Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
File:                     4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft (raw, json)
Hash identifier:          FmnltKri6zCEWjw49cBfX4V3tYdJtjBO6dM+2K+yyNY=
Subject key identifier:   7E:D7:79:E4:CD:53:6C:F2:9A:1C:B0:AD:60:03:77:3D:28:83:9E:53
Authority key identifier: E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
Certificate issuer:       /CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Certificate serial:       019E2AA7FA3D8767F046781CC89B85740FB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
Manifest number:          184B
Signing time:             Fri 15 May 2026 08:01:52 +0000
Manifest this update:     Fri 15 May 2026 08:01:52 +0000
Manifest next update:     Sat 16 May 2026 08:01:52 +0000
Files and hashes:         1: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl (hash: eXZPIHoZeTq//xo1VjqgkNpSSnt7KrzIeYar4Cwr6ng=)
                          2: pZ2DG9liFeCKNbzetKHvN52UJO0.roa (hash: ngpoJdoTiDK1ogZAlMttmztrBQw9vwYksg/OwsA6X2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:a7:fa:3d:87:67:f0:46:78:1c:c8:9b:85:74:0f:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
        Validity
            Not Before: May 15 08:01:52 2026 GMT
            Not After : May 16 08:01:52 2026 GMT
        Subject: CN=7ed779e4cd536cf29a1cb0ad6003773d28839e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f0:dc:5b:00:31:8e:78:5e:dd:01:11:b6:e6:
                    26:75:b8:07:7a:2b:72:53:c7:f9:21:17:45:04:54:
                    0a:eb:b8:76:d5:57:d6:c3:63:6b:fb:6f:96:db:9f:
                    fe:fe:f4:cd:11:06:97:2d:cc:d4:87:e2:20:b5:83:
                    9d:1d:08:57:e5:7e:ad:ff:98:48:d3:57:39:49:35:
                    69:8c:9a:30:df:98:8b:14:4c:3a:9c:e9:3f:62:5c:
                    86:7d:eb:07:c2:5f:3a:55:88:c4:2d:0f:7f:f9:f3:
                    ef:2c:0f:61:98:71:dd:22:b8:65:fd:c2:c6:4d:23:
                    2e:3e:75:44:b8:88:52:18:98:93:cf:e8:a9:18:9e:
                    1a:23:39:be:69:0c:44:b0:08:04:51:0f:f4:73:4e:
                    a8:2e:49:cf:6d:72:8e:b7:a3:17:da:a7:18:d7:af:
                    58:71:51:93:a2:50:04:53:a5:13:f5:9e:3f:67:76:
                    12:e6:af:ab:09:06:63:19:e3:04:5b:38:ce:25:a7:
                    b1:a9:73:33:ef:c5:e1:05:13:6c:70:c6:91:65:34:
                    0a:15:f9:5e:0a:5e:54:a1:17:76:09:2e:30:bf:f0:
                    14:80:3a:c7:9a:b7:24:9f:69:59:14:14:de:da:aa:
                    75:75:0d:02:a1:fb:25:03:e0:e5:31:d5:26:1b:6f:
                    98:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D7:79:E4:CD:53:6C:F2:9A:1C:B0:AD:60:03:77:3D:28:83:9E:53
            X509v3 Authority Key Identifier:
                keyid:E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:0e:90:0a:1a:19:4a:5a:82:25:0a:0f:f1:64:8c:08:32:f9:
         7f:c5:da:01:3f:9d:1b:70:74:56:20:72:d7:52:74:6a:86:ca:
         89:60:81:6f:11:a1:91:6b:7f:39:ef:f5:14:8f:22:32:62:24:
         d1:be:98:7b:f4:bb:a7:bf:f4:b1:3b:a5:76:93:80:4d:99:8e:
         33:88:4f:c1:b6:84:03:77:a1:cc:11:d6:91:8a:2c:d6:7d:83:
         2a:7a:c1:b9:a8:05:aa:b5:f4:2e:e0:98:49:f3:55:5d:35:96:
         8b:03:98:02:d3:2b:46:e1:c0:f3:4e:21:40:29:2d:cf:af:6a:
         e8:53:5f:6b:0d:5d:f1:70:cd:83:30:d2:f7:4e:b0:8b:90:8d:
         41:e9:66:31:83:ac:7d:71:17:d6:ff:eb:55:07:ef:5a:ad:72:
         f9:90:10:4f:f9:0f:80:45:16:00:63:f3:16:dc:94:44:0b:8c:
         c2:f9:23:8f:30:40:47:15:1a:52:13:dd:f0:10:10:e4:68:0e:
         07:de:56:0c:69:3c:b8:61:14:bb:d7:08:b7:b7:9d:4b:00:13:
         71:05:75:53:31:18:99:e0:55:43:4b:f6:20:df:c0:8f:ce:8b:
         62:7d:cc:5e:3a:d4:e9:69:0d:36:61:0a:13:13:1d:ee:95:bf:
         7f:85:2b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 11:15:42 2026 by rpki-client