Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
File:                     4DkMHDYd8FIkN2EI7_myDcLuAmU.mft (raw, json)
Hash identifier:          FjumKuqonHFPn0g539CSxBp7rXCovYuFmlYvx6HatFg=
Subject key identifier:   D2:C4:EC:FF:7E:EB:4C:59:AB:07:10:D3:08:36:38:79:2C:45:7A:D0
Authority key identifier: E0:39:0C:1C:36:1D:F0:52:24:37:61:08:EF:F9:B2:0D:C2:EE:02:65
Certificate issuer:       /CN=e0390c1c361df05224376108eff9b20dc2ee0265
Certificate serial:       019E31175111FA3509AA1187DF42F69612E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
Manifest number:          1919
Signing time:             Sat 16 May 2026 14:01:12 +0000
Manifest this update:     Sat 16 May 2026 14:01:12 +0000
Manifest next update:     Sun 17 May 2026 14:01:12 +0000
Files and hashes:         1: 4DkMHDYd8FIkN2EI7_myDcLuAmU.crl (hash: PyzSBZ2GrFJK9CHM4LTKfzTDY7Lwmu72oKcf9pLi/6E=)
                          2: HMpkFnFRNLrRrrjLr9m-Ha2OMAk.roa (hash: MvD+kW64gasfrmfOU4x0HNuN58jbkr9LphVnvyCI/70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:51:11:fa:35:09:aa:11:87:df:42:f6:96:12:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0390c1c361df05224376108eff9b20dc2ee0265
        Validity
            Not Before: May 16 14:01:12 2026 GMT
            Not After : May 17 14:01:12 2026 GMT
        Subject: CN=d2c4ecff7eeb4c59ab0710d3083638792c457ad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d5:54:ca:e3:a3:d5:c5:c8:eb:ae:e9:8d:f3:
                    af:b6:fd:07:54:96:89:83:b9:f4:86:0a:18:c7:03:
                    95:3f:fc:86:93:b9:82:b1:e1:6a:d6:70:37:83:aa:
                    62:e4:5c:f7:3e:6f:65:59:42:98:bd:59:6a:1d:c3:
                    1e:17:31:98:80:19:05:69:4a:e0:60:0f:68:0b:4f:
                    70:37:39:7b:30:b2:a1:b3:d4:a0:b6:74:f8:50:b9:
                    26:38:02:85:79:ae:d8:a7:82:19:c1:46:0a:53:b3:
                    84:37:77:3f:ec:bb:54:7d:5f:57:bc:66:4b:c8:30:
                    61:2f:8f:54:5d:b7:23:77:36:a3:12:bb:41:82:25:
                    b7:63:9b:0f:f5:2d:6e:56:91:9c:ff:07:b7:36:c7:
                    a6:92:03:0a:60:4f:b3:89:11:37:d0:f3:ec:b7:84:
                    08:da:cc:4d:08:58:39:b5:f6:0a:5e:9e:e0:dc:c0:
                    13:50:7c:3b:b9:6d:bb:17:6b:23:a5:d2:0f:46:72:
                    18:40:57:90:51:0c:97:f3:56:0b:b0:52:25:e7:53:
                    19:0a:22:f2:9b:d1:84:f9:b9:16:5d:77:4d:e4:32:
                    7f:1b:46:58:c1:2b:40:35:66:71:2f:7e:f7:f0:52:
                    33:0b:88:7a:a0:a1:78:be:76:3d:7d:59:f1:ee:2f:
                    24:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C4:EC:FF:7E:EB:4C:59:AB:07:10:D3:08:36:38:79:2C:45:7A:D0
            X509v3 Authority Key Identifier:
                keyid:E0:39:0C:1C:36:1D:F0:52:24:37:61:08:EF:F9:B2:0D:C2:EE:02:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:b5:0e:74:fc:cc:e4:8c:c2:eb:44:96:02:b6:2f:82:e8:95:
         ea:df:18:b6:fc:9e:ca:49:3a:9b:d8:3b:62:d0:10:c9:9c:cb:
         93:49:a3:f8:40:f1:62:fd:e1:7f:c3:5f:1c:9e:dd:ad:0b:84:
         09:90:68:57:2a:2f:8e:5e:7a:d4:ff:c5:d1:3a:b8:49:0c:ff:
         db:7f:a3:0b:08:f2:cb:e4:ee:bc:78:78:a9:b6:77:62:1d:5f:
         f2:61:d2:6b:4c:ec:8b:e0:0b:54:46:96:7d:6d:35:28:e1:ff:
         78:6b:3d:91:52:ee:d2:13:3e:e7:34:6d:55:e0:c3:43:e9:75:
         9f:10:cd:7f:94:fe:8d:fb:a1:dd:b6:8d:8b:7b:9d:1d:84:15:
         3a:77:b6:68:03:28:79:42:72:b1:2e:88:50:11:3e:75:fa:b3:
         65:ec:3b:57:ab:69:54:5c:7e:a2:ea:67:bb:8b:02:6a:a8:77:
         6d:33:e9:18:04:c9:59:31:a5:0e:0d:7f:4e:70:71:5c:93:80:
         12:28:fe:33:43:16:ae:09:c6:22:0e:9a:b8:a4:39:71:b2:45:
         53:b1:b9:fd:e6:6c:e8:4f:59:66:1b:5d:6c:cd:c4:ba:81:73:
         de:9b:4b:fe:8a:3d:1b:c6:44:e9:0d:66:e8:e5:26:c8:7c:47:
         05:67:29:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:54 2026 by rpki-client