Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
File:                     1EggcpoPmr-2ysO1-WwnGY12ORs.mft (raw, json)
Hash identifier:          Md2hTTgPrV6XvKIOSy2apAhzL4gD87FQL6fUHpbXjds=
Subject key identifier:   F8:08:D0:2E:16:5E:B5:92:5E:6C:23:EE:21:F6:7F:F9:E9:56:6F:65
Authority key identifier: D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B
Certificate issuer:       /CN=d44820729a0f9abfb6cac3b5f96c27198d76391b
Certificate serial:       019E303B92EA41F3082F6DD21F2D763636DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
Manifest number:          190F
Signing time:             Sat 16 May 2026 10:01:10 +0000
Manifest this update:     Sat 16 May 2026 10:01:10 +0000
Manifest next update:     Sun 17 May 2026 10:01:10 +0000
Files and hashes:         1: 1EggcpoPmr-2ysO1-WwnGY12ORs.crl (hash: VE8oL6H/OB76qeD+RFsFf7Zcef/4tb0UkWMVR4i72yU=)
                          2: CbDZWAH-omIyip_WwmqNFzGEN6Q.roa (hash: JAGjJAojKoIa2rnuQE4G2jO7W0AL58snegAhZ+6Gung=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:92:ea:41:f3:08:2f:6d:d2:1f:2d:76:36:36:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44820729a0f9abfb6cac3b5f96c27198d76391b
        Validity
            Not Before: May 16 10:01:10 2026 GMT
            Not After : May 17 10:01:10 2026 GMT
        Subject: CN=f808d02e165eb5925e6c23ee21f67ff9e9566f65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:18:fc:ad:b8:a0:36:15:53:84:d8:77:7a:f4:
                    b1:56:f6:dc:d2:c1:3d:4d:90:b4:db:12:b4:d1:1f:
                    3c:a0:c3:3f:09:57:94:ea:69:03:1d:01:32:ad:e6:
                    e7:7b:ba:13:e1:2a:71:9b:67:06:50:c7:f2:a8:be:
                    cb:92:11:2b:ba:86:22:05:26:0a:51:64:cc:6a:ef:
                    1e:1b:ee:73:f6:eb:c2:32:85:12:46:9a:03:d6:41:
                    f2:14:d0:73:de:54:06:19:4d:ff:51:80:12:50:16:
                    1b:19:94:42:56:30:44:2c:18:01:b6:c2:8e:05:78:
                    f9:4c:10:d1:eb:c3:f5:16:0a:2e:3f:94:b4:d2:ed:
                    65:2d:6e:59:2f:21:31:4a:fa:23:87:59:78:ce:b1:
                    c6:2c:cb:1a:76:97:a8:c5:e6:be:bc:7f:f8:bd:c0:
                    5a:a9:1b:61:27:ad:56:9a:cc:63:ff:8a:b7:6b:e4:
                    ef:fd:f3:ec:d3:e6:e3:4e:16:e6:ab:b9:17:ac:88:
                    1d:bc:61:b4:03:89:17:29:2b:84:e4:38:51:ba:a1:
                    a5:69:ca:a5:9d:37:63:aa:5b:ca:20:e4:5e:77:23:
                    c8:d0:d0:2f:0d:06:a7:37:8d:52:a1:80:db:d9:0f:
                    74:62:18:fc:5f:7e:78:b4:28:96:8c:0f:30:5c:92:
                    64:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:08:D0:2E:16:5E:B5:92:5E:6C:23:EE:21:F6:7F:F9:E9:56:6F:65
            X509v3 Authority Key Identifier:
                keyid:D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f4:78:44:82:5d:5d:7e:cf:a1:da:c4:8a:52:9d:ef:95:72:
         b6:0f:46:82:e1:91:72:6f:82:01:38:78:7d:0f:fe:ca:96:74:
         f3:c6:88:c4:91:af:11:89:d7:a3:4a:dd:83:93:f3:cb:a5:c1:
         0f:36:aa:4e:fb:da:29:90:70:6a:6d:75:28:f3:79:a9:60:56:
         d9:be:52:1c:fa:29:1b:49:db:bb:63:60:6b:98:12:97:04:39:
         91:43:d6:d2:5e:e4:ea:a8:67:bb:ed:be:5c:84:58:98:f2:b9:
         07:66:00:e5:28:c6:ea:24:c0:88:bc:2c:99:22:a9:6d:77:cc:
         62:5b:b4:5c:05:06:86:c2:41:fb:53:69:05:18:c3:56:bc:94:
         cc:0a:bd:e0:a8:cb:db:70:d7:64:ce:2f:a5:0e:77:38:f4:8d:
         44:5a:f2:19:0f:7a:6e:40:35:ce:5f:5e:8a:7c:5b:4b:c3:f7:
         ac:ce:c2:b9:50:53:79:d5:b3:b7:2f:c6:97:53:24:e5:d3:90:
         99:a6:f2:1d:65:58:9c:70:03:ce:45:09:7e:ee:f7:c9:26:25:
         aa:b8:26:3d:75:61:e4:c7:39:db:38:35:eb:ab:3a:70:5f:19:
         34:a4:ba:09:ba:1e:8c:d8:b9:7f:a8:74:2a:77:31:fb:80:a4:
         60:6a:2f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:56:45 2026 by rpki-client