Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
File:                     CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft (raw, json)
Hash identifier:          hqyC5oyRvYO4fljodLpXqWMOOUSoqN/sMKW2vIfui/A=
Subject key identifier:   A1:88:EC:42:1E:30:EA:F8:01:D2:7D:6D:B1:FB:70:E3:EB:FB:63:7E
Authority key identifier: 09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
Certificate issuer:       /CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Certificate serial:       019E31177718316FF985253C46B15832B5DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
Manifest number:          190F
Signing time:             Sat 16 May 2026 14:01:21 +0000
Manifest this update:     Sat 16 May 2026 14:01:21 +0000
Manifest next update:     Sun 17 May 2026 14:01:21 +0000
Files and hashes:         1: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl (hash: vEP8psDgJHAOjy/1i2wCF6y+6JoVeMWVZTQRG2C42tg=)
                          2: WnQNBeJ77W1lWNnHWWSvM1zW9Ss.roa (hash: 4WNmsHvXiTbK61q93ojoVESn4x/SoVpSfuMXeeNjBw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:77:18:31:6f:f9:85:25:3c:46:b1:58:32:b5:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
        Validity
            Not Before: May 16 14:01:21 2026 GMT
            Not After : May 17 14:01:21 2026 GMT
        Subject: CN=a188ec421e30eaf801d27d6db1fb70e3ebfb637e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8a:b5:8f:06:31:42:c5:b5:15:cf:d4:b7:77:
                    5a:a7:cd:74:ad:3c:72:1c:7e:1e:78:e9:16:5e:65:
                    a4:2c:7e:af:7d:22:45:4f:71:a7:43:26:e0:cb:d0:
                    88:0b:82:05:b2:e1:8c:7f:00:a9:28:18:e3:8e:f5:
                    fa:fe:06:93:13:05:38:a2:b9:1c:c5:07:92:c9:3e:
                    8e:38:5b:2c:81:5e:09:da:d6:7e:9c:3d:5f:ce:5c:
                    56:a7:93:ec:db:2e:43:00:dd:11:7e:d7:e5:e6:44:
                    42:b2:01:78:5f:85:bd:67:3f:80:9e:0c:ce:3d:ee:
                    b7:fe:e4:aa:66:81:c6:0c:2f:75:ae:56:64:6a:56:
                    c7:ad:fc:d8:b1:c0:d8:91:61:93:c9:60:cb:c6:ea:
                    55:1a:2d:d1:8a:50:bc:3d:b7:6d:1e:6f:d6:1d:0c:
                    4e:fa:fe:e8:aa:3f:58:8a:f8:4a:fa:50:4c:54:9c:
                    be:02:ea:4f:c2:92:1a:58:7a:57:ff:bd:85:09:36:
                    c2:df:05:82:1c:70:24:e6:d8:a4:79:57:1c:2d:a1:
                    25:9e:40:a0:c1:f0:eb:b1:d0:6f:c5:ec:91:68:81:
                    5d:f5:47:dd:46:58:0c:ec:b5:ef:a5:1b:85:8d:f5:
                    ca:77:fc:fa:99:27:fd:e8:e6:e7:35:28:b9:2a:e0:
                    df:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:88:EC:42:1E:30:EA:F8:01:D2:7D:6D:B1:FB:70:E3:EB:FB:63:7E
            X509v3 Authority Key Identifier:
                keyid:09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:14:b5:4c:8d:02:3c:ec:55:d2:75:c6:35:f1:c6:f7:92:0b:
         80:a5:c5:46:0c:7e:a9:08:0a:2b:09:94:d4:7b:ad:d3:73:dc:
         65:a2:d6:cd:b4:38:d0:86:3e:59:e3:59:a3:3c:b1:3f:6e:d6:
         83:b8:5e:5e:6d:0c:a8:a9:bb:54:86:ff:9b:fc:48:24:26:91:
         42:e8:c7:ae:60:19:a4:77:6b:20:a6:36:0d:6d:17:50:09:82:
         c7:d8:1f:d8:8b:2d:9e:a2:8f:28:d5:f6:5d:36:6d:b7:57:e8:
         60:c5:7a:43:ae:da:b7:fd:33:c3:b6:1d:84:d8:56:b8:aa:74:
         77:f1:d4:3e:de:73:ff:ce:69:31:2a:cc:91:32:6c:47:01:dd:
         50:fa:5f:32:2c:48:15:0b:b8:ec:36:c1:aa:79:62:e1:26:ee:
         21:3d:0c:fa:cc:13:79:f1:87:df:ad:22:1a:fa:13:fe:cf:5a:
         90:be:55:b4:c2:30:2f:0d:f8:da:95:28:8f:12:0c:8d:0e:00:
         8d:dc:52:b6:08:80:1e:e8:be:49:66:f2:01:39:cc:c7:7b:ec:
         80:ef:82:8e:26:f5:4a:5c:14:96:e1:97:26:e8:fe:10:99:65:
         9a:6e:7f:e9:8d:72:b2:8f:99:9c:e6:a3:15:2b:7a:31:a6:2d:
         38:d6:98:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:12:28 2026 by rpki-client