Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
File:                     1uDRyowZYcCxEoqlW4V5axIECpU.mft (raw, json)
Hash identifier:          CY8zylOOWjay34CKha2skat1NgNhITeMjv8DuWZqLas=
Subject key identifier:   7F:44:72:41:77:1B:CF:44:EA:F4:7A:01:04:4A:72:EA:00:35:60:47
Authority key identifier: D6:E0:D1:CA:8C:19:61:C0:B1:12:8A:A5:5B:85:79:6B:12:04:0A:95
Certificate issuer:       /CN=d6e0d1ca8c1961c0b1128aa55b85796b12040a95
Certificate serial:       019E314E7B0EC1AA3312C2DEE736DDEA91A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
Manifest number:          0E1B
Signing time:             Sat 16 May 2026 15:01:27 +0000
Manifest this update:     Sat 16 May 2026 15:01:27 +0000
Manifest next update:     Sun 17 May 2026 15:01:27 +0000
Files and hashes:         1: 1uDRyowZYcCxEoqlW4V5axIECpU.crl (hash: SdCdU2HU9Ie3bDCr9DewzzmbmJOwbEg+i1PaMZ6cbVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4e:7b:0e:c1:aa:33:12:c2:de:e7:36:dd:ea:91:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e0d1ca8c1961c0b1128aa55b85796b12040a95
        Validity
            Not Before: May 16 15:01:27 2026 GMT
            Not After : May 17 15:01:27 2026 GMT
        Subject: CN=7f447241771bcf44eaf47a01044a72ea00356047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:76:9f:36:b7:d6:d2:08:39:ba:6d:04:32:a5:
                    d7:a1:16:a5:0a:b7:c9:de:37:41:8a:c5:cc:6a:35:
                    9c:25:41:6a:40:53:98:57:ae:f9:d1:dc:fb:db:de:
                    53:2b:15:9c:85:66:00:eb:16:48:99:83:05:f1:f9:
                    7a:66:20:3a:b4:38:24:1c:5c:51:b9:70:5a:42:33:
                    ae:4c:f8:18:05:72:d4:0a:36:13:1e:cb:26:93:d4:
                    da:f9:df:c6:fa:0d:b4:ff:b2:0c:29:a7:61:56:d3:
                    18:07:dd:1c:a5:c1:f4:9e:2d:24:5b:7d:9d:f8:46:
                    6a:ea:c8:b4:2b:64:2a:59:7e:16:91:b7:84:e3:6d:
                    e4:d1:6f:80:80:1d:9c:67:c9:81:d8:40:71:d2:93:
                    21:59:4a:be:3b:40:7c:a7:e7:7d:5a:da:f9:66:6f:
                    2a:30:b9:b6:72:de:3d:ad:58:1e:1b:19:15:b1:9f:
                    41:d1:a8:ad:f8:01:3e:36:8f:eb:c9:be:cd:97:98:
                    e0:1b:13:68:79:a1:07:66:01:88:af:05:fd:14:5e:
                    16:89:14:ea:91:88:9d:f7:89:e0:e6:dd:24:00:ec:
                    e8:70:03:2a:96:a1:d8:6b:a8:3d:c7:bb:56:71:0f:
                    f5:69:6a:ae:97:a1:0b:94:b5:58:e8:65:07:20:1b:
                    25:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:44:72:41:77:1B:CF:44:EA:F4:7A:01:04:4A:72:EA:00:35:60:47
            X509v3 Authority Key Identifier:
                keyid:D6:E0:D1:CA:8C:19:61:C0:B1:12:8A:A5:5B:85:79:6B:12:04:0A:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:d4:e0:f0:64:5f:cc:d6:8f:17:03:20:97:a9:d3:a7:76:94:
         59:70:1e:6b:04:62:8d:88:e0:26:31:96:9c:b5:05:8b:75:27:
         89:01:82:2e:82:e2:fb:6d:55:0e:b9:71:84:89:1f:f2:04:29:
         89:de:8b:f3:6c:f5:d3:b0:ce:12:06:64:91:01:2f:05:d3:53:
         7e:81:6a:2a:84:d6:c1:38:db:55:5d:aa:42:12:6d:bd:4e:07:
         18:67:ac:ac:dc:1a:82:a0:ea:b9:58:51:0a:7b:58:52:1d:71:
         8e:d0:be:88:f3:62:49:93:63:96:e6:6c:f2:c5:12:08:54:ee:
         7d:8e:16:52:4c:30:09:fe:02:dd:6c:58:54:14:32:80:98:d8:
         81:84:28:93:40:3a:52:d4:5c:1a:0b:65:c4:7c:f5:e7:bf:b7:
         0d:f4:95:e5:a9:e4:58:37:4f:6c:45:b6:21:d1:77:2f:d2:34:
         3b:46:1e:74:b1:93:d8:ce:15:b6:a0:4c:c4:09:01:09:c0:3d:
         7d:17:a9:04:24:a2:b8:19:30:44:94:f8:b4:e1:8e:a6:dd:f4:
         e7:48:cf:eb:8d:91:11:59:ce:6f:37:5f:07:a1:0e:6b:4f:80:
         f3:b3:bd:fe:82:dc:e6:8c:9a:6e:27:e8:da:fa:67:55:26:0a:
         5d:cf:70:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:04 2026 by rpki-client