Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
File:                     AWRUygmetS5VVg9dCeh-cxYa5zg.mft (raw, json)
Hash identifier:          caYvJW55toHa39b9q8ImXlLm3EZwYfQSr8S1U1FI6Rk=
Subject key identifier:   7D:9D:13:9D:C2:61:DA:74:80:01:AC:81:DF:97:F3:18:85:D7:02:5F
Authority key identifier: 01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38
Certificate issuer:       /CN=016454ca099eb52e55560f5d09e87e73161ae738
Certificate serial:       019E2F96DAC03583A8923D0F2FFE0BD6163C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
Manifest number:          0C2E
Signing time:             Sat 16 May 2026 07:01:15 +0000
Manifest this update:     Sat 16 May 2026 07:01:15 +0000
Manifest next update:     Sun 17 May 2026 07:01:15 +0000
Files and hashes:         1: AWRUygmetS5VVg9dCeh-cxYa5zg.crl (hash: jLWBKGfhM/5nacHOodA2/fIgKKig/9EJATMsHE0kNo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:96:da:c0:35:83:a8:92:3d:0f:2f:fe:0b:d6:16:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=016454ca099eb52e55560f5d09e87e73161ae738
        Validity
            Not Before: May 16 07:01:15 2026 GMT
            Not After : May 17 07:01:15 2026 GMT
        Subject: CN=7d9d139dc261da748001ac81df97f31885d7025f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1f:98:d1:6a:ce:1c:e6:b5:c1:c3:8c:fb:0d:
                    ed:94:11:04:97:d3:22:b2:67:f0:d1:e9:af:df:97:
                    07:b2:a3:58:67:6b:ce:38:05:fe:6f:cb:b6:e8:94:
                    4b:39:d4:12:d0:3f:13:27:f6:4f:5f:4b:4c:ae:ca:
                    0b:fe:84:cc:2d:51:73:e6:b6:f9:f7:d8:87:32:ac:
                    73:aa:1d:67:aa:9c:75:37:55:38:33:fb:91:19:7e:
                    67:85:1e:74:1a:06:f6:da:81:76:7f:b2:9c:f8:cf:
                    4d:81:37:bd:f1:19:44:e3:ec:17:0f:e6:ae:e8:76:
                    3c:9d:c9:4e:76:cf:94:68:d1:8d:b3:83:ec:f1:95:
                    e5:7c:c0:d3:3f:7a:fd:ba:08:08:0a:b5:e1:ac:39:
                    c6:6e:81:86:c2:03:86:62:11:bb:62:14:3b:e2:fd:
                    ad:1e:0a:d2:ab:34:18:21:80:81:24:ec:8f:9e:ea:
                    ef:99:2e:fa:ac:7c:91:3b:2e:22:f2:45:65:91:70:
                    ca:8a:20:a7:f7:8e:49:fc:a0:8b:70:54:38:ab:fa:
                    4e:fe:c3:f0:1c:b5:f6:79:ad:76:55:2d:54:7a:45:
                    f5:12:91:39:62:8d:c9:55:35:24:08:c4:ed:15:09:
                    21:64:81:8b:62:7e:df:0a:28:5e:df:34:b5:36:6a:
                    89:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9D:13:9D:C2:61:DA:74:80:01:AC:81:DF:97:F3:18:85:D7:02:5F
            X509v3 Authority Key Identifier:
                keyid:01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:0d:61:7f:a3:8d:c6:e6:9d:c1:9d:9a:b5:95:6c:fc:1e:ac:
         10:01:cb:25:1f:70:88:98:13:7a:ba:00:1a:78:5f:1f:ef:a6:
         ee:68:7c:62:fa:21:dc:b7:65:7b:c1:76:29:cf:ce:f6:38:50:
         4d:42:68:53:3e:b8:06:9e:3b:82:f9:2d:61:e3:a8:05:ff:20:
         3a:b7:a0:1c:cc:99:3c:23:e0:5b:a8:f0:16:70:29:64:87:14:
         86:e4:04:97:da:7a:72:e0:1c:4b:0e:1f:1d:3c:e5:8b:60:d3:
         9a:db:a2:d1:40:4c:96:1b:57:79:20:d7:ec:61:b8:c0:4c:ae:
         b2:71:b1:3a:de:86:42:77:6f:f4:65:86:ce:15:b6:56:5f:f0:
         78:6d:2b:70:2f:3a:62:02:2b:35:0e:f3:31:b6:4b:5a:ba:8e:
         2e:9b:f9:ce:49:8b:20:ed:81:ae:05:98:9b:2f:68:e5:a8:16:
         25:1d:6b:c8:4a:48:d6:b8:48:cd:ee:a9:af:bf:ef:dc:a4:af:
         5e:91:55:48:15:8b:a4:31:d8:ef:e8:f7:2e:f3:c7:3b:60:dc:
         db:16:8b:32:ec:00:45:2d:a0:12:e3:50:64:db:ed:bd:8f:27:
         19:4c:70:9d:96:c5:27:0a:b6:9a:e7:be:b6:87:e7:b6:a9:40:
         5d:60:eb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:56:46 2026 by rpki-client