Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
File:                     1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft (raw, json)
Hash identifier:          +AIKrhLrqaTxzamsoEHOWsf5ViA1I1neQTmipQh/4ao=
Subject key identifier:   FE:4F:20:B4:A8:0F:F6:78:58:B1:9B:9C:6E:F9:8C:48:36:43:38:E9
Authority key identifier: F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4
Certificate issuer:       /CN=f94df3b8463da119fdd56d85da547a042a1798c4
Certificate serial:       019E31859179FC8ECE63F577C69D75077BCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
Manifest number:          190C
Signing time:             Sat 16 May 2026 16:01:37 +0000
Manifest this update:     Sat 16 May 2026 16:01:37 +0000
Manifest next update:     Sun 17 May 2026 16:01:37 +0000
Files and hashes:         1: 1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl (hash: 7ovBVFJco337ZCNJvNrjphniAoPH73g6gNGtSeOjJtY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:85:91:79:fc:8e:ce:63:f5:77:c6:9d:75:07:7b:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f94df3b8463da119fdd56d85da547a042a1798c4
        Validity
            Not Before: May 16 16:01:37 2026 GMT
            Not After : May 17 16:01:37 2026 GMT
        Subject: CN=fe4f20b4a80ff67858b19b9c6ef98c48364338e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:25:73:c6:31:7e:d6:77:66:a3:90:a5:6a:6d:
                    fb:fc:07:d7:50:4c:8e:a0:62:d3:02:04:48:c8:f4:
                    30:e0:33:bc:5d:3c:8a:de:22:7f:63:da:ca:2d:2e:
                    2b:68:23:ff:f6:39:f7:42:b0:1e:15:32:63:3b:18:
                    99:a7:0b:dc:3c:9c:5f:23:6f:bf:2f:cf:35:9a:c7:
                    65:67:6a:04:fd:37:1c:47:70:c3:a1:03:8c:a9:0f:
                    e6:e9:59:fa:40:c7:33:cc:ff:a4:bf:50:91:e5:2e:
                    70:7d:c0:ee:12:fd:9a:49:19:d7:89:9f:b6:7a:dc:
                    fb:36:61:0a:10:cb:94:ce:59:b7:03:2e:19:34:30:
                    ed:36:ee:a2:3c:50:62:4d:d9:e4:35:81:37:5d:ff:
                    cb:67:7b:89:5e:8d:63:0f:24:d0:78:84:ac:9f:db:
                    3b:1b:ec:36:43:4b:ce:a0:01:40:53:5b:84:81:26:
                    66:a0:7e:80:47:7a:78:73:f2:5d:e9:08:b3:00:f2:
                    60:e0:6d:c3:d8:c5:34:25:4d:f5:0e:cc:fe:e0:73:
                    c1:cb:2b:d9:81:94:d7:82:b4:c7:e9:31:68:85:a9:
                    a7:e0:ff:e8:51:cb:81:66:8a:58:54:70:eb:e2:1f:
                    d5:c6:ce:47:7f:a9:41:c3:48:fb:e9:ba:6b:3f:24:
                    75:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:4F:20:B4:A8:0F:F6:78:58:B1:9B:9C:6E:F9:8C:48:36:43:38:E9
            X509v3 Authority Key Identifier:
                keyid:F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:72:73:28:38:2d:b9:34:42:ee:08:f9:8d:13:f9:ff:70:f7:
         87:c2:eb:c0:3c:c6:86:fe:5c:10:99:18:85:3a:43:4c:e9:df:
         39:f3:b7:4d:42:7b:56:b6:57:95:10:32:7b:1c:3b:e3:9a:62:
         3d:f2:cb:38:ce:5d:68:9e:cf:00:f5:fa:88:ae:62:39:43:84:
         bb:98:c2:10:46:51:ba:b7:e6:81:87:5f:da:93:49:af:cf:68:
         9f:e0:9e:0d:71:6c:65:ac:e3:11:62:3b:f3:86:10:da:d1:1c:
         8f:33:c2:0a:24:bf:6e:db:dd:44:0e:03:11:48:a8:53:c6:6f:
         04:68:f6:48:60:81:a6:83:b6:d8:c9:d8:ed:67:56:e7:20:1b:
         ed:59:94:c8:c4:8f:d2:4c:cf:c9:a5:d4:fd:3f:53:d6:06:77:
         01:ee:16:9b:0a:ed:67:68:33:bc:70:6e:94:7a:f8:a3:a0:11:
         6b:27:4d:a3:56:23:05:ba:1b:99:f7:3f:33:0d:05:b8:ed:b7:
         e7:4e:aa:27:72:2d:ad:c8:8f:d7:40:82:c4:41:09:48:ae:c6:
         3f:f0:37:a8:f4:22:25:c5:f5:c2:4c:95:0e:dc:f8:e0:f4:0d:
         c8:71:c7:47:b5:0b:63:c9:19:35:4f:b4:bb:ac:7e:54:e9:9b:
         78:91:6c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:40:05 2026 by rpki-client