Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
File:                     S-obEpfbw_S4HZEMJHbsgfw-lps.mft (raw, json)
Hash identifier:          /lybwvMS0MhicdCktreaJCldwWRvd2Ozz6zcKJNgVq8=
Subject key identifier:   0F:CD:0F:13:90:C7:E9:E8:A5:1E:7B:5A:2E:66:6C:01:A8:57:6E:23
Authority key identifier: 4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B
Certificate issuer:       /CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
Certificate serial:       019E2AA7AF9D375285057648238066A5546F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
Manifest number:          190C
Signing time:             Fri 15 May 2026 08:01:32 +0000
Manifest this update:     Fri 15 May 2026 08:01:32 +0000
Manifest next update:     Sat 16 May 2026 08:01:32 +0000
Files and hashes:         1: S-obEpfbw_S4HZEMJHbsgfw-lps.crl (hash: 2ycUQ4YitSPAHJL+1+0hUbLc8R70+WDzSkc2ze8TG90=)
                          2: SNlhQevvZx38hS-oDse5owlAEIQ.roa (hash: 1KArQ1IMqF7C3d1s3h8r45tchrjeJSzFxFsM5xeyIkM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 08:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:a7:af:9d:37:52:85:05:76:48:23:80:66:a5:54:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
        Validity
            Not Before: May 15 08:01:32 2026 GMT
            Not After : May 16 08:01:32 2026 GMT
        Subject: CN=0fcd0f1390c7e9e8a51e7b5a2e666c01a8576e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9d:e3:8d:d7:ce:7b:d6:e9:b9:ed:a1:ab:77:
                    82:ce:95:63:12:db:0b:14:30:fc:76:c0:a2:c3:35:
                    c1:49:ed:80:ad:35:3b:9a:56:f0:77:60:80:95:80:
                    cc:c5:22:98:e6:d9:b7:15:c1:e0:d9:c7:79:0a:3c:
                    3c:97:a0:ef:dc:3a:d5:e8:00:a1:3b:ed:b8:87:9c:
                    8c:1f:de:35:b3:84:70:1a:8a:fa:a1:82:47:37:ff:
                    39:b1:29:94:d2:e1:f9:8d:d8:2e:44:fe:c9:39:65:
                    a5:a1:b2:fa:7d:f2:68:ef:fd:1f:fe:86:c5:90:ba:
                    e1:10:89:c3:88:34:92:35:f8:e7:d0:43:e0:47:24:
                    07:5f:ee:b3:73:e8:d2:36:61:b5:65:f9:d9:e3:0e:
                    24:38:e8:ee:ce:a3:f0:ec:a2:25:88:8b:72:da:79:
                    c6:0c:fb:68:62:47:dd:d6:e3:ba:39:63:0c:e2:37:
                    6f:53:5a:1a:2a:9d:5e:db:6a:32:d4:68:fd:84:85:
                    45:a0:58:9a:c6:fc:93:a8:fb:fc:1b:d5:b5:7b:a0:
                    b9:3d:e0:51:f5:1c:04:c3:c9:2f:6c:45:e4:f8:39:
                    1b:13:9f:ce:47:a6:21:9b:e7:83:34:89:58:d8:5e:
                    a7:75:82:9d:99:1b:cc:64:26:0b:d7:18:90:0c:d3:
                    0d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:CD:0F:13:90:C7:E9:E8:A5:1E:7B:5A:2E:66:6C:01:A8:57:6E:23
            X509v3 Authority Key Identifier:
                keyid:4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:34:65:17:7f:84:b3:7a:8e:51:e6:46:29:2d:b2:4e:2c:8b:
         be:eb:85:b4:e1:60:1d:2f:79:c0:54:bd:c0:e6:77:08:7e:2e:
         dd:e6:72:cf:f2:11:2d:3c:94:ce:05:bf:32:08:f4:08:36:49:
         65:b8:5c:1c:bb:ad:a3:a8:32:29:a8:22:bd:88:52:4c:af:8e:
         7c:b6:c1:0f:95:9d:5f:f2:5e:26:5f:f2:3a:ad:5a:d1:bb:83:
         35:18:a2:d9:f0:ab:3a:e2:1f:88:26:1c:0b:52:80:76:58:97:
         89:a4:5c:bd:a9:5a:b3:17:1a:de:90:d5:08:a2:43:65:dd:29:
         67:56:ed:89:6b:e3:6f:01:cb:99:67:64:75:b9:0e:c1:a9:de:
         c0:82:ac:c0:75:51:04:3d:26:f8:bb:c8:cb:0e:fe:39:e9:44:
         97:b7:e5:e1:ec:ca:16:0c:76:19:fe:25:a3:68:42:7b:5e:0f:
         7f:ea:0c:73:9e:27:32:1b:0e:cb:50:7e:55:f4:3c:56:63:10:
         15:59:9a:f5:71:7f:51:18:83:01:39:f4:f4:85:70:9a:d5:49:
         07:2a:4b:e1:26:22:b2:16:4c:b0:24:50:fe:e3:26:55:b0:7f:
         6f:a5:72:d2:cf:19:be:a4:ab:88:11:a6:d4:f3:9b:65:bc:30:
         1f:78:6f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:38:04 2026 by rpki-client