Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft
File:                     CEaS7DDzfffcteR600auvetx_DA.mft (raw, json)
Hash identifier:          J3OakyjcOS5JP84EbofZksrTEOG8GmJ4LIxqiirhRZU=
Subject key identifier:   75:3C:F5:6C:96:BE:CC:19:6C:EC:BD:9A:BF:4D:08:48:03:E7:29:60
Authority key identifier: 08:46:92:EC:30:F3:7D:F7:DC:B5:E4:7A:D3:46:AE:BD:EB:71:FC:30
Certificate issuer:       /CN=084692ec30f37df7dcb5e47ad346aebdeb71fc30
Certificate serial:       019E3004905DB36AE89246CB831CC45D963F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CEaS7DDzfffcteR600auvetx_DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft
Manifest number:          190B
Signing time:             Sat 16 May 2026 09:01:05 +0000
Manifest this update:     Sat 16 May 2026 09:01:05 +0000
Manifest next update:     Sun 17 May 2026 09:01:05 +0000
Files and hashes:         1: CEaS7DDzfffcteR600auvetx_DA.crl (hash: vAKuOsNJrS21GzOa2XBlS3f33gxIbwoylYaV9O/Zfqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CEaS7DDzfffcteR600auvetx_DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:04:90:5d:b3:6a:e8:92:46:cb:83:1c:c4:5d:96:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084692ec30f37df7dcb5e47ad346aebdeb71fc30
        Validity
            Not Before: May 16 09:01:05 2026 GMT
            Not After : May 17 09:01:05 2026 GMT
        Subject: CN=753cf56c96becc196cecbd9abf4d084803e72960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:28:51:8e:7f:84:8a:d9:c2:10:83:99:69:dd:
                    78:59:2f:e6:fb:f0:5e:14:78:7b:ac:0d:82:da:52:
                    f5:45:7d:fd:69:93:e5:b9:fb:42:ff:9a:96:be:91:
                    13:79:a8:93:8d:4d:ea:07:84:a5:3a:44:f5:57:66:
                    27:7b:0a:fd:81:23:a7:85:dd:fb:fe:f1:95:42:5d:
                    4b:8e:45:7c:59:f1:0d:f0:89:ee:e4:7a:3e:85:fd:
                    ce:a2:1e:a3:b1:fe:8d:df:87:25:9a:33:23:0f:45:
                    f0:04:6e:4a:8a:77:8c:30:43:6c:8e:a4:e3:3c:84:
                    a7:72:e3:ae:17:89:39:ab:39:bd:6d:61:80:6b:c0:
                    b0:f1:eb:61:54:81:b1:cc:b4:e9:20:a4:b7:d4:af:
                    5b:90:97:7a:77:b3:99:c4:bc:e9:e0:61:fc:2e:09:
                    d1:96:68:1d:b1:02:86:e9:aa:5f:3a:a8:9c:9a:b9:
                    9e:7a:cd:85:31:79:ed:c8:69:e5:c0:0d:ff:4b:1f:
                    82:d6:90:79:93:cc:04:c6:d7:16:d8:44:3e:77:0f:
                    c0:37:b8:5a:a4:c9:04:db:6a:9e:b7:f3:b3:43:f2:
                    52:76:cd:74:68:b4:4f:45:d5:6d:76:d8:b2:b9:f6:
                    5a:f9:f1:f0:3d:3d:6c:db:25:5b:73:68:21:21:4f:
                    17:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:3C:F5:6C:96:BE:CC:19:6C:EC:BD:9A:BF:4D:08:48:03:E7:29:60
            X509v3 Authority Key Identifier:
                keyid:08:46:92:EC:30:F3:7D:F7:DC:B5:E4:7A:D3:46:AE:BD:EB:71:FC:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEaS7DDzfffcteR600auvetx_DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:e0:2f:8a:52:0c:fa:55:de:19:f1:e1:68:24:cd:31:f0:78:
         d3:1a:04:03:e6:6c:af:3d:1b:62:d0:9a:ca:34:31:ba:f3:0a:
         5d:97:16:b2:3f:44:28:a0:b2:1d:60:71:46:ae:8c:97:22:84:
         18:51:96:64:d5:22:50:0c:0c:54:08:3c:72:51:11:62:d7:16:
         16:7f:55:22:a2:91:ac:f1:1b:ff:8a:56:7c:ef:ca:f7:e0:50:
         32:5f:cb:1a:ba:21:a0:03:38:28:45:8b:a2:23:c5:80:33:5d:
         f2:d1:4a:63:d7:59:3d:00:65:6a:85:45:ba:b7:2f:d2:0d:3e:
         ff:24:8c:a6:2d:dc:ab:a1:88:10:90:d2:73:7e:bf:44:98:e5:
         54:4d:c3:41:7a:d8:f5:a2:1d:7b:f5:4b:f1:38:70:58:25:65:
         0f:b4:ee:d8:ee:28:12:5a:56:43:e7:d8:32:23:9c:e0:23:6a:
         1d:cb:c4:fc:f8:12:8e:bc:e7:87:80:39:a7:b1:90:c8:7e:c3:
         d0:6a:07:86:8d:28:23:b3:0c:b3:06:19:fe:ef:fc:da:c5:d9:
         32:21:51:89:ed:3c:8f:06:7e:5a:cc:48:01:f2:df:22:e3:46:
         9f:09:ff:aa:e6:ef:19:68:15:fb:c6:19:d9:71:4a:51:1d:78:
         fd:47:cb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:14:37 2026 by rpki-client