Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
File:                     AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft (raw, json)
Hash identifier:          9/tDigRxPhdfjihtHSQZ8Bt/KArVfPVTptWtX+hxnyg=
Subject key identifier:   82:80:A2:A2:BC:37:DC:E6:4C:83:BD:3B:D9:1B:FA:B3:F1:6A:1F:48
Authority key identifier: 00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
Certificate issuer:       /CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Certificate serial:       019E303BA7895434000B9D957A0991005DC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
Manifest number:          190C
Signing time:             Sat 16 May 2026 10:01:16 +0000
Manifest this update:     Sat 16 May 2026 10:01:16 +0000
Manifest next update:     Sun 17 May 2026 10:01:16 +0000
Files and hashes:         1: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl (hash: YbubO/VcNg9BBu8SfNBYur38RntODIGa30omhwQtbl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:a7:89:54:34:00:0b:9d:95:7a:09:91:00:5d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
        Validity
            Not Before: May 16 10:01:16 2026 GMT
            Not After : May 17 10:01:16 2026 GMT
        Subject: CN=8280a2a2bc37dce64c83bd3bd91bfab3f16a1f48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:07:a4:92:ca:63:f1:61:25:ab:70:3b:41:7a:
                    5e:ef:01:a1:d8:23:a7:b6:da:9b:81:90:54:71:08:
                    98:52:25:b1:36:67:fd:f0:bb:98:6f:1c:03:14:34:
                    bb:97:41:f1:3e:d0:7c:07:d6:ee:c1:17:fd:d4:47:
                    89:7a:7d:a7:a7:1d:1d:28:ee:7f:ff:fe:bb:55:2d:
                    0f:f6:13:45:0f:47:51:72:d1:27:ff:df:45:45:3e:
                    ae:ca:0d:41:55:e0:b8:8a:c9:4b:6c:57:db:60:39:
                    d3:a1:18:fc:88:fc:84:3e:81:d4:e5:50:56:9a:d7:
                    2c:02:46:1f:84:1c:97:39:f6:eb:8f:bf:c4:8d:04:
                    fa:3a:10:82:cf:e7:d6:3a:10:95:26:7a:92:07:b2:
                    8c:c5:32:a8:0f:b1:47:fd:fb:c3:dd:c3:ca:cd:19:
                    79:b8:c3:16:bf:b1:96:bf:49:c8:43:7b:a6:6a:6c:
                    6e:47:5e:eb:a7:65:0c:22:80:43:68:9b:92:08:97:
                    d0:d0:69:6e:11:2a:30:ef:0c:75:d6:3a:62:da:91:
                    f5:ea:0a:4b:ec:a9:35:2b:0b:2e:61:f3:b9:4f:f5:
                    90:76:7c:b4:9f:dd:6a:1d:f3:ee:14:21:d8:c9:28:
                    c5:62:1b:e2:c3:a9:5f:e3:31:d4:bd:b1:de:6d:ae:
                    47:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:80:A2:A2:BC:37:DC:E6:4C:83:BD:3B:D9:1B:FA:B3:F1:6A:1F:48
            X509v3 Authority Key Identifier:
                keyid:00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:6b:41:00:b4:73:56:f4:49:90:31:eb:bc:bd:14:db:2d:b2:
         fb:35:62:25:02:77:7c:a7:80:e1:7e:d6:82:37:0b:60:ee:72:
         a4:be:b0:28:9c:bd:cd:c1:a9:10:d7:a0:8b:77:4e:6b:86:0e:
         ae:07:d2:ca:84:38:18:05:46:03:0e:c2:20:09:a2:ff:56:be:
         f0:ec:34:bd:1b:3e:ba:45:24:b9:16:db:08:33:fc:b8:67:b4:
         ff:f1:1a:d4:3b:23:f3:0d:4e:b6:4b:a0:6c:4c:cd:eb:46:d1:
         e6:70:7d:18:c1:b1:da:1c:6d:0a:a7:a6:fa:44:1e:a1:3b:a3:
         3c:d4:b7:45:aa:de:89:e7:5f:2f:00:5d:f6:81:13:55:55:d1:
         53:6e:c4:02:f1:29:76:80:fa:91:8f:76:90:4e:22:dd:9b:35:
         d1:3f:17:8b:66:73:0a:c1:27:ab:7f:c1:07:ab:af:2f:a5:9e:
         3a:58:78:7a:03:21:e4:71:38:05:3c:48:ba:36:aa:af:d2:63:
         37:90:db:f7:91:e3:fe:b0:92:51:4c:20:26:3b:c8:f7:db:a3:
         84:d7:62:e7:9e:49:93:c9:4b:81:3d:71:51:8c:9b:c5:04:de:
         b5:2e:15:a7:5f:4a:38:cb:3e:19:47:04:15:5c:38:ef:03:5a:
         ac:86:d7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:22 2026 by rpki-client