Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
File:                     4I6QfA_lCJGna9mbKQhwCmrGLjg.mft (raw, json)
Hash identifier:          OP2+qi1N06RQinh9E3kkX8Xj7QH/WllnVr2EnzXNnNs=
Subject key identifier:   E8:98:B6:61:46:E6:DA:2A:65:12:C3:52:13:C7:66:FE:F7:92:02:01
Authority key identifier: E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38
Certificate issuer:       /CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
Certificate serial:       019E3004DF0C50B372199DDA7BEBF4055ECB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
Manifest number:          1910
Signing time:             Sat 16 May 2026 09:01:26 +0000
Manifest this update:     Sat 16 May 2026 09:01:26 +0000
Manifest next update:     Sun 17 May 2026 09:01:26 +0000
Files and hashes:         1: 4I6QfA_lCJGna9mbKQhwCmrGLjg.crl (hash: B0Fqi9Gr2zke7kxAR0d0be8VXvThRmxXIa/bis4C/KI=)
                          2: azb1_WO3_kwPuSAgYoVTIRPk0go.roa (hash: 1/nAUytly79O0AERwCaGs88tFerHBFBw3HoH4Qov+gM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:04:df:0c:50:b3:72:19:9d:da:7b:eb:f4:05:5e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
        Validity
            Not Before: May 16 09:01:26 2026 GMT
            Not After : May 17 09:01:26 2026 GMT
        Subject: CN=e898b66146e6da2a6512c35213c766fef7920201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:79:c8:09:77:6e:90:42:11:51:aa:e7:69:d4:
                    a3:87:04:21:4c:25:b1:8e:6d:ea:fc:1c:aa:d5:01:
                    20:bc:9e:29:ab:79:d0:38:12:e0:77:60:4b:95:15:
                    7b:24:40:b8:46:4e:53:88:36:17:8c:f5:73:94:df:
                    fb:d2:c3:3f:6f:e8:ae:31:39:65:3a:11:40:01:ea:
                    74:59:34:25:4f:88:f1:ac:f9:3c:9f:11:a1:3f:5b:
                    6f:85:b2:e5:de:4c:39:54:bb:12:84:16:60:59:73:
                    27:f8:56:2c:da:01:2e:c5:2f:de:ab:48:81:15:56:
                    66:64:02:ad:45:94:85:a7:79:73:20:28:b8:f4:22:
                    8b:38:cc:55:67:42:be:e2:da:05:30:34:b9:b3:9a:
                    5e:43:4b:32:b2:f3:89:43:ad:dd:c3:c7:d7:4a:ba:
                    10:9e:3b:e2:89:15:3f:ca:e3:2a:57:e1:f8:6a:be:
                    82:ed:be:7f:e0:df:cf:33:34:bf:cc:1a:72:e5:b0:
                    9d:bb:93:1f:7e:1c:ce:a0:c4:83:0e:60:c1:07:1d:
                    d8:51:76:a2:a3:a6:49:13:27:d5:07:d1:a6:51:a6:
                    a0:47:08:ef:c1:ee:81:7b:18:a2:e1:4b:f6:3a:06:
                    6c:45:05:50:9f:8b:cb:d1:5c:74:32:4d:3e:e1:28:
                    27:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:98:B6:61:46:E6:DA:2A:65:12:C3:52:13:C7:66:FE:F7:92:02:01
            X509v3 Authority Key Identifier:
                keyid:E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:58:f8:fb:16:ed:d6:6d:3c:49:f5:d2:17:21:ea:b9:71:93:
         c7:6e:ad:de:83:67:22:b4:d9:fe:4f:a0:69:fa:c2:88:aa:5b:
         8d:3b:e7:e9:c2:78:a4:98:7d:02:0a:4b:8f:94:5b:99:65:02:
         88:8a:83:da:5a:3c:6b:2d:6f:8e:15:f3:08:4a:4f:fe:fc:7e:
         7e:48:96:60:60:94:d9:e5:82:14:19:08:06:7e:14:47:4a:e5:
         db:e5:39:2a:59:4a:83:ea:58:43:55:bd:5a:78:08:1b:23:d5:
         d0:ef:7a:55:75:86:9a:60:22:06:53:2d:1d:ed:2d:8d:e2:56:
         a4:88:66:ad:c6:fe:f4:61:7b:a1:13:12:09:32:d1:09:8a:16:
         ef:eb:f2:e4:6a:4b:26:e7:2b:f6:c9:ef:9e:83:b7:22:a0:b4:
         01:74:e1:22:5c:a6:5b:e5:be:ea:9a:16:4f:28:9a:2b:25:5a:
         9a:80:1d:3b:d9:f3:f6:69:de:36:cc:cc:d6:9e:c2:b3:3a:7d:
         21:ab:3a:86:fb:32:29:7f:70:9d:51:be:ff:ef:4d:ee:a1:fd:
         f5:45:e8:b2:50:06:df:d0:2b:7e:8d:1a:73:41:77:1d:20:6c:
         93:63:1e:05:1b:99:da:f7:b8:59:6f:7d:54:75:36:ab:b7:fe:
         47:1b:87:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:15 2026 by rpki-client