Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft
File:                     46iYuhJQyJicx22fi1PR28YrKJA.mft (raw, json)
Hash identifier:          XOIuw5y0wFecnIqNU2JWxvn8+l2u1kJ287ECJ3Ghmdc=
Subject key identifier:   D7:68:C9:32:A0:0F:88:10:42:F6:6D:0F:0C:23:86:CE:F5:11:97:5F
Authority key identifier: E3:A8:98:BA:12:50:C8:98:9C:C7:6D:9F:8B:53:D1:DB:C6:2B:28:90
Certificate issuer:       /CN=e3a898ba1250c8989cc76d9f8b53d1dbc62b2890
Certificate serial:       019E3117B085AAC042B410E88548A304783D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/46iYuhJQyJicx22fi1PR28YrKJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft
Manifest number:          0E69
Signing time:             Sat 16 May 2026 14:01:36 +0000
Manifest this update:     Sat 16 May 2026 14:01:36 +0000
Manifest next update:     Sun 17 May 2026 14:01:36 +0000
Files and hashes:         1: 46iYuhJQyJicx22fi1PR28YrKJA.crl (hash: xe6bmHuWS6F7MOMNzKQ6IVVb22v9MVMd860F2CDludk=)
                          2: nmFsMibkUkc4eLEyHsZSOh33hiM.roa (hash: UIbhcnO6tinapdLdEyBhk1W1C6XNYeMhFMwzbq1oLUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/46iYuhJQyJicx22fi1PR28YrKJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:b0:85:aa:c0:42:b4:10:e8:85:48:a3:04:78:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3a898ba1250c8989cc76d9f8b53d1dbc62b2890
        Validity
            Not Before: May 16 14:01:36 2026 GMT
            Not After : May 17 14:01:36 2026 GMT
        Subject: CN=d768c932a00f881042f66d0f0c2386cef511975f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ba:c7:18:83:e0:24:10:20:aa:e9:27:38:85:
                    1e:54:81:a2:55:d5:a0:5c:78:f7:25:fd:30:6d:56:
                    96:3a:28:f6:86:69:dd:3e:56:16:d9:88:92:92:2c:
                    96:12:2f:91:46:8d:de:69:6f:c1:3c:16:45:b5:6a:
                    ec:3b:bd:79:0e:f0:56:ed:a5:8e:14:bb:db:0a:3d:
                    57:bc:e9:0b:8c:b5:ad:de:e6:64:50:67:21:29:8b:
                    f3:88:a8:f3:29:43:18:a6:b4:17:4e:5c:f0:e5:33:
                    ae:0a:a3:4c:b2:a3:52:25:4a:4e:60:97:f4:64:c4:
                    bf:3d:6d:60:4f:47:42:8b:93:24:82:cb:24:2d:25:
                    50:77:05:e2:f7:bc:ca:1f:b0:31:01:eb:f4:c1:1d:
                    83:01:4c:e0:b7:33:9b:63:b1:0a:ff:4b:8a:bb:a1:
                    cc:db:cc:64:70:c5:96:94:2e:29:e9:82:42:77:0c:
                    57:b8:63:3c:2e:1a:14:a9:63:3a:6d:90:5d:fd:85:
                    44:89:97:67:1e:0e:c2:6b:50:66:eb:c5:44:43:00:
                    79:58:ce:70:12:cf:00:a8:b6:35:42:21:bc:02:1e:
                    61:85:6d:01:b9:3a:81:a3:ad:22:62:6d:d7:e0:17:
                    8b:72:75:26:d0:fa:29:77:c3:f0:82:66:3d:5c:4b:
                    99:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:68:C9:32:A0:0F:88:10:42:F6:6D:0F:0C:23:86:CE:F5:11:97:5F
            X509v3 Authority Key Identifier:
                keyid:E3:A8:98:BA:12:50:C8:98:9C:C7:6D:9F:8B:53:D1:DB:C6:2B:28:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46iYuhJQyJicx22fi1PR28YrKJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:e9:ad:11:48:b4:a8:b9:e4:65:10:ed:75:ef:67:eb:1d:2f:
         b9:0e:44:73:f3:c7:b9:c9:45:9c:39:70:a1:f8:13:40:4c:69:
         2b:d7:53:8b:a3:c9:06:d8:e2:d0:97:74:50:f8:97:30:64:f0:
         24:7f:8b:16:26:cc:57:41:9c:46:93:71:64:b9:61:03:46:df:
         13:07:2c:2b:ad:22:bc:b4:c8:de:37:94:d0:dd:73:c9:93:75:
         60:f1:92:3d:f2:ee:5e:c1:1c:66:25:86:64:a1:2d:f4:c2:14:
         6c:c1:78:3d:0b:3a:dd:67:54:3c:bc:2b:3a:35:b2:34:5a:02:
         35:28:cf:a9:0d:c1:6e:0f:87:b5:b6:3b:0a:58:e7:90:fe:54:
         c2:37:b2:02:26:31:1e:51:4b:2c:fd:6a:50:f0:af:59:35:d7:
         d3:bb:d3:a3:17:cd:90:7a:e8:97:ab:c2:73:26:af:12:03:e3:
         7d:b1:46:a2:6c:fa:fc:d5:07:8e:27:32:78:be:90:53:02:6b:
         f6:0b:bd:03:13:99:0a:ab:1d:8f:32:3c:2c:6c:6d:55:07:46:
         a9:57:64:5b:e8:cc:13:25:9d:6a:e9:84:f5:13:e0:77:cb:99:
         17:09:17:44:da:c6:a3:c7:f9:66:7b:a5:54:c1:3b:95:47:c9:
         dd:28:8f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:23:48 2026 by rpki-client