Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
File:                     EAcdqxaOjlPjzX31244PBCQukIY.mft (raw, json)
Hash identifier:          j3IuB1D4PKVIe6CLZM9H3nTEte01cWSWLkQpPd6N2uY=
Subject key identifier:   FD:1E:91:E6:56:F9:7A:29:C2:87:86:02:2C:BF:19:92:14:DB:94:63
Authority key identifier: 10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86
Certificate issuer:       /CN=10071dab168e8e53e3cd7df5db8e0f04242e9086
Certificate serial:       019E2FCD6888EE05C2978145AB937B61F238
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
Manifest number:          190D
Signing time:             Sat 16 May 2026 08:00:51 +0000
Manifest this update:     Sat 16 May 2026 08:00:51 +0000
Manifest next update:     Sun 17 May 2026 08:00:51 +0000
Files and hashes:         1: EAcdqxaOjlPjzX31244PBCQukIY.crl (hash: nzghc+RG7WZ7SNi4Xyw7Tkp+Lis3KJPwGXhpT1IgVKQ=)
                          2: TehJaUKE7-UYVJg4qzcGnHF4gEE.roa (hash: g9yiDNMzuqT4Xury4y9vb4TVbFovThME/EkaBOlvwI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 08:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:cd:68:88:ee:05:c2:97:81:45:ab:93:7b:61:f2:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10071dab168e8e53e3cd7df5db8e0f04242e9086
        Validity
            Not Before: May 16 08:00:51 2026 GMT
            Not After : May 17 08:00:51 2026 GMT
        Subject: CN=fd1e91e656f97a29c28786022cbf199214db9463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:62:e8:fa:d6:83:70:2e:f0:04:e7:30:70:e8:
                    bb:3a:8f:12:75:e0:0c:17:9d:1d:5e:8c:1d:be:ff:
                    1e:1b:e0:ad:34:ab:4b:c8:e5:67:64:02:cc:1e:17:
                    18:ed:7c:96:6f:5f:c1:39:c4:2e:ea:da:10:33:94:
                    96:67:cf:bf:d7:c2:71:4a:eb:8f:39:79:45:c0:6b:
                    65:2b:bc:56:36:a4:b1:9b:de:ae:c8:5e:2b:ab:1b:
                    20:47:17:c0:b0:17:0d:69:23:bc:ca:40:e4:47:51:
                    cf:60:42:f5:58:26:bc:a5:14:cb:e7:87:22:32:7f:
                    ca:db:9a:14:41:6e:f0:bb:90:7b:03:f7:00:63:a2:
                    88:7f:b9:29:b6:4b:8b:02:f4:a8:f9:4c:3a:9e:39:
                    7a:b7:74:48:c7:c0:57:0b:4a:8b:eb:60:63:aa:bc:
                    fa:32:a1:b4:ad:55:ed:68:2d:2e:83:e7:3a:89:61:
                    5b:4f:4f:80:b4:3c:fc:2d:12:cb:e1:15:b3:54:b2:
                    56:db:68:57:04:10:8b:62:0d:c7:94:53:6d:d4:5b:
                    56:42:c1:6b:de:50:56:cd:14:5f:71:30:1d:52:1f:
                    04:28:c1:79:80:44:62:db:9d:c7:6b:f9:dd:68:d7:
                    c3:4d:b2:b9:d5:e6:0a:98:97:38:39:e9:46:d4:d0:
                    dd:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:1E:91:E6:56:F9:7A:29:C2:87:86:02:2C:BF:19:92:14:DB:94:63
