Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft
File:                     4Uk5uDWV4u-2lFa83yOGalB59vU.mft (raw, json)
Hash identifier:          lea0wZR02OPpuragjRhhFOWVr/vgd9hrROemR4I45Bg=
Subject key identifier:   23:0E:C9:67:3E:1C:CA:F8:D3:9A:62:83:B6:1C:6C:69:9F:41:BC:95
Authority key identifier: E1:49:39:B8:35:95:E2:EF:B6:94:56:BC:DF:23:86:6A:50:79:F6:F5
Certificate issuer:       /CN=e14939b83595e2efb69456bcdf23866a5079f6f5
Certificate serial:       019E2F96995EF52C16D835FB9C1525708FDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft
Manifest number:          1912
Signing time:             Sat 16 May 2026 07:00:59 +0000
Manifest this update:     Sat 16 May 2026 07:00:59 +0000
Manifest next update:     Sun 17 May 2026 07:00:59 +0000
Files and hashes:         1: 4Uk5uDWV4u-2lFa83yOGalB59vU.crl (hash: OPJjnwdPkVm5QXBGISnPTPVA+0xav9BlnDO/CM72uqE=)
                          2: AFD3LN3IxTOKfmEYuxEuR7wUjPc.roa (hash: 3fx4frrKprBnR59Ru38Fa8S145quoaM9IAirxeo8gyc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:96:99:5e:f5:2c:16:d8:35:fb:9c:15:25:70:8f:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14939b83595e2efb69456bcdf23866a5079f6f5
        Validity
            Not Before: May 16 07:00:59 2026 GMT
            Not After : May 17 07:00:59 2026 GMT
        Subject: CN=230ec9673e1ccaf8d39a6283b61c6c699f41bc95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b4:db:ad:8d:27:cc:4f:d9:eb:2d:22:6b:15:
                    54:7b:d9:21:45:de:a9:0a:ec:c3:49:cd:87:ba:85:
                    22:79:0c:f9:cb:b7:38:a6:49:7f:cf:61:4e:62:a8:
                    65:7f:00:19:93:86:58:f6:76:9a:eb:63:f8:91:8a:
                    1f:f4:9d:a3:fc:4f:b7:63:41:89:6f:f7:82:47:61:
                    5e:55:71:33:2a:0a:3d:d2:da:fc:39:6e:b5:0d:75:
                    41:93:37:d2:72:ad:f1:a8:d2:e6:c4:90:bb:51:4c:
                    8e:1e:e2:ed:0d:e2:cd:a1:fc:d9:30:19:23:51:21:
                    4d:e7:fa:0e:c4:f2:a0:fa:af:72:11:56:75:69:ee:
                    8b:7d:2d:c2:af:dd:6c:ff:ea:ab:3e:8e:d1:63:66:
                    06:09:7f:26:c4:f1:e7:00:56:f3:39:b2:bd:66:ce:
                    a7:a3:60:b3:17:c0:41:45:23:ce:79:a2:0e:21:2e:
                    37:e0:d8:14:7c:54:df:c7:bc:04:89:73:a7:b5:a9:
                    1f:b7:9b:02:2e:9a:22:33:7d:c3:80:87:8a:0b:d3:
                    42:d5:8c:25:18:9e:d6:be:19:a1:ed:52:7c:64:8b:
                    90:c5:59:47:6f:78:9b:bc:4f:e7:c0:2c:54:21:af:
                    1b:9b:c7:9e:ed:f4:23:6d:1e:c7:9b:6c:56:f1:69:
                    53:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:0E:C9:67:3E:1C:CA:F8:D3:9A:62:83:B6:1C:6C:69:9F:41:BC:95
            X509v3 Authority Key Identifier:
                keyid:E1:49:39:B8:35:95:E2:EF:B6:94:56:BC:DF:23:86:6A:50:79:F6:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:da:82:b0:96:a6:90:57:b4:7d:81:ad:a2:e1:79:9e:2d:82:
         0b:b5:bc:a0:d6:75:74:83:5e:85:69:26:16:ad:e5:ac:97:69:
         09:78:07:71:37:28:4e:62:e2:93:d8:75:d0:4e:ff:53:97:b2:
         a2:93:3b:78:54:fd:21:fc:72:55:ec:16:4b:c4:d5:a6:98:5e:
         66:be:f2:ab:7c:29:a7:f3:a2:f7:55:04:ea:08:0b:7f:50:68:
         c4:31:79:b9:9f:38:99:40:e4:b5:0d:49:f8:2e:b6:c0:48:9d:
         6f:9a:c6:6c:05:e0:e3:a7:8c:98:e2:84:e5:df:9c:3a:5b:27:
         17:5c:07:01:8d:8f:c9:54:93:15:1c:df:7f:32:29:7b:2a:f4:
         c8:1d:ad:10:68:e7:d8:67:ce:3d:67:43:8f:ea:53:ea:e5:e2:
         e1:92:74:6c:cf:e5:d7:21:ff:47:9a:c2:f0:87:19:91:2d:3d:
         51:09:49:87:6f:e9:9f:22:d1:f5:6c:dd:00:54:49:21:c4:f4:
         6e:6f:73:76:f7:d0:ce:1a:13:d3:be:f0:f2:8c:cf:06:c3:62:
         dc:70:b9:e9:2f:fc:f6:d7:fe:81:d0:84:bb:20:a9:f0:af:cd:
         67:27:30:3a:e0:89:90:33:a8:b7:8f:16:15:ed:e9:d3:65:77:
         8b:8b:22:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:01 2026 by rpki-client