Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
File:                     2n_WDMjnu2KTIE8woibgCHUksLU.mft (raw, json)
Hash identifier:          m4VLe+nlY75seNgN7oOsK+Ui/UZrj3tsZvy9qDaCjck=
Subject key identifier:   3D:98:52:13:F3:4C:23:71:12:42:D3:A3:62:7C:A8:ED:71:6D:FD:40
Authority key identifier: DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5
Certificate issuer:       /CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
Certificate serial:       019E300583DF6125BEA2EBCEEB9FD6FFD651
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
Manifest number:          190B
Signing time:             Sat 16 May 2026 09:02:08 +0000
Manifest this update:     Sat 16 May 2026 09:02:08 +0000
Manifest next update:     Sun 17 May 2026 09:02:08 +0000
Files and hashes:         1: 2n_WDMjnu2KTIE8woibgCHUksLU.crl (hash: PSqupRM288Vv3RJ9V2IBt+saQ2J7skCLpMUUFT+DLzA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:05:83:df:61:25:be:a2:eb:ce:eb:9f:d6:ff:d6:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
        Validity
            Not Before: May 16 09:02:08 2026 GMT
            Not After : May 17 09:02:08 2026 GMT
        Subject: CN=3d985213f34c23711242d3a3627ca8ed716dfd40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fd:a1:d8:35:53:04:a2:ee:fa:e4:41:2a:4c:
                    74:d1:e4:9d:1e:90:46:c6:09:ff:5b:8e:8b:ba:54:
                    fe:f9:26:53:94:22:3f:99:7f:8c:ff:68:f5:54:86:
                    84:c0:8e:d6:3e:78:ab:ac:b5:e6:47:ea:56:80:52:
                    54:fe:dc:c2:46:3c:35:51:96:a3:12:2f:58:a6:19:
                    a2:e7:82:86:e4:1a:9f:93:bb:95:a8:a9:ae:3b:2f:
                    3e:1f:c0:d3:e2:43:54:75:e2:cf:95:4b:7f:58:37:
                    37:94:47:c4:20:85:7c:e0:e7:4e:8f:95:f2:fd:8d:
                    80:71:bf:5b:49:ff:d5:8c:0d:b8:91:eb:81:58:90:
                    ad:36:e2:12:72:f1:70:e6:c3:92:d6:43:99:ac:04:
                    09:da:36:de:82:32:c3:98:49:2d:35:7b:04:cd:3a:
                    44:f8:c0:36:d7:83:68:77:88:c8:b4:97:93:aa:99:
                    2e:8b:c9:a8:1e:ed:78:09:42:28:77:e7:4b:38:f7:
                    05:7a:ce:f0:c2:e0:5a:23:6d:82:dc:57:7d:93:0b:
                    f3:b0:b9:7f:71:0d:8b:6e:be:20:9f:39:20:2a:b8:
                    40:df:3d:38:66:6c:12:07:8a:35:59:01:76:c9:ca:
                    63:79:da:71:70:8a:42:07:7f:b7:bf:08:44:65:1a:
                    4c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:98:52:13:F3:4C:23:71:12:42:D3:A3:62:7C:A8:ED:71:6D:FD:40
            X509v3 Authority Key Identifier:
                keyid:DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:9f:53:47:6c:30:49:9b:ea:16:50:50:40:5a:8b:80:98:94:
         fd:f1:29:6a:d2:f4:c1:78:7c:74:7b:0b:d2:e2:4b:21:5f:f3:
         ec:36:be:e2:3a:a1:df:33:da:b7:7b:15:e1:29:4e:4a:a1:05:
         d2:9e:cd:3a:0c:b0:62:f9:7c:ac:b2:71:4a:48:aa:c0:da:88:
         04:cc:b6:cb:05:2e:6f:7a:c8:ed:fa:fc:ad:87:c7:87:40:76:
         3b:23:7c:4f:0d:f9:ac:c8:c8:b8:66:41:f3:95:40:fa:2a:fc:
         35:90:55:62:f8:77:6a:f3:f6:1a:a3:4e:b9:a9:8f:9f:93:1b:
         98:21:3d:0a:6e:a4:2b:47:e2:ea:b1:03:91:da:c5:98:19:48:
         5e:d3:6a:56:74:e8:5d:1d:15:13:f1:a4:9c:ca:fc:56:fa:a5:
         f1:1b:9c:9e:63:b7:c1:a5:07:50:e6:5c:e6:e2:80:c8:fa:12:
         8b:e0:40:1e:b2:b6:e3:43:11:c9:35:a1:a9:1f:5c:92:f0:f4:
         f3:b0:42:63:59:55:1d:36:de:92:c4:03:60:a5:3a:ad:dd:97:
         f4:98:29:8e:cf:ef:61:00:92:0f:91:e7:18:c9:60:83:48:9e:
         25:2d:19:4c:2b:b9:e0:c3:b3:77:f9:40:1f:f4:bc:61:7b:51:
         d6:ea:0e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:36 2026 by rpki-client