            X509v3 Authority Key Identifier:
                keyid:10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:9b:2f:af:59:8c:78:2f:2e:18:f2:1a:1c:97:09:d7:50:92:
         43:f3:b4:a3:bd:dc:9d:91:cc:95:ff:dc:ae:0e:3d:95:7a:71:
         22:11:58:22:10:be:bb:a9:03:0e:7c:af:78:24:df:c0:29:df:
         61:f2:99:8d:ed:4a:65:bc:73:3d:d9:3c:93:52:55:c9:3f:7e:
         af:f3:10:54:d9:b2:6f:d4:f9:45:e5:e2:7d:23:89:9a:ec:a7:
         23:dc:70:22:db:18:04:59:bc:b4:44:b3:e3:2d:9d:cc:b3:72:
         ee:df:77:df:ee:87:94:ce:42:1f:6b:65:a3:6b:a3:f1:de:53:
         33:09:fe:30:ae:1a:ab:c6:f9:f3:a7:55:ad:bb:a2:a7:81:af:
         21:b7:ca:08:59:a1:63:a7:18:2a:cd:4f:4e:7b:ce:8e:16:ef:
         cc:17:8c:12:98:47:6a:6b:3e:5a:b3:5c:34:e1:49:f7:34:2d:
         fc:53:08:8a:14:d1:0e:fa:93:f8:a1:6f:b3:d7:df:64:e1:86:
         52:82:b3:eb:5f:67:b1:9d:de:9c:f6:7b:37:3f:50:76:71:58:
         a1:f5:76:a2:37:c0:87:18:41:65:e5:89:b2:dc:ff:3b:c4:07:
         f8:e7:9e:a7:9b:89:8b:cf:30:15:d6:53:a2:94:e9:c1:31:b9:
         23:38:ce:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vzWiI7gXCl4FFq5N7YfI4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMDcxZGFiMTY4ZThlNTNlM2NkN2RmNWRiOGUwZjA0MjQy
ZTkwODYwHhcNMjYwNTE2MDgwMDUxWhcNMjYwNTE3MDgwMDUxWjAzMTEwLwYDVQQD
EyhmZDFlOTFlNjU2Zjk3YTI5YzI4Nzg2MDIyY2JmMTk5MjE0ZGI5NDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGLo+taDcC7wBOcwcOi7Oo8SdeAM
F50dXowdvv8eG+CtNKtLyOVnZALMHhcY7XyWb1/BOcQu6toQM5SWZ8+/18JxSuuP
OXlFwGtlK7xWNqSxm96uyF4rqxsgRxfAsBcNaSO8ykDkR1HPYEL1WCa8pRTL54ci
Mn/K25oUQW7wu5B7A/cAY6KIf7kptkuLAvSo+Uw6njl6t3RIx8BXC0qL62Bjqrz6
MqG0rVXtaC0ug+c6iWFbT0+AtDz8LRLL4RWzVLJW22hXBBCLYg3HlFNt1FtWQsFr
3lBWzRRfcTAdUh8EKMF5gERi253Ha/ndaNfDTbK51eYKmJc4OelG1NDdfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0ekeZW+XopwoeGAiy/GZIU25RjMB8GA1UdIwQY
MBaAFBAHHasWjo5T48199duODwQkLpCGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUFjZHF4YU9qbFBqelgzMTI0NFBCQ1F1a0lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jYmU2YjctNWUxMy00MDk0LWI5Nzkt
MmZlNDEyZTNlYWI0LzEvRUFjZHF4YU9qbFBqelgzMTI0NFBCQ1F1a0lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9jYmU2YjctNWUxMy00MDk0LWI5NzktMmZlNDEyZTNlYWI0
LzEvRUFjZHF4YU9qbFBqelgzMTI0NFBCQ1F1a0lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF5svr1mM
eC8uGPIaHJcJ11CSQ/O0o73cnZHMlf/crg49lXpxIhFYIhC+u6kDDnyveCTfwCnf
YfKZje1KZbxzPdk8k1JVyT9+r/MQVNmyb9T5ReXifSOJmuynI9xwItsYBFm8tESz
4y2dzLNy7t933+6HlM5CH2tlo2uj8d5TMwn+MK4aq8b586dVrbuip4GvIbfKCFmh
Y6cYKs1PTnvOjhbvzBeMEphHams+WrNcNOFJ9zQt/FMIihTRDvqT+KFvs9ffZOGG
UoKz619nsZ3enPZ7Nz9QdnFYofV2ojfAhxhBZeWJstz/O8QH+Oeep5uJi88wFdZT
opTpwTG5IzjOjA==
-----END CERTIFICATE-----
Generated at Sat May 16 15:39:46 2026 by rpki-client