Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
File:                     A4uZY8lywdegPflvrSX2jr1PoUk.mft (raw, json)
Hash identifier:          GIgtBDs1eMfarlnA50RmEQT4atq1+HUPtIYgh7eJQAk=
Subject key identifier:   F5:CD:AF:82:BA:77:C5:73:7C:FB:0D:17:02:12:13:12:9E:FE:13:A4
Authority key identifier: 03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
Certificate issuer:       /CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Certificate serial:       019E2F5F6BEA15C10A462C6C918E7045EB23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
Manifest number:          1910
Signing time:             Sat 16 May 2026 06:00:43 +0000
Manifest this update:     Sat 16 May 2026 06:00:43 +0000
Manifest next update:     Sun 17 May 2026 06:00:43 +0000
Files and hashes:         1: A4uZY8lywdegPflvrSX2jr1PoUk.crl (hash: 7+BomcI8NIpzFrtDmvIkTe4jyCy1YJv+bM4qMz8vBbU=)
                          2: swB-_KyWrdCTLsFeJA5Bb0yEuQw.roa (hash: Xe4yfVJ7GclnsKO5T3vlkkQQQKjDz34ASisy6nJh1ys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 06:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:5f:6b:ea:15:c1:0a:46:2c:6c:91:8e:70:45:eb:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
        Validity
            Not Before: May 16 06:00:43 2026 GMT
            Not After : May 17 06:00:43 2026 GMT
        Subject: CN=f5cdaf82ba77c5737cfb0d17021213129efe13a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5e:23:35:fb:d8:fb:a7:68:0e:1c:37:49:0f:
                    36:6d:9e:95:0d:cf:c8:38:ab:4f:eb:81:a5:49:d8:
                    ff:b5:89:93:e9:56:f0:a6:88:3c:71:a9:7a:ce:9f:
                    a9:73:d8:94:cd:21:64:30:f1:f4:a1:f4:58:fc:25:
                    5b:31:7d:5e:f6:b4:c0:29:a7:4f:11:50:87:f9:45:
                    17:91:a2:86:50:24:b8:1c:10:85:a0:1a:d0:94:b9:
                    ba:d6:37:cc:1a:db:0e:6b:1b:44:fb:7b:78:4e:dc:
                    a3:aa:e0:8a:3a:fe:a2:8e:3c:50:96:d2:34:de:2b:
                    e3:3f:8e:41:68:fc:22:93:f8:de:03:3b:c4:91:71:
                    27:b6:03:51:54:61:a0:e0:97:48:b1:f2:22:a3:a8:
                    08:4a:dc:c8:a0:64:e3:65:60:9e:59:d6:14:f3:f4:
                    0c:e7:68:80:1c:d6:12:ac:7d:c2:61:73:aa:fe:3f:
                    9e:12:2a:77:44:f4:e0:d4:67:0d:df:c7:54:db:76:
                    58:31:cc:03:91:be:f3:e1:75:4a:a9:c3:5a:e9:7c:
                    e7:a9:c6:4f:ed:43:8d:bf:f0:a0:e6:ca:84:20:20:
                    1f:b1:ab:01:4e:02:91:f4:d1:1d:fd:fd:b8:ae:af:
                    ee:85:cf:b3:2c:6c:03:b6:34:d0:c6:31:16:99:df:
                    83:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CD:AF:82:BA:77:C5:73:7C:FB:0D:17:02:12:13:12:9E:FE:13:A4
            X509v3 Authority Key Identifier:
                keyid:03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:10:1e:bf:aa:d6:41:13:64:1f:e6:d8:29:46:a4:7a:da:f1:
         24:b6:f6:88:a0:a4:f0:d5:39:b0:2b:54:da:bb:24:a7:03:d3:
         ac:b3:a8:3d:f5:13:f2:63:0d:ac:43:41:93:b0:d1:60:3e:ea:
         35:be:31:2a:5d:35:a3:44:ec:4f:35:fb:35:b4:7e:11:a9:78:
         1b:74:81:87:bd:5e:de:c0:b4:f4:23:0d:83:7d:bf:c6:50:f3:
         90:17:8e:39:5c:b6:10:1c:8f:e3:27:ca:d3:8b:28:57:a7:cd:
         55:bd:1b:c6:78:63:45:b2:85:08:c3:ce:d6:6f:24:f2:ee:e1:
         21:57:6a:67:10:ab:90:76:db:4f:f0:64:67:3d:94:2f:03:7e:
         d6:14:df:06:ce:8e:ed:d4:4f:8f:93:c0:0d:f8:b1:08:a9:03:
         a9:cc:92:44:b8:4c:f0:f1:f1:2b:74:a9:05:92:54:1c:b6:2e:
         d4:d2:d4:9e:a5:69:b3:a3:fc:aa:b5:78:d2:8a:d8:2b:84:b0:
         c8:bb:de:39:c5:56:77:f9:df:c4:93:70:40:8f:5b:c6:17:6c:
         18:1b:47:1f:7f:b0:8e:ed:19:00:45:43:b1:7f:7f:56:10:a3:
         f5:f8:4e:cd:5c:12:54:19:0c:09:a7:7b:f9:4a:6b:6d:6c:47:
         66:b7:bc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:26 2026 by rpki-client