Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
File:                     ESe41aUEAgm4mTvyAxeJw7K6t8c.mft (raw, json)
Hash identifier:          NONFg4LyV2/D+6yhs1f4G6ABWZgDNZR1dp2HzzlFUxE=
Subject key identifier:   C4:AA:51:FC:D4:04:44:34:6C:8B:48:10:E1:43:69:05:6B:5C:06:DE
Authority key identifier: 11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7
Certificate issuer:       /CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7
Certificate serial:       019E2F29875150E64288533046817D155A1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
Manifest number:          190F
Signing time:             Sat 16 May 2026 05:01:51 +0000
Manifest this update:     Sat 16 May 2026 05:01:51 +0000
Manifest next update:     Sun 17 May 2026 05:01:51 +0000
Files and hashes:         1: ESe41aUEAgm4mTvyAxeJw7K6t8c.crl (hash: Ck2XUTyO3M4Eqgnexwq8+Iuq2u/CWgKKQHQ5k7vD/hU=)
                          2: Vj-jl645n2kvkyifqeqjUT8mbTk.roa (hash: sy/gtDfl2XECiDgxiAjMKqlkJRB/dQlkZ9hhKjq79wQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:29:87:51:50:e6:42:88:53:30:46:81:7d:15:5a:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7
        Validity
            Not Before: May 16 05:01:51 2026 GMT
            Not After : May 17 05:01:51 2026 GMT
        Subject: CN=c4aa51fcd40444346c8b4810e14369056b5c06de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b8:47:1c:96:f4:3f:6c:29:2b:f1:3c:72:fb:
                    61:19:e6:be:e8:6c:77:27:f9:03:cd:c9:8b:c2:a7:
                    77:95:fc:a9:4b:05:e1:7e:51:29:2a:ac:6c:90:bf:
                    84:8b:d1:b5:0f:28:5d:bf:41:61:47:60:39:75:0e:
                    d3:ca:7b:29:7c:8b:5f:b0:e1:3e:fc:90:26:28:6b:
                    a1:60:0b:39:fb:c7:d2:c4:54:2b:35:d8:f9:ba:fa:
                    8b:ae:e3:7c:ce:3a:a5:c0:fd:e6:33:a0:b8:02:bd:
                    f1:ac:93:bc:1f:7d:76:af:ee:cb:9c:23:5c:9a:ba:
                    b9:11:c2:ba:fd:8f:54:31:98:a7:c5:26:c1:0d:11:
                    ef:4e:7c:9c:52:04:0c:0a:04:c4:9c:1c:a7:b6:63:
                    28:49:1f:6a:91:db:f3:e2:11:b9:6b:db:f7:56:b8:
                    b8:af:3b:17:e7:7f:d7:ce:86:18:6e:6a:a9:47:81:
                    34:99:a8:77:8e:2f:79:92:7d:03:6f:f1:8d:06:7d:
                    76:b4:49:32:52:74:2f:93:72:a5:31:64:fc:68:79:
                    10:a5:09:12:dd:89:1e:89:73:4e:45:46:68:13:6b:
                    d5:6f:0e:44:75:e1:d3:2e:bd:b4:81:3a:5d:f1:2a:
                    26:37:a2:34:d1:df:89:bf:1f:e6:0d:8c:2d:4e:ea:
                    7d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:AA:51:FC:D4:04:44:34:6C:8B:48:10:E1:43:69:05:6B:5C:06:DE
            X509v3 Authority Key Identifier:
                keyid:11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:6d:c4:72:cd:cd:db:6d:e0:ed:57:2e:9b:21:2b:7f:9d:c1:
         24:a5:1e:f1:93:b8:96:7d:bd:be:3b:a4:a9:83:82:52:03:c0:
         29:60:93:6c:a9:5d:3d:a5:60:76:fd:59:c6:9d:e7:76:cd:80:
         d5:7e:37:f2:1a:71:a5:54:85:72:60:98:85:1e:44:a2:5c:0f:
         0b:c5:70:ee:1b:90:ec:cb:7b:98:e2:c1:7a:39:e4:c9:6a:61:
         1a:13:0d:2a:78:d6:a6:30:8d:98:86:e5:6d:82:d3:ce:96:8b:
         be:9b:13:9f:a6:c0:67:d7:1b:4e:fa:45:89:49:71:54:d6:36:
         b1:9f:6d:c5:af:a5:f6:d1:29:45:84:be:93:c2:26:7c:41:11:
         2c:68:4f:8c:00:1a:4f:16:5b:af:f2:d6:3c:9e:67:a6:eb:e0:
         9f:86:91:56:b7:5f:4a:a2:50:56:2a:9b:0f:74:b4:c3:87:32:
         a3:0e:f1:f0:f9:b0:42:3f:35:72:55:01:bc:a9:b6:ab:4b:db:
         fd:e7:b9:19:e7:02:c9:9b:50:bb:10:2f:1b:30:af:20:91:17:
         77:4b:4f:18:8c:0e:24:6e:75:75:e1:1e:0c:5e:a7:cb:24:72:
         bc:8d:65:7c:8e:7a:fa:1e:e2:50:80:d4:b2:71:dd:46:70:69:
         1e:a4:35:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:24 2026 by rpki-client