Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
File:                     4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft (raw, json)
Hash identifier:          b47H47LYo5DUtRdmVL2kA2+gyW1uXoeoLI9erMdfphk=
Subject key identifier:   BE:2B:09:F8:75:F5:CB:CE:3F:9A:F3:36:D6:15:BB:43:8F:B7:CB:DF
Authority key identifier: E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7
Certificate issuer:       /CN=e19f6151a347c7922ac7cf469925344330d724f7
Certificate serial:       019E314E721F5E93A09D562404740F5CF573
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
Manifest number:          1640
Signing time:             Sat 16 May 2026 15:01:25 +0000
Manifest this update:     Sat 16 May 2026 15:01:25 +0000
Manifest next update:     Sun 17 May 2026 15:01:25 +0000
Files and hashes:         1: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl (hash: zAfD0bAawtxQ13k2X3HulyjXZtjxmyPF0b7VZQH4Xbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4e:72:1f:5e:93:a0:9d:56:24:04:74:0f:5c:f5:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e19f6151a347c7922ac7cf469925344330d724f7
        Validity
            Not Before: May 16 15:01:25 2026 GMT
            Not After : May 17 15:01:25 2026 GMT
        Subject: CN=be2b09f875f5cbce3f9af336d615bb438fb7cbdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f7:d9:c5:45:42:a3:82:a8:54:2b:d3:be:01:
                    f4:3a:be:3d:0d:89:77:8c:6f:bb:e5:1f:dd:a6:dc:
                    5d:ab:7e:fc:63:22:b6:c8:fc:89:3f:ba:1e:52:ae:
                    ad:29:e0:e4:c1:e2:39:66:6e:d0:65:f6:a7:df:b8:
                    74:ef:43:f8:48:c3:a0:ab:be:e4:c0:97:6d:8e:8a:
                    40:77:18:26:25:87:52:32:aa:58:79:82:58:ed:80:
                    f7:1d:80:61:59:0d:f1:88:c3:77:54:4c:cd:2a:4d:
                    3f:78:98:f0:9d:fe:68:05:a6:87:e2:8f:08:6e:bf:
                    20:69:5e:01:d8:4f:9c:78:1d:c8:58:1a:f6:5e:44:
                    87:42:fc:aa:92:2f:51:35:fc:6e:36:1c:f2:1d:51:
                    33:47:c4:e2:25:21:24:90:65:29:c3:1d:7b:d3:97:
                    78:a5:86:79:b8:0f:d2:06:76:45:a1:79:ac:93:1c:
                    8f:87:29:81:ad:8b:9c:3f:79:33:0b:9f:2e:7e:c4:
                    6a:b1:bb:c0:5f:18:32:e2:88:f1:63:21:e4:de:44:
                    55:c4:2e:50:78:d6:09:8b:1b:6e:57:09:bc:70:06:
                    90:96:9e:57:1d:60:40:56:69:18:5a:95:e2:24:81:
                    55:52:c8:64:a3:24:a0:00:2f:8f:54:67:f9:19:18:
                    01:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:2B:09:F8:75:F5:CB:CE:3F:9A:F3:36:D6:15:BB:43:8F:B7:CB:DF
            X509v3 Authority Key Identifier:
                keyid:E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:f7:ce:b2:75:35:2d:53:f3:27:78:6f:87:82:0b:38:a3:21:
         b6:72:72:92:57:b1:6c:35:f7:e0:66:2b:2f:81:66:c5:be:34:
         70:99:61:32:29:03:e9:01:df:ba:c1:6c:6a:f5:6e:ac:c7:c8:
         e5:60:66:21:42:a4:b8:e3:6c:01:ed:1c:09:f0:4c:e8:3e:9d:
         cb:b2:6f:9c:d0:11:a8:3e:b9:2a:63:4b:19:10:4e:e5:87:ed:
         ed:bd:29:3a:8b:f8:8f:76:e3:97:69:59:0c:69:01:da:48:4b:
         ac:9d:68:29:af:c9:f5:43:2d:80:65:27:56:2f:dc:16:e6:e7:
         c5:4b:d7:92:37:65:d7:d1:25:25:d1:71:3c:e8:28:d8:b4:f7:
         a4:d8:23:e8:56:e4:c5:7b:04:3c:0e:9c:2d:a1:c5:63:4c:97:
         66:0c:25:01:0d:01:8d:a8:79:4c:63:32:af:fd:a7:a1:a4:5f:
         b1:b9:06:18:be:69:37:b2:46:39:ac:8a:a1:66:ad:06:e6:a9:
         cc:e1:19:53:28:cd:4d:2a:61:a0:12:9a:cf:21:07:9f:19:4a:
         55:7d:6c:dc:1f:49:35:70:36:ea:8d:3f:62:f8:51:79:fd:9d:
         a6:28:74:e0:f0:ea:1e:2d:07:ec:0b:0f:45:6b:a5:59:6e:f6:
         c4:b9:8e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:40:51 2026 by rpki-client