Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
File:                     7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft (raw, json)
Hash identifier:          T6s7UycbVb5uIPruFgX5aO13S6WjpoX9elaojr6Wbqk=
Subject key identifier:   C3:E6:2E:F9:82:F3:69:6C:46:33:80:92:8F:99:3A:83:77:47:21:40
Authority key identifier: ED:74:07:02:24:7A:2F:EA:CC:DE:BE:13:A9:84:2C:FF:D3:B4:0C:96
Certificate issuer:       /CN=ed740702247a2feaccdebe13a9842cffd3b40c96
Certificate serial:       019E2F5F5C2F03C19CE423FD75AD9F1DEA7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
Manifest number:          190D
Signing time:             Sat 16 May 2026 06:00:39 +0000
Manifest this update:     Sat 16 May 2026 06:00:39 +0000
Manifest next update:     Sun 17 May 2026 06:00:39 +0000
Files and hashes:         1: 7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl (hash: LjYF9H/PJ3pxXbVpleTkjfjAN6bPUEJY1uSnEDaOO64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:5f:5c:2f:03:c1:9c:e4:23:fd:75:ad:9f:1d:ea:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed740702247a2feaccdebe13a9842cffd3b40c96
        Validity
            Not Before: May 16 06:00:39 2026 GMT
            Not After : May 17 06:00:39 2026 GMT
        Subject: CN=c3e62ef982f3696c463380928f993a8377472140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1a:f3:ae:e8:17:c7:e2:c8:f1:10:20:ee:12:
                    b1:c3:56:1c:06:2c:19:30:77:3c:a2:73:b4:0b:cf:
                    e9:a6:2d:09:41:58:92:79:c4:88:f1:54:32:59:b6:
                    89:c3:46:11:77:06:0e:8c:c5:19:4f:d1:ed:57:9e:
                    24:20:64:95:d6:da:44:7f:cb:5e:58:9c:0a:79:0b:
                    f5:25:22:c6:8e:f3:da:63:38:56:1b:4c:d1:68:ca:
                    46:49:7c:b3:ae:d0:e7:c8:82:3a:00:d8:61:fe:1c:
                    2f:bc:7e:fd:cc:e8:be:18:12:e0:64:a2:d7:95:4e:
                    45:fa:8b:03:14:bf:49:33:b5:17:51:4d:3c:bc:94:
                    02:ec:79:81:4c:5b:20:68:b2:7e:86:04:05:b1:c1:
                    5a:f1:16:fc:df:b3:d0:69:47:09:39:e1:16:d8:a1:
                    2a:bb:4a:85:7a:4e:4d:eb:27:4d:2c:f2:10:e6:04:
                    3d:fe:c7:72:19:64:dd:fe:86:c3:4f:39:17:91:db:
                    08:6e:1b:68:07:ad:0b:3d:b7:8a:07:76:35:a3:b8:
                    1e:8f:ae:e2:e9:5a:14:92:8d:8c:aa:5d:d5:fe:56:
                    48:5e:f9:7d:6b:06:8b:34:e8:cb:27:75:4c:07:42:
                    43:d5:d0:06:c5:a3:97:64:85:a6:94:a7:3b:68:f8:
                    5b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E6:2E:F9:82:F3:69:6C:46:33:80:92:8F:99:3A:83:77:47:21:40
            X509v3 Authority Key Identifier:
                keyid:ED:74:07:02:24:7A:2F:EA:CC:DE:BE:13:A9:84:2C:FF:D3:B4:0C:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:65:ac:c5:d2:c6:90:36:f7:6a:0d:91:af:fa:3d:87:44:8a:
         45:cf:9c:7a:2d:8a:ce:2f:ce:8e:61:4c:ed:ca:11:20:71:dd:
         08:b2:ea:0e:df:5f:41:94:3f:ad:46:37:b0:d5:71:b9:bb:cc:
         0b:42:b2:d0:6f:5c:82:dd:e0:ce:92:04:9e:43:cc:ba:c3:98:
         a4:77:36:b6:28:ee:c7:ea:39:b2:5d:e2:c5:d8:e1:a6:73:2f:
         50:36:42:58:42:99:d0:8f:47:e2:3c:b5:12:b9:5d:4d:a6:44:
         c5:01:45:af:22:2a:3e:05:32:91:3f:dc:0c:3e:d6:57:d2:82:
         3e:e7:05:ee:66:c4:14:37:5f:97:b8:9c:44:c8:d4:8b:67:79:
         5b:10:b5:f3:6c:c4:0d:c8:2b:e3:e6:d9:18:d5:28:76:f6:e8:
         a1:d6:f9:f3:0b:b7:9e:cd:dc:81:06:45:8d:a6:70:37:8a:30:
         05:71:1a:06:e2:c3:bf:fd:c0:8e:b4:b5:b2:6d:aa:cf:56:74:
         84:50:b4:6d:f1:d7:b2:fc:cb:31:7f:87:09:e3:e8:b3:2b:43:
         c6:0d:be:c8:76:25:1f:25:1b:99:dc:9d:45:4f:1d:35:4a:78:
         10:fb:59:cb:13:60:58:53:91:ba:e2:13:b1:48:22:0d:6a:d9:
         ab:f3:a2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:04 2026 by rpki-client