Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
File:                     40Y8J4uE4t8ApHvC2AyNgP-puok.mft (raw, json)
Hash identifier:          TTsLq92xVsc2noGaEGPZ/KI8cAg696jQ1nfYYtvfraI=
Subject key identifier:   7C:2D:1F:4B:4B:5A:39:14:41:95:9C:8D:44:00:2F:6B:20:58:1D:4E
Authority key identifier: E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89
Certificate issuer:       /CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89
Certificate serial:       019E31173295500FE0D4811B78EF4BB3D66C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
Manifest number:          190F
Signing time:             Sat 16 May 2026 14:01:04 +0000
Manifest this update:     Sat 16 May 2026 14:01:04 +0000
Manifest next update:     Sun 17 May 2026 14:01:04 +0000
Files and hashes:         1: 40Y8J4uE4t8ApHvC2AyNgP-puok.crl (hash: TOgAHE3yem5/ZtPQqSBoXIDqBQ17bTQbce2V9vW4RxM=)
                          2: fTOZ6bwIEmD97JXBK2cTtsKp-dQ.roa (hash: ydQrbbkIB0mroPHTm9Ff78/w6YQRKyZSWJF5ki0jYCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:32:95:50:0f:e0:d4:81:1b:78:ef:4b:b3:d6:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89
        Validity
            Not Before: May 16 14:01:04 2026 GMT
            Not After : May 17 14:01:04 2026 GMT
        Subject: CN=7c2d1f4b4b5a391441959c8d44002f6b20581d4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8a:a5:76:ba:fa:f8:28:7c:3b:45:5f:b3:ef:
                    38:c9:8c:f7:df:04:d7:f3:b0:b5:0b:4b:8a:73:3f:
                    8f:fd:55:e3:d9:83:6f:bf:15:46:0a:2e:21:b9:a5:
                    e1:4b:e0:ac:8a:0e:48:41:0f:1b:16:95:f9:20:59:
                    1c:7d:7d:ea:5c:e6:99:98:37:a7:21:c5:59:c6:87:
                    d5:3b:8d:0b:07:a3:37:27:c2:42:8b:c4:a8:49:73:
                    d1:2a:b5:da:6b:80:bd:20:c2:14:2e:b0:5e:27:30:
                    20:c3:6d:71:ef:23:ef:2c:de:e8:3d:89:b6:2b:58:
                    63:a7:86:6b:3d:13:96:d8:1a:4c:7c:ed:a6:c7:95:
                    0e:62:d8:2d:68:99:4a:fc:61:97:3e:41:d1:02:9c:
                    d9:d9:f5:e1:56:4b:ed:d2:75:ee:04:a0:23:74:d9:
                    f5:30:31:59:26:f1:06:c9:f0:10:19:e7:6b:d3:e2:
                    82:95:8d:67:a5:e2:a1:e9:86:bd:05:8c:40:89:91:
                    95:17:87:80:9e:ed:f8:41:13:5c:6b:c7:8c:72:f5:
                    6e:4a:5f:be:e1:2a:89:fc:20:6b:d8:e2:65:eb:48:
                    5e:a5:44:de:67:d8:ca:ff:55:a8:25:8c:43:52:a9:
                    44:fe:12:6c:01:d5:cf:cc:c0:88:55:9e:a5:80:af:
                    5b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:2D:1F:4B:4B:5A:39:14:41:95:9C:8D:44:00:2F:6B:20:58:1D:4E
            X509v3 Authority Key Identifier:
                keyid:E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:1f:ad:74:49:a2:d4:78:13:f8:42:f7:bf:24:ce:65:7c:70:
         d0:99:57:6b:fd:e1:9d:f1:6b:bb:bd:8e:1d:15:85:43:12:7c:
         ec:6d:38:6f:65:32:1a:93:74:d8:12:b9:48:91:d6:16:27:71:
         e8:3d:af:92:2a:06:37:4f:3c:01:71:e0:d0:27:b8:27:65:f4:
         37:8f:71:82:d9:ef:1f:0c:0e:5e:b9:71:45:8d:1d:64:de:71:
         d3:50:6b:a8:80:be:1a:54:b9:a2:62:00:e9:40:ed:e7:59:d1:
         c8:31:1a:dd:14:77:65:49:1c:6f:e8:21:5f:ba:39:22:04:1b:
         01:be:f2:7e:50:40:a6:36:4d:45:3b:f6:a6:88:45:2b:ae:dc:
         3e:10:a9:ee:43:83:19:8c:38:6b:8d:ef:aa:4f:5f:47:09:13:
         f1:d9:1f:ab:8f:25:0c:8d:39:d7:24:6d:a2:71:3f:a4:d1:60:
         b8:08:59:df:06:7c:11:74:a2:c3:3a:d2:b1:16:05:f2:d1:35:
         51:48:d7:c3:22:dd:96:d2:0d:67:5f:8f:df:09:7c:db:33:b7:
         20:27:9b:2c:d4:50:9d:0c:5d:f7:27:ff:bd:1c:c4:54:a0:cf:
         87:8f:89:c4:b6:f6:22:75:e4:c4:d6:24:24:f8:1b:da:ea:b5:
         f8:18:be:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:24:59 2026 by rpki-client