Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
File:                     8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft (raw, json)
Hash identifier:          BUQ8IFlQR/axRmcrkfjsd/leF0YjNJyzLRS4rGqUDKI=
Subject key identifier:   4D:6B:7F:7B:22:DE:07:3B:F3:C6:17:96:29:3A:CC:9F:C8:44:26:D1
Authority key identifier: F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
Certificate issuer:       /CN=f32220b696e2e766516c05743d137dbbc17fd261
Certificate serial:       019E2F978906C5D6B5B44FC19910885121BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
Manifest number:          190C
Signing time:             Sat 16 May 2026 07:02:00 +0000
Manifest this update:     Sat 16 May 2026 07:02:00 +0000
Manifest next update:     Sun 17 May 2026 07:02:00 +0000
Files and hashes:         1: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl (hash: oruriuOUA/sBxHFKMrfGHXmX3CSo1cBciVZMVxc4kT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:97:89:06:c5:d6:b5:b4:4f:c1:99:10:88:51:21:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f32220b696e2e766516c05743d137dbbc17fd261
        Validity
            Not Before: May 16 07:02:00 2026 GMT
            Not After : May 17 07:02:00 2026 GMT
        Subject: CN=4d6b7f7b22de073bf3c61796293acc9fc84426d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2d:db:5d:d1:cc:c4:a4:be:ec:9c:de:c9:51:
                    b0:c9:33:f7:45:fc:bc:22:a0:f8:3f:dc:3a:39:39:
                    a8:1c:60:49:16:8d:b1:49:d5:9d:4d:7e:81:2d:33:
                    2d:64:23:29:b9:86:46:e8:55:d8:d2:60:12:bd:b1:
                    6f:52:d1:d4:ca:5c:8f:58:2d:14:9f:8d:9c:1b:4f:
                    29:33:c7:df:ef:09:e8:81:d2:29:7b:36:6d:f3:5a:
                    1f:1c:4d:04:5e:af:a3:b1:cd:d6:7b:2e:0e:27:dd:
                    8d:60:4d:d4:a4:5d:f1:a1:9a:ac:22:88:e3:0a:3f:
                    c8:57:4f:e0:52:c6:f3:68:97:05:f4:8d:8f:44:7d:
                    66:6c:b4:ee:05:76:72:68:31:98:f7:00:bf:30:9f:
                    8d:82:1c:6e:97:b2:95:5a:b3:cf:f6:42:62:fc:16:
                    04:6a:e7:67:7a:79:af:fc:e3:91:d2:4b:f6:16:15:
                    34:08:20:74:88:87:6e:24:da:b2:32:d9:b1:4a:d3:
                    a9:fc:53:fc:48:f0:c9:e7:7f:e5:68:83:c3:76:2c:
                    80:03:f6:24:1a:66:11:c4:f2:38:dc:e3:02:5d:25:
                    39:f5:bf:d9:3d:89:7d:d9:51:06:39:11:f3:f1:86:
                    64:3f:cf:50:2d:c6:1b:70:cd:9d:5e:a4:75:74:a7:
                    67:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:6B:7F:7B:22:DE:07:3B:F3:C6:17:96:29:3A:CC:9F:C8:44:26:D1
            X509v3 Authority Key Identifier:
                keyid:F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:8d:68:32:32:b9:fa:61:77:99:bd:51:ea:51:1a:55:53:6b:
         d7:a7:e1:25:6c:8b:cc:12:9c:84:ee:f2:70:76:f1:15:4f:af:
         7e:12:7a:4e:9a:1e:e0:70:df:fa:d4:bd:f6:92:47:76:cf:3c:
         d5:37:ad:b6:71:9b:b7:39:e3:24:e8:ad:8a:14:06:09:18:b0:
         dd:b4:a5:d7:dc:72:30:04:06:c9:b7:4b:a8:07:54:33:b0:c1:
         5d:4f:56:35:71:9a:5f:da:a9:a0:a4:5d:d6:89:c9:47:c0:5e:
         b4:73:a0:9d:e6:a7:fc:78:50:3c:02:c4:56:fa:46:70:6d:74:
         00:ba:03:36:b7:3c:ff:c4:42:ec:b7:87:a9:be:7a:40:83:52:
         9a:ed:9b:a9:35:9e:d7:28:b9:c0:99:31:88:61:17:91:cb:7c:
         45:29:83:8a:e3:63:be:b5:a7:5c:08:77:e5:89:82:2f:9c:54:
         bf:2a:02:50:5a:59:48:ab:fe:fb:66:3e:aa:cc:b6:cd:ea:40:
         ea:07:7e:96:c9:84:a9:26:c0:d1:62:ae:9c:3f:d7:67:4d:f1:
         4e:68:fc:4e:f5:d7:6b:53:04:f4:28:52:cb:9a:90:43:14:8e:
         9b:1c:dd:30:3d:e4:f6:73:b2:4d:3f:75:a5:f9:a8:21:3d:e9:
         42:77:4a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:46 2026 by rpki-client