Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft
File:                     TrwmqzTIMZdDMt05mo5W6aqbe4U.mft (raw, json)
Hash identifier:          rPWCSKEqupOvlTaSY+EsAyabLqIJQeaJkscgAZrlgdA=
Subject key identifier:   F0:92:04:20:76:5A:91:A9:A0:C7:A6:43:71:48:80:D7:FC:74:56:B7
Authority key identifier: 4E:BC:26:AB:34:C8:31:97:43:32:DD:39:9A:8E:56:E9:AA:9B:7B:85
Certificate issuer:       /CN=4ebc26ab34c831974332dd399a8e56e9aa9b7b85
Certificate serial:       019E995FAB035195425AA235070D8950C284
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TrwmqzTIMZdDMt05mo5W6aqbe4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft
Manifest number:          0283
Signing time:             Fri 05 Jun 2026 20:00:44 +0000
Manifest this update:     Fri 05 Jun 2026 20:00:44 +0000
Manifest next update:     Sat 06 Jun 2026 20:00:44 +0000
Files and hashes:         1: TrwmqzTIMZdDMt05mo5W6aqbe4U.crl (hash: DSTwrv78xBtM+JLZp98Im+wUdYTFtGfTia7fsBCWQ/E=)
                          2: zYL449gEhOrSRUOWk45-5w_QwxY.asa (hash: 2I3JzyYDlWOa37LiRrfqotSTSjqIyf07yQPMZe4sNg4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TrwmqzTIMZdDMt05mo5W6aqbe4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 17:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:99:5f:ab:03:51:95:42:5a:a2:35:07:0d:89:50:c2:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ebc26ab34c831974332dd399a8e56e9aa9b7b85
        Validity
            Not Before: Jun  5 20:00:44 2026 GMT
            Not After : Jun  6 20:00:44 2026 GMT
        Subject: CN=f0920420765a91a9a0c7a643714880d7fc7456b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b5:fe:44:64:9b:41:46:b0:b3:6b:7e:55:50:
                    f5:bd:bf:a2:e0:00:af:d1:9e:32:64:d6:3b:25:60:
                    18:64:9c:73:9b:26:40:29:ae:ff:f7:d9:ba:5f:f8:
                    b7:15:a4:9e:9f:39:a1:19:f0:75:94:8e:cd:3a:9a:
                    40:9d:04:38:7d:44:44:9b:94:4b:3a:e9:bd:48:f6:
                    1a:ac:99:5f:7f:94:04:20:2a:bd:75:16:a9:ef:90:
                    37:26:19:01:63:46:c6:ed:df:1d:99:77:30:66:8d:
                    80:c3:04:70:2e:04:29:de:9a:6f:44:75:fb:e2:24:
                    24:35:0b:ea:5c:21:66:ba:e2:9e:bd:ea:09:c7:ff:
                    1d:c8:5a:a1:5a:1a:99:80:96:cf:5d:78:73:26:ea:
                    29:b4:a5:57:40:92:e4:3b:e3:31:2a:ea:b3:5e:bc:
                    86:ab:1c:14:98:d6:ac:6c:62:aa:4a:b4:b7:91:4c:
                    8a:54:5e:7d:ac:c4:11:61:ee:9a:ab:d3:ad:96:b0:
                    62:e1:54:c6:d2:d0:93:47:fc:bc:41:f1:73:0f:b4:
                    c7:65:99:b1:e6:ba:2a:6a:e6:f6:a4:ba:d6:c3:95:
                    11:55:b4:85:88:6d:f1:77:4b:23:a4:ea:ef:b0:6d:
                    d8:92:1d:d5:51:5c:82:df:fb:a0:2b:69:2b:15:12:
                    dc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:92:04:20:76:5A:91:A9:A0:C7:A6:43:71:48:80:D7:FC:74:56:B7
            X509v3 Authority Key Identifier:
                keyid:4E:BC:26:AB:34:C8:31:97:43:32:DD:39:9A:8E:56:E9:AA:9B:7B:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TrwmqzTIMZdDMt05mo5W6aqbe4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:1b:5f:15:47:3a:aa:5a:91:f4:16:5a:7b:a2:f1:1d:fc:e2:
         ec:0e:d1:f6:6f:45:59:b9:7f:76:49:0c:b1:51:09:6f:98:96:
         41:d9:9e:81:c8:a0:02:2f:a8:8c:46:80:c2:80:5f:b8:1a:fd:
         fa:2d:4a:b1:0f:83:65:58:5b:b3:0f:73:4d:5e:3d:39:8e:c7:
         d4:42:0a:70:65:a3:c4:1f:9b:b9:12:3b:ac:f5:56:00:63:95:
         0e:62:84:ee:4f:c9:d5:df:d6:bc:3d:88:37:99:03:a6:50:04:
         9e:6d:12:73:90:09:4b:92:bd:f3:57:8a:bf:b3:d0:e2:63:b4:
         e0:43:69:49:c5:d8:dd:e1:c6:ce:f2:a4:7a:b2:5a:90:3e:02:
         90:3c:8a:93:04:7b:ae:56:6c:05:6d:0e:b2:1a:a9:83:43:3e:
         78:90:b3:dc:d8:56:6a:c7:2f:80:2a:4b:27:1b:9c:b3:e7:56:
         5b:76:88:d3:38:70:ec:c5:fe:32:29:54:6f:96:c8:3e:b9:00:
         39:21:b1:2c:2b:2e:00:aa:c5:36:bb:eb:6f:94:ef:89:23:0a:
         39:ca:d5:1c:2a:dd:a7:7e:2a:57:49:2b:82:89:44:22:7d:c2:
         a0:09:9c:20:6b:5e:c6:f4:a8:72:14:97:8a:05:72:d8:d5:96:
         af:d9:7d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:40:18 2026 by rpki-client