Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
File:                     1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft (raw, json)
Hash identifier:          fZSKBddke7/17wMg7l82Mpg0Oc317EobzlcORICM4wU=
Subject key identifier:   9D:35:0E:86:DC:51:08:96:6B:0D:B9:F3:93:26:E5:C7:A5:EE:26:B9
Authority key identifier: F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
Certificate issuer:       /CN=f973209625e2a03ddeecf91bb480548e5729d479
Certificate serial:       019E3004F09745D460CFFC00B1858FD5B0CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
Manifest number:          190E
Signing time:             Sat 16 May 2026 09:01:30 +0000
Manifest this update:     Sat 16 May 2026 09:01:30 +0000
Manifest next update:     Sun 17 May 2026 09:01:30 +0000
Files and hashes:         1: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl (hash: 3wWdVp0/V0OUt+ysQePEHbxBSXcw9FNUIttf637RKjE=)
                          2: McYjjC5KqcvB_nVezfbVebYSEGE.roa (hash: RfRO6ieaH0AVTevS9LKIVFeYDX2W75T2UkbyiNhzcEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:04:f0:97:45:d4:60:cf:fc:00:b1:85:8f:d5:b0:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f973209625e2a03ddeecf91bb480548e5729d479
        Validity
            Not Before: May 16 09:01:30 2026 GMT
            Not After : May 17 09:01:30 2026 GMT
        Subject: CN=9d350e86dc5108966b0db9f39326e5c7a5ee26b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:04:50:33:cb:8a:d3:16:10:67:16:ab:e1:6e:
                    f4:7b:32:29:4b:25:07:5b:4d:21:22:32:5c:c6:d5:
                    bf:12:00:f3:3c:83:c4:3e:b6:39:dd:3b:d6:ea:eb:
                    97:c2:3e:ad:59:ef:1f:d5:29:a5:80:c7:23:62:9b:
                    ce:6e:01:f6:18:73:aa:e2:bc:5d:ed:3f:b2:08:ca:
                    c1:59:f5:c3:47:89:65:97:9e:d8:92:5a:44:d4:7f:
                    3f:12:bc:be:1d:74:8d:9a:c8:44:ef:a8:2b:92:8c:
                    c8:be:4b:29:4e:55:86:97:5d:38:e4:93:ba:7b:77:
                    f2:8d:43:aa:14:90:76:3b:18:7f:fe:64:a8:2f:c9:
                    c4:67:55:12:f3:42:5e:27:81:ff:c8:4b:30:9f:bc:
                    70:14:22:80:0f:b3:4b:dc:45:e1:e4:c0:e5:73:9f:
                    10:5c:0b:a9:45:49:2c:5d:be:05:8f:7c:48:0a:10:
                    93:fb:8b:98:c6:6e:d6:4b:62:e9:22:38:03:e4:01:
                    03:3e:9e:f0:64:a4:b2:89:4b:73:40:28:23:1e:83:
                    0d:91:98:14:4d:35:f1:d5:be:c3:10:87:8b:a6:81:
                    4d:17:ab:4d:92:be:a3:21:5b:04:8c:4a:02:d9:f0:
                    ff:9f:33:11:25:38:bb:92:81:d1:b9:f3:62:ec:6f:
                    b1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:35:0E:86:DC:51:08:96:6B:0D:B9:F3:93:26:E5:C7:A5:EE:26:B9
            X509v3 Authority Key Identifier:
                keyid:F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:2a:fc:7a:ae:73:ee:3d:a5:f4:74:63:6f:15:7f:03:ac:fa:
         c5:5c:37:39:36:11:af:01:52:c0:f3:82:c1:3f:dc:7a:ca:dc:
         71:08:a6:67:fb:13:20:14:87:ec:78:4c:97:32:c6:b2:f6:a8:
         fb:4b:ec:6b:4c:51:73:3f:51:b8:fd:91:c3:79:a2:0e:e8:93:
         4e:c3:58:cd:bb:cc:80:3a:8c:8f:b6:42:1a:ad:b7:4b:ff:b8:
         12:29:a2:38:2d:36:37:5f:7e:c9:28:16:b0:55:28:71:b9:50:
         ea:2e:ef:52:13:32:9a:0d:47:2a:cc:40:32:b9:9c:cd:28:88:
         da:5e:88:59:0f:01:cf:7f:48:f9:5c:0b:77:6f:42:03:d0:44:
         68:b1:07:8c:b8:7c:41:0c:ee:31:63:e8:23:71:de:88:67:1a:
         66:a4:1d:d5:0d:04:e4:d1:06:4e:39:75:72:56:f8:98:85:b0:
         ca:7d:78:cc:5e:1e:d0:7e:8a:5a:c9:f6:14:3a:b0:37:67:c2:
         a9:41:a3:d7:2b:b2:b6:9b:2f:46:c9:8d:ee:bc:11:cb:89:12:
         be:74:a8:44:34:98:f3:98:88:99:e9:d7:09:49:5c:32:ef:93:
         49:11:11:98:18:7e:b0:00:3f:18:4a:b7:3d:b6:90:8e:a1:1d:
         5f:b8:5e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:38:47 2026 by rpki-client