Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
File:                     CNJq20T1SwmSx1PrF7q-gSsHSGM.mft (raw, json)
Hash identifier:          olzgUh6YZIOQZSnP0liGtwksLCOvg5m2AMLQHClrCGA=
Subject key identifier:   4F:FD:34:42:1C:D6:FF:12:4D:86:F7:42:6F:3C:C0:FD:B1:46:FC:B7
Authority key identifier: 08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
Certificate issuer:       /CN=08d26adb44f54b0992c753eb17babe812b074863
Certificate serial:       019E2F96C188FD32AC2F0F2767680BFF2C10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
Manifest number:          190C
Signing time:             Sat 16 May 2026 07:01:09 +0000
Manifest this update:     Sat 16 May 2026 07:01:09 +0000
Manifest next update:     Sun 17 May 2026 07:01:09 +0000
Files and hashes:         1: CNJq20T1SwmSx1PrF7q-gSsHSGM.crl (hash: rtGuBdm9RALRop5cJ/glM6tUB88XmxlGf3XGUROF5T4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:96:c1:88:fd:32:ac:2f:0f:27:67:68:0b:ff:2c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d26adb44f54b0992c753eb17babe812b074863
        Validity
            Not Before: May 16 07:01:09 2026 GMT
            Not After : May 17 07:01:09 2026 GMT
        Subject: CN=4ffd34421cd6ff124d86f7426f3cc0fdb146fcb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ff:91:95:e8:a4:d6:d5:59:81:f0:90:82:0e:
                    fb:51:e5:a2:c1:ea:61:db:97:b2:d9:cc:ff:67:ba:
                    cb:46:b0:68:e6:2c:43:ce:e4:ac:8e:fa:c7:26:2a:
                    b9:32:7c:ff:b6:61:ab:67:fd:23:8b:80:58:3c:c4:
                    f6:49:c8:62:50:a7:b5:6d:a4:fe:aa:03:6c:c7:94:
                    cf:7f:8b:2a:e9:b4:22:e0:0a:26:02:25:dd:b2:15:
                    57:a7:46:a2:5d:13:5b:2c:f4:72:9b:1d:13:1f:86:
                    cf:e1:62:65:38:0a:51:7c:81:53:1d:66:37:8b:73:
                    95:5d:f6:37:36:5e:e1:6f:ea:09:08:49:81:ab:b1:
                    33:2b:c2:29:dd:14:f1:e7:cd:c2:ab:89:c7:5f:c9:
                    67:27:fe:b5:36:bb:d8:26:57:21:1f:0a:37:ce:e9:
                    42:7a:d6:34:7a:44:b5:67:5d:ef:19:d2:34:44:e9:
                    b3:6b:40:60:5b:bc:62:6d:1a:ac:2a:ac:43:43:d4:
                    d0:39:3a:5f:46:77:7b:48:f6:6e:eb:aa:ac:c4:46:
                    d1:fc:ff:47:5f:63:7b:6c:f8:bc:50:3e:7b:a1:00:
                    ca:a3:3e:8d:82:e1:b0:1a:76:28:b2:f3:fc:b2:b1:
                    15:22:71:9a:40:b6:1e:7b:89:10:94:e8:d1:d8:31:
                    14:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:FD:34:42:1C:D6:FF:12:4D:86:F7:42:6F:3C:C0:FD:B1:46:FC:B7
            X509v3 Authority Key Identifier:
                keyid:08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:3d:37:06:43:b2:21:29:90:8e:17:35:6d:31:3d:bc:c7:e3:
         44:9c:6f:43:7c:f7:a9:d9:3d:86:bf:a6:f5:7b:5c:84:01:6c:
         c8:e8:8d:b9:21:d1:fa:50:df:86:37:1b:7a:b5:c1:eb:5c:fe:
         e0:9f:b9:bd:04:de:73:82:fd:92:8b:79:53:fc:de:2a:96:80:
         78:72:8e:a0:be:48:9d:87:72:82:2e:1b:e2:77:d0:64:4f:f3:
         fe:d2:91:89:37:70:fc:ab:27:93:1e:2a:83:dc:e4:bd:93:b6:
         4a:1a:56:a0:43:f3:0d:2e:9b:a1:be:62:68:14:69:9d:51:72:
         8f:dd:7e:39:55:04:43:cb:b7:ff:78:52:80:d6:9e:d7:cd:d5:
         53:99:1f:d6:57:d2:24:43:1b:ec:a3:79:93:a0:60:8c:24:3e:
         cf:11:c3:d2:2b:34:6d:6c:6c:43:d2:0f:c9:d1:03:47:9f:1c:
         10:4b:3e:38:8a:cb:05:6c:2e:c7:fb:33:be:8e:d9:15:98:d9:
         92:ee:07:cf:7a:71:fb:4c:90:b4:f9:49:c2:aa:e1:c6:6e:ff:
         71:73:d4:e7:59:f8:c4:42:1f:8b:16:bb:3c:e1:b2:9d:ec:1f:
         94:50:1b:1c:7c:53:69:43:17:66:b9:90:0f:2b:ac:c7:b1:e7:
         c1:26:42:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:36 2026 by rpki-client