:05:5b:5c:6f:d9:95:99:
         35:2b:60:1f:48:f2:73:3e:5b:52:96:44:7d:29:5c:ee:e6:fa:
         d4:e1:19:82:53:b8:1b:1f:59:a4:81:a2:67:b5:ba:4e:03:a0:
         30:12:7a:24:03:34:d9:d5:c2:48:ad:9a:e4:a0:23:64:d3:c9:
         33:83:ce:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:31:43 2026 by rpki-client