Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
File:                     cVOwKU08jbFTBqsQnVBtp0rnCXk.mft (raw, json)
Hash identifier:          iaUfvYthBg4kc1subzp1ZkTPYlVy71WThrHAgezFg/A=
Subject key identifier:   64:1E:77:08:05:F8:3F:77:33:21:1D:DA:91:59:A3:51:26:B9:4F:5B
Authority key identifier: 71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
Certificate issuer:       /CN=7153b0294d3c8db15306ab109d506da74ae70979
Certificate serial:       019E2A7065F9B0F1BEC80F3092AB959F504A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
Manifest number:          190D
Signing time:             Fri 15 May 2026 07:01:09 +0000
Manifest this update:     Fri 15 May 2026 07:01:09 +0000
Manifest next update:     Sat 16 May 2026 07:01:09 +0000
Files and hashes:         1: cVOwKU08jbFTBqsQnVBtp0rnCXk.crl (hash: 8LcRJR6lq0pz6dad8gVoDpZ89ioHuUZt74/JSFAawko=)
                          2: uA7Vx2C904r9TfjpNMf_38HK6tA.roa (hash: mh6KzvsWQ7ay62shUSjJavZVXDITnNYoJN+fQex29Ro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:70:65:f9:b0:f1:be:c8:0f:30:92:ab:95:9f:50:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7153b0294d3c8db15306ab109d506da74ae70979
        Validity
            Not Before: May 15 07:01:09 2026 GMT
            Not After : May 16 07:01:09 2026 GMT
        Subject: CN=641e770805f83f7733211dda9159a35126b94f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:11:e8:10:1e:16:88:5f:de:ff:3c:a7:71:dc:
                    1e:dd:ce:50:4a:82:5a:25:fe:66:17:c6:19:1a:08:
                    30:a6:50:36:86:a3:d9:d6:92:95:ce:8d:8b:25:4b:
                    1a:3e:9a:12:ea:8a:cf:e8:ad:2a:de:a9:11:cc:62:
                    17:b7:e7:79:bb:af:59:e2:f7:5a:c6:49:a4:72:89:
                    48:b2:5e:60:85:11:9b:9e:67:16:bf:ef:9a:8b:0e:
                    b9:11:88:f0:5e:12:48:8f:69:6d:1a:d5:b9:10:ee:
                    47:52:aa:f4:0e:f9:09:0c:07:a0:d4:24:36:3d:44:
                    1a:fc:6c:11:3f:90:b9:c7:0c:4e:92:dd:44:c0:5a:
                    21:a5:24:5f:b8:d1:a4:23:3b:b0:1d:16:20:af:d8:
                    cc:d8:04:52:ae:8e:10:a3:64:5c:24:2b:8a:37:c9:
                    f4:2f:29:8b:92:fe:71:1b:28:d7:ee:68:cc:36:ab:
                    52:a6:e7:29:22:f8:81:d1:7a:e1:fc:67:ea:be:e8:
                    85:e1:07:17:d7:1a:ee:4d:e3:ba:a2:21:29:10:d7:
                    de:bf:ff:49:db:a7:72:36:a8:6d:1a:28:c1:89:6a:
                    f2:26:06:87:8d:72:99:26:2d:be:ac:d2:cf:ed:b3:
                    f3:0f:de:e8:80:bb:99:67:ee:a4:25:74:3b:c4:6a:
                    88:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:1E:77:08:05:F8:3F:77:33:21:1D:DA:91:59:A3:51:26:B9:4F:5B
            X509v3 Authority Key Identifier:
                keyid:71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f2:13:e3:f1:71:bd:44:23:9a:22:56:ba:29:1e:a6:ad:b7:
         0e:40:1c:16:5a:9a:99:ed:6d:a1:19:a4:18:02:7b:7d:7d:ce:
         a3:b8:3a:9d:65:69:aa:75:27:cf:4f:d0:c8:6a:d4:1b:01:9e:
         c5:eb:dc:91:9b:39:11:b0:73:df:25:47:59:8b:20:e3:1a:62:
         79:83:66:87:65:81:d3:a1:48:50:59:d7:1a:e7:39:eb:00:52:
         77:99:86:c4:e7:27:47:00:21:47:ad:07:04:6d:2b:f8:70:c0:
         50:38:ab:32:d6:1f:23:d0:03:54:8b:33:3c:bc:57:b8:a6:ee:
         21:fc:7c:49:91:32:52:0d:49:67:1c:a9:d2:3b:66:5f:fc:92:
         4c:0b:27:4a:ed:6a:35:f3:e6:b0:d4:4c:e6:0d:41:01:41:32:
         ce:0a:1c:6e:c9:0f:5d:45:4b:b5:49:56:34:0b:44:2f:21:f4:
         96:fa:f9:69:50:d6:cc:4e:24:46:3a:b4:b8:b4:b2:4e:21:42:
         af:4b:0a:03:b9:41:39:87:57:bf:72:ad:e1:21:ca:93:35:a8:
         d6:f6:4b:ee:b8:b2:07:e5:7f:20:34:c6:f6:63:c2:26:1f:4f:
         b1:74:19:de:cb:8f:18:03:de:19:d4:86:93:cb:fe:27:de:3d:
         17:91:45:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 09:07:06 2026 by rpki-client