Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
File:                     CX4FUW_IeTQGhouBCePARLcCcWw.mft (raw, json)
Hash identifier:          lUW0QX/dvrIA0taBGnIp7iD1WJBnk/q4Kr24acNGN7U=
Subject key identifier:   86:C4:9F:AD:4B:AC:5C:7B:6F:19:73:AA:4B:9B:1E:3B:BC:54:5C:88
Authority key identifier: 09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
Certificate issuer:       /CN=097e05516fc8793406868b8109e3c044b702716c
Certificate serial:       019E30058BE0658F9782EAD1141A293C987D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
Manifest number:          1911
Signing time:             Sat 16 May 2026 09:02:10 +0000
Manifest this update:     Sat 16 May 2026 09:02:10 +0000
Manifest next update:     Sun 17 May 2026 09:02:10 +0000
Files and hashes:         1: CX4FUW_IeTQGhouBCePARLcCcWw.crl (hash: Fc9awAN2pNQlgzpJAvoVR6LDB9ikFMHvGmb8hadr1Rw=)
                          2: eh5UT6N-i9kmx7vR5P20UZhgNF8.roa (hash: lRNX0bzIDr2YwWBNK06CzH5DRudn1x/q4dYD7QozSeQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:05:8b:e0:65:8f:97:82:ea:d1:14:1a:29:3c:98:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097e05516fc8793406868b8109e3c044b702716c
        Validity
            Not Before: May 16 09:02:10 2026 GMT
            Not After : May 17 09:02:10 2026 GMT
        Subject: CN=86c49fad4bac5c7b6f1973aa4b9b1e3bbc545c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ee:08:7e:c7:a8:6f:37:5c:f7:68:e3:53:31:
                    51:00:ff:72:16:53:9e:5f:5a:70:dd:5b:08:1a:5f:
                    c2:db:00:30:b0:fd:3f:68:c4:b3:72:2e:5a:db:f6:
                    dc:eb:b1:9a:90:dd:e6:4d:0c:20:40:8d:c7:51:01:
                    ae:0f:c6:13:ae:fe:4f:e8:ce:02:6d:db:fa:eb:54:
                    13:34:12:04:7f:66:9e:cb:e4:04:e2:96:a2:8a:05:
                    1c:2c:d9:19:3f:d0:4b:f4:5b:b9:84:d3:ad:bf:aa:
                    75:88:e9:58:b0:bb:0c:5f:6e:35:fd:f6:da:f1:a1:
                    12:a1:c6:87:fb:d7:2d:c0:a9:dd:55:70:5a:58:56:
                    b4:59:13:3e:6e:09:ef:cc:9a:59:c4:aa:a0:0a:8f:
                    c8:a9:e9:2d:6d:53:12:98:09:69:d9:b4:01:73:e2:
                    0f:40:c1:41:a1:10:fb:80:76:d2:11:58:12:21:92:
                    a9:32:f9:c8:f1:fb:9c:76:ed:cb:24:96:a9:b5:b4:
                    7b:9e:2b:cc:36:e9:9c:a6:32:43:55:f0:25:d7:25:
                    30:c9:05:a4:a0:41:64:79:ee:49:f1:b1:26:d6:f8:
                    01:2f:bb:58:62:e8:4c:7f:1a:05:44:01:09:56:72:
                    c4:69:a9:03:f9:e7:67:d3:41:5b:c7:ad:95:85:65:
                    0d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C4:9F:AD:4B:AC:5C:7B:6F:19:73:AA:4B:9B:1E:3B:BC:54:5C:88
            X509v3 Authority Key Identifier:
                keyid:09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:0a:30:7e:5f:6d:0a:f3:92:6a:cc:f3:ca:31:1b:1d:a9:01:
         86:41:dc:65:25:43:cc:a0:a2:b7:bd:d8:7a:26:bd:39:57:27:
         05:a8:fe:06:d8:73:19:4f:3e:2b:4e:4b:69:43:53:91:fd:15:
         48:e5:d6:20:ed:17:32:40:61:53:41:a3:64:55:36:92:9b:95:
         ea:1c:6a:a6:40:b0:63:c0:ca:79:cc:05:e3:4e:5a:5b:ae:6d:
         95:b1:55:36:ae:ee:0c:ae:76:62:84:03:97:4e:19:ab:4f:fd:
         3a:3f:7f:a8:54:ee:00:04:06:57:9f:c0:a0:dc:ee:87:2f:c5:
         37:b6:c8:df:20:f1:11:e6:c5:c1:43:b7:64:f5:eb:02:d9:c5:
         24:4d:7b:88:1f:44:69:a7:af:22:21:8c:93:8b:f6:09:9f:b0:
         0f:f6:66:95:34:87:e2:9d:73:14:90:67:85:6b:8e:02:7a:31:
         9f:3a:33:2f:d0:f3:e3:4f:dc:f5:cc:5a:8f:0c:ee:75:71:aa:
         3b:bd:4f:f3:ee:bf:88:7d:e2:64:40:b6:7e:9e:ff:1b:bd:2a:
         2a:0b:d4:e4:7c:91:c7:18:b3:c5:f7:ff:df:75:ab:83:df:7d:
         1b:a0:84:09:a1:17:69:64:85:03:9e:f8:c3:e1:67:60:aa:dc:
         36:05:15:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:24:54 2026 by rpki-